Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
File: SnqRfdz8JujIezCFi28H8po9tD4.mft (raw, json)
Hash identifier: K6QHQ3aUCaeQ+RN9J7UTRVzqIx1t6k55Yv4qbJQPy/4=
Subject key identifier: 41:0B:EC:0C:8D:41:BC:CB:D5:AD:0F:BA:56:D2:87:DF:28:C9:5D:7C
Authority key identifier: 4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
Certificate issuer: /CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Certificate serial: 0194BD174E226ED4F6F0F1B3F48BC48BDCC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
Manifest number: 13DA
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: P2xh5AQS8g63oefSEJQg-RsTiE4.roa (hash: fyGkFWMTxDql0OoutRE6aQhGU1Ek1V6QoGNhwV3E3j8=)
2: SnqRfdz8JujIezCFi28H8po9tD4.crl (hash: A9OG9WNk1GC6aw+jzFX4uBXiL6um9QHHhtayb5RIKWw=)
3: wZuLHZACRgaqannQqtWTgy9AnFY.roa (hash: ArTL5+VwNfVl+VzsgeZQzp979burQZd57vVQg0xpNM4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4e:22:6e:d4:f6:f0:f1:b3:f4:8b:c4:8b:dc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=410bec0c8d41bccbd5ad0fba56d287df28c95d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:f7:2a:b5:7d:9d:bb:41:49:ca:02:e6:42:
d1:92:64:05:ad:7c:6c:1d:76:75:fc:8e:62:be:85:
af:e4:62:c2:ac:c0:c0:be:16:70:13:73:f3:76:4e:
73:89:85:0f:9e:5a:35:f4:f1:87:c2:6b:63:4a:51:
09:81:b1:af:2b:30:7d:7d:9d:0f:c5:db:44:15:1f:
8d:0f:e4:a0:6e:77:1a:8e:fb:70:5b:fe:09:36:c3:
71:47:49:de:8b:36:71:75:0a:9b:af:01:42:2c:0a:
b4:e7:32:12:fa:8f:d4:f8:c6:e3:73:15:95:9c:54:
d7:06:82:52:2a:c6:bc:50:c7:f9:7f:89:68:da:32:
3a:41:93:54:6c:83:ee:16:40:f8:13:bf:a6:8d:46:
fd:14:28:5a:ff:0d:bf:21:78:14:eb:f0:fe:87:b3:
c8:3f:db:e0:8b:2e:16:db:ae:9e:af:21:87:2d:dc:
1e:b7:eb:3f:3a:a3:e8:80:27:b0:95:99:c4:d7:b3:
95:be:80:76:53:39:f1:6e:04:38:96:0c:aa:34:26:
84:13:56:82:3b:cc:b0:f6:2b:17:e1:90:a5:eb:00:
21:ba:3b:b4:d6:78:79:25:0c:ab:be:fe:08:27:5b:
01:9c:c7:db:34:40:d0:b2:0e:c6:b6:c4:37:65:f8:
3f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0B:EC:0C:8D:41:BC:CB:D5:AD:0F:BA:56:D2:87:DF:28:C9:5D:7C
X509v3 Authority Key Identifier:
keyid:4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:44:7d:5c:32:10:b0:e1:49:37:60:ae:f4:a0:c7:e9:b7:85:
bd:c3:46:b2:0e:b5:8e:1f:a0:c5:e4:57:22:ec:9a:ad:4e:46:
2f:37:79:fc:3f:55:b3:58:88:34:a6:1a:fd:12:92:9c:9c:e1:
d2:b6:7d:a8:0b:8c:81:88:c7:46:30:94:34:c5:29:80:c5:cc:
16:ad:d7:ba:a2:96:b5:04:0b:c3:39:2e:47:9a:21:f5:c2:ca:
12:fb:43:2a:0e:a9:37:e6:23:6f:45:95:ca:8d:fa:d8:7f:8f:
64:b1:02:2c:01:a0:30:2f:b9:7e:2e:1e:99:09:3d:f0:f1:59:
b5:ac:04:ab:27:7a:f0:e9:fd:e9:89:72:f6:70:82:7a:3f:00:
42:cd:31:36:1f:70:55:f1:12:9d:c2:e9:d0:9f:e6:df:67:b9:
77:9b:d2:86:40:66:67:4d:6f:10:b1:c1:55:22:3b:e6:47:9f:
c6:7a:01:cb:8b:b9:e3:e9:f4:78:12:a0:2a:d2:4d:d8:e1:2d:
64:cf:15:6b:43:59:41:3f:d7:40:ab:5c:09:8c:54:a7:d5:ba:
9a:3b:1b:3b:27:9c:cd:ae:e5:35:1e:b9:67:c4:1c:09:ab:e2:
79:82:b6:51:dd:fc:c2:ab:4d:88:f6:63:3d:1a:15:4d:33:8a:
d2:f0:ec:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F04ibtT28PGz9IvEi9zEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhN2E5MTdkZGNmYzI2ZThjODdiMzA4NThiNmYwN2YyOWEz
ZGI0M2UwHhcNMjUwMTMxMTYwMDA4WhcNMjUwMjAxMTYwMDA4WjAzMTEwLwYDVQQD
Eyg0MTBiZWMwYzhkNDFiY2NiZDVhZDBmYmE1NmQyODdkZjI4Yzk1ZDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpj3KrV9nbtBScoC5kLRkmQFrXxs
HXZ1/I5ivoWv5GLCrMDAvhZwE3Pzdk5ziYUPnlo19PGHwmtjSlEJgbGvKzB9fZ0P
xdtEFR+ND+SgbncajvtwW/4JNsNxR0neizZxdQqbrwFCLAq05zIS+o/U+MbjcxWV
nFTXBoJSKsa8UMf5f4lo2jI6QZNUbIPuFkD4E7+mjUb9FCha/w2/IXgU6/D+h7PI
P9vgiy4W266eryGHLdwet+s/OqPogCewlZnE17OVvoB2UznxbgQ4lgyqNCaEE1aC
O8yw9isX4ZCl6wAhuju01nh5JQyrvv4IJ1sBnMfbNEDQsg7GtsQ3Zfg/ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEL7AyNQbzL1a0PulbSh98oyV18MB8GA1UdIwQY
MBaAFEp6kX3c/CboyHswhYtvB/KaPbQ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU25xUmZkejhKdWpJZXpDRmkyOEg4cG85dEQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNGMyYmItNzllYS00ZjM5LWFjODIt
ODIwMTZkZTQyMjEyLzEvU25xUmZkejhKdWpJZXpDRmkyOEg4cG85dEQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8zNGMyYmItNzllYS00ZjM5LWFjODItODIwMTZkZTQyMjEy
LzEvU25xUmZkejhKdWpJZXpDRmkyOEg4cG85dEQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIER9XDIQ
sOFJN2Cu9KDH6beFvcNGsg61jh+gxeRXIuyarU5GLzd5/D9Vs1iINKYa/RKSnJzh
0rZ9qAuMgYjHRjCUNMUpgMXMFq3XuqKWtQQLwzkuR5oh9cLKEvtDKg6pN+Yjb0WV
yo362H+PZLECLAGgMC+5fi4emQk98PFZtawEqyd68On96Yly9nCCej8AQs0xNh9w
VfESncLp0J/m32e5d5vShkBmZ01vELHBVSI75kefxnoBy4u54+n0eBKgKtJN2OEt
ZM8Va0NZQT/XQKtcCYxUp9W6mjsbOyecza7lNR65Z8QcCavieYK2Ud38wqtNiPZj
PRoVTTOK0vDs0g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:01 2025 by rpki-client