Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/743a50-d7f4-42d1-a09d-7ca93ecb2234/1/sgzLpAbArQxb4AB22ZgLNIhWmoo.mft
File: sgzLpAbArQxb4AB22ZgLNIhWmoo.mft (raw, json)
Hash identifier: i49EiWKeyLV3FMyhxr0fkXKy+ia9pv3sJYS59r8SHEE=
Subject key identifier: 95:66:9B:0D:52:1C:71:E6:C5:F2:94:7B:58:6E:95:CC:47:BB:1A:15
Authority key identifier: B2:0C:CB:A4:06:C0:AD:0C:5B:E0:00:76:D9:98:0B:34:88:56:9A:8A
Certificate issuer: /CN=b20ccba406c0ad0c5be00076d9980b3488569a8a
Certificate serial: 0194BBCE50E3B0B0B85138E39AF21BB3C3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgzLpAbArQxb4AB22ZgLNIhWmoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/743a50-d7f4-42d1-a09d-7ca93ecb2234/1/sgzLpAbArQxb4AB22ZgLNIhWmoo.mft
Manifest number: 0F0F
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: sgzLpAbArQxb4AB22ZgLNIhWmoo.crl (hash: lqqtJ4472m8QLKa0YFEebTRyvheA6+Ch174Crg89NVA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:50:e3:b0:b0:b8:51:38:e3:9a:f2:1b:b3:c3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b20ccba406c0ad0c5be00076d9980b3488569a8a
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=95669b0d521c71e6c5f2947b586e95cc47bb1a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:e1:df:98:10:72:2a:2f:af:e5:80:79:3e:
c8:4c:b1:a5:11:ed:c6:f6:78:37:ed:92:ea:a9:4f:
80:09:f6:30:9b:cb:4a:1a:44:53:a6:64:19:f8:d2:
9f:69:db:5f:61:3b:77:e2:7d:f0:50:ac:07:15:30:
fb:c1:4d:5e:4d:b7:b4:7f:b1:0e:45:c9:e7:34:42:
69:23:40:5b:48:7f:02:76:3e:af:7d:c7:3e:92:35:
e9:5c:db:8e:29:23:c2:d6:9f:02:de:d7:86:4d:97:
3a:e0:32:4a:49:b5:31:cd:09:aa:a2:c7:cb:ca:90:
dc:7c:b7:fb:2d:69:4b:24:fc:03:eb:86:a2:77:fa:
72:a1:b5:71:15:b0:9e:7e:cf:52:0e:38:3e:e0:fb:
a3:a3:20:30:0c:d4:99:93:32:bf:af:d5:9b:8a:fd:
30:16:75:72:e5:f3:af:87:0c:3b:da:32:c3:3b:26:
de:b2:41:e0:09:24:1d:ad:e2:ef:aa:94:ae:ae:7c:
7a:d5:b8:0b:e7:fe:e7:fc:98:86:9c:4f:77:ba:83:
d9:e9:28:00:4b:6a:76:29:63:45:eb:ab:e4:92:4b:
6d:a9:0a:ca:91:4c:75:5c:a9:99:3e:d9:01:63:65:
86:2f:24:24:f5:ae:ac:50:c8:d0:81:81:fd:6a:58:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:66:9B:0D:52:1C:71:E6:C5:F2:94:7B:58:6E:95:CC:47:BB:1A:15
X509v3 Authority Key Identifier:
keyid:B2:0C:CB:A4:06:C0:AD:0C:5B:E0:00:76:D9:98:0B:34:88:56:9A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgzLpAbArQxb4AB22ZgLNIhWmoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/743a50-d7f4-42d1-a09d-7ca93ecb2234/1/sgzLpAbArQxb4AB22ZgLNIhWmoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/743a50-d7f4-42d1-a09d-7ca93ecb2234/1/sgzLpAbArQxb4AB22ZgLNIhWmoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8d:3f:d5:b6:71:66:01:5e:09:f0:31:86:34:45:15:30:56:
