Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
File: SYeUHnTBwD56ujuHhTAJXrb6h04.mft (raw, json)
Hash identifier: SyyYEit3dzWIYV+Q59flSscIN74NyxieJbXjdL9zfGs=
Subject key identifier: 8F:1B:AB:87:C6:83:C6:3F:6F:17:5B:AF:53:EF:94:1C:98:AA:27:78
Authority key identifier: 49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
Certificate issuer: /CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Certificate serial: 0194BCAA0DF945A66337400B79237D767822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
Manifest number: 0880
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: SYeUHnTBwD56ujuHhTAJXrb6h04.crl (hash: sD6jOruKLy3KrEPUWUTWCwFBJdkdCWeAKCTiiJffZh0=)
2: YfS0xxF77ZhQV3QSBSD327w9vqQ.roa (hash: 0e3mn6GbJASLxqxrx2/syEPt1SE/dgVSOpIPyQ5DipQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0d:f9:45:a6:63:37:40:0b:79:23:7d:76:78:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=8f1bab87c683c63f6f175baf53ef941c98aa2778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:c8:45:d4:fc:3c:e2:08:b0:88:0e:e1:7c:
9a:73:c0:7f:1e:93:2e:a7:e7:02:50:f7:28:8d:fa:
25:f0:c2:ea:af:a7:aa:84:47:08:1d:8f:92:0b:1c:
5e:eb:c7:19:80:33:e5:d9:02:a6:09:35:1b:56:22:
62:40:63:0c:76:bd:a6:e8:87:70:be:fa:71:1b:68:
05:03:df:ec:ae:86:4b:fa:f5:10:a6:31:21:a3:fa:
ff:b0:bc:04:4c:03:ce:41:9d:83:03:59:f5:bc:2f:
10:a8:28:b0:a4:32:f1:51:cf:12:2f:18:60:e4:0a:
64:4f:98:50:19:00:d2:a4:dd:49:c1:c4:13:cd:a1:
9d:db:5b:b5:25:fd:7f:e1:65:4a:3b:77:2d:c7:c3:
79:6e:f7:17:40:cc:8a:95:de:b6:ca:b6:84:9b:96:
a2:3e:02:3c:bc:84:9d:95:f4:9e:89:68:3a:ea:1e:
78:99:25:89:f4:d4:eb:2e:ed:99:bb:57:49:ed:bd:
94:10:c8:ac:53:ce:45:de:1b:90:ed:f9:49:f4:f6:
09:f3:70:99:19:89:af:bb:12:48:0b:f5:30:2c:3e:
09:75:04:9e:d0:87:e5:65:27:2f:d1:2d:12:28:d8:
2d:5f:3b:49:75:88:5d:ba:76:c5:57:43:fc:63:b7:
d3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1B:AB:87:C6:83:C6:3F:6F:17:5B:AF:53:EF:94:1C:98:AA:27:78
X509v3 Authority Key Identifier:
keyid:49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:16:66:6d:64:ca:26:e6:19:7f:9b:2c:c2:b8:5d:74:49:3c:
c2:38:c9:ae:95:b0:36:b1:1d:2c:75:e0:f7:83:83:dc:15:04:
ac:f4:60:78:1f:c4:b3:de:1e:39:58:00:2b:3f:48:eb:de:11:
e9:1f:b3:1e:02:67:de:ef:b0:94:e4:62:33:ec:e5:82:da:5a:
ff:5d:d9:93:1f:8c:82:b9:84:c2:cf:05:69:15:89:89:f0:0b:
27:73:18:b1:84:00:a4:b2:3e:d1:64:98:18:88:ee:62:de:8d:
e4:83:df:db:5a:66:a4:b2:d6:fc:18:e3:d4:46:0c:1a:93:fb:
8a:cc:2b:07:b2:25:a0:c8:a2:cb:1b:8f:e3:c9:10:92:6c:89:
c1:18:d8:89:16:ad:6d:c7:45:c7:8e:f8:e0:a4:ee:3d:5f:16:
a5:1f:d2:6e:90:d4:58:f1:46:2c:a7:f8:b5:90:0e:e9:2e:ad:
58:66:1d:39:b3:d1:98:7b:68:eb:4c:4f:b0:87:2a:b6:4e:e4:
46:8b:9d:59:96:1c:b5:08:92:5e:90:78:1a:da:39:20:76:52:
c6:68:01:c1:7a:f1:42:fb:56:16:8a:27:eb:ee:70:ed:f9:fd:
06:6b:ab:e2:d9:3f:5e:97:6c:5d:e1:c0:12:4b:50:e1:cc:29:
b8:c4:fc:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qg35RaZjN0ALeSN9dngiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODc5NDFlNzRjMWMwM2U3YWJhM2I4Nzg1MzAwOTVlYjZm
YTg3NGUwHhcNMjUwMTMxMTQwMDQ4WhcNMjUwMjAxMTQwMDQ4WjAzMTEwLwYDVQQD
Eyg4ZjFiYWI4N2M2ODNjNjNmNmYxNzViYWY1M2VmOTQxYzk4YWEyNzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3PIRdT8POIIsIgO4Xyac8B/HpMu
p+cCUPcojfol8MLqr6eqhEcIHY+SCxxe68cZgDPl2QKmCTUbViJiQGMMdr2m6Idw
vvpxG2gFA9/sroZL+vUQpjEho/r/sLwETAPOQZ2DA1n1vC8QqCiwpDLxUc8SLxhg
5ApkT5hQGQDSpN1JwcQTzaGd21u1Jf1/4WVKO3ctx8N5bvcXQMyKld62yraEm5ai
PgI8vISdlfSeiWg66h54mSWJ9NTrLu2Zu1dJ7b2UEMisU85F3huQ7flJ9PYJ83CZ
GYmvuxJIC/UwLD4JdQSe0IflZScv0S0SKNgtXztJdYhdunbFV0P8Y7fTHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8bq4fGg8Y/bxdbr1PvlByYqid4MB8GA1UdIwQY
MBaAFEmHlB50wcA+ero7h4UwCV62+odOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83MDc3N2ItNjhiMC00MmE4LTllOWQt
ZThhZGE1MWVlOGZmLzEvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83MDc3N2ItNjhiMC00MmE4LTllOWQtZThhZGE1MWVlOGZm
LzEvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxZmbWTK
JuYZf5sswrhddEk8wjjJrpWwNrEdLHXg94OD3BUErPRgeB/Es94eOVgAKz9I694R
6R+zHgJn3u+wlORiM+zlgtpa/13Zkx+MgrmEws8FaRWJifALJ3MYsYQApLI+0WSY
GIjuYt6N5IPf21pmpLLW/Bjj1EYMGpP7iswrB7IloMiiyxuP48kQkmyJwRjYiRat
bcdFx4744KTuPV8WpR/SbpDUWPFGLKf4tZAO6S6tWGYdObPRmHto60xPsIcqtk7k
RoudWZYctQiSXpB4Gto5IHZSxmgBwXrxQvtWFoon6+5w7fn9Bmur4tk/XpdsXeHA
EktQ4cwpuMT87w==
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:07:18 2025 by rpki-client