6f:c2:98:e3:4f:3e:24:bf:18:81:01:01:90:b2:ea:83:2e:53:
4d:a2:03:86:15:cc:e0:09:ea:56:25:08:df:e8:04:72:e5:b4:
13:9e:a7:d4:28:56:c3:95:02:ce:49:48:c4:79:b4:ce:d5:30:
cc:a8:79:ce:6a:93:72:11:70:ae:a8:b1:c9:19:5d:21:af:1a:
13:4c:16:89:34:79:24:e7:83:23:f7:2a:4b:e0:e8:14:f4:2b:
02:72:59:d7:4f:e2:29:ba:0e:85:ec:7b:cb:73:45:77:bb:44:
e0:fa:5e:7e:89:05:70:78:a7:92:57:6e:0e:ad:de:5a:d5:54:
ff:2e:b9:23:32:6f:de:05:cc:0f:6e:06:76:00:2a:e3:16:8a:
65:7a:08:da:f0:e8:cd:1f:7b:5f:01:a8:55:e4:d0:3d:46:27:
1a:d7:fc:f0:a4:ac:05:48:bf:da:5a:e8:91:57:15:bd:00:18:
1b:8c:6e:4e:0a:99:2c:b7:4b:42:96:08:99:89:88:8b:ba:c2:
1e:a9:79:a5:5d:24:68:1b:17:59:10:33:46:e8:49:fa:6a:49:
11:db:c8:9e:9f:6f:9e:9c:dd:00:ce:81:52:9e:3e:98:4d:4b:
5b:5c:f1:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zlDjsLC4UTjjmvIbs8P3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMGNjYmE0MDZjMGFkMGM1YmUwMDA3NmQ5OTgwYjM0ODg1
NjlhOGEwHhcNMjUwMTMxMTAwMDQ3WhcNMjUwMjAxMTAwMDQ3WjAzMTEwLwYDVQQD
Eyg5NTY2OWIwZDUyMWM3MWU2YzVmMjk0N2I1ODZlOTVjYzQ3YmIxYTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPXh35gQciovr+WAeT7ITLGlEe3G
9ng37ZLqqU+ACfYwm8tKGkRTpmQZ+NKfadtfYTt34n3wUKwHFTD7wU1eTbe0f7EO
RcnnNEJpI0BbSH8Cdj6vfcc+kjXpXNuOKSPC1p8C3teGTZc64DJKSbUxzQmqosfL
ypDcfLf7LWlLJPwD64aid/pyobVxFbCefs9SDjg+4PujoyAwDNSZkzK/r9Wbiv0w
FnVy5fOvhww72jLDOybeskHgCSQdreLvqpSurnx61bgL5/7n/JiGnE93uoPZ6SgA
S2p2KWNF66vkkkttqQrKkUx1XKmZPtkBY2WGLyQk9a6sUMjQgYH9alg0QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVmmw1SHHHmxfKUe1hulcxHuxoVMB8GA1UdIwQY
MBaAFLIMy6QGwK0MW+AAdtmYCzSIVpqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2d6THBBYkFyUXhiNEFCMjJaZ0xOSWhXbW9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83NDNhNTAtZDdmNC00MmQxLWEwOWQt
N2NhOTNlY2IyMjM0LzEvc2d6THBBYkFyUXhiNEFCMjJaZ0xOSWhXbW9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83NDNhNTAtZDdmNC00MmQxLWEwOWQtN2NhOTNlY2IyMjM0
LzEvc2d6THBBYkFyUXhiNEFCMjJaZ0xOSWhXbW9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE40/1bZx
ZgFeCfAxhjRFFTBWb8KY408+JL8YgQEBkLLqgy5TTaIDhhXM4AnqViUI3+gEcuW0
E56n1ChWw5UCzklIxHm0ztUwzKh5zmqTchFwrqixyRldIa8aE0wWiTR5JOeDI/cq
S+DoFPQrAnJZ10/iKboOhex7y3NFd7tE4PpefokFcHinklduDq3eWtVU/y65IzJv
3gXMD24GdgAq4xaKZXoI2vDozR97XwGoVeTQPUYnGtf88KSsBUi/2lrokVcVvQAY
G4xuTgqZLLdLQpYImYmIi7rCHql5pV0kaBsXWRAzRuhJ+mpJEdvInp9vnpzdAM6B
Up4+mE1LW1zxdQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:49 2025 by rpki-client