
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft
File: SPWbrFHUhS0vyW6LTPu5__i0qTk.mft (raw, json)
Hash identifier: CFKk1Ii2bYXqRmLPjDlWzfrnLgAnOVMHF3xjVlu+9eA=
Subject key identifier: 37:43:C5:6E:40:6D:1A:38:99:57:00:E7:FE:7E:91:BA:3A:CB:C9:18
Authority key identifier: 48:F5:9B:AC:51:D4:85:2D:2F:C9:6E:8B:4C:FB:B9:FF:F8:B4:A9:39
Certificate issuer: /CN=48f59bac51d4852d2fc96e8b4cfbb9fff8b4a939
Certificate serial: 0194BC04EA6F745C7352754E9BDCBCF61879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft
Manifest number: 11D1
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: 5nrGKW5FRerRHdO1Dy3ViuoBo2w.roa (hash: +MtkJFHMNS/IgvjNh3QorGfog9rrCct1jj019c8Teh4=)
2: SPWbrFHUhS0vyW6LTPu5__i0qTk.crl (hash: kaPwb8FGQdvdtrXaGYXq4t0xsxxGiqjNGuLWo0IULsI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ea:6f:74:5c:73:52:75:4e:9b:dc:bc:f6:18:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f59bac51d4852d2fc96e8b4cfbb9fff8b4a939
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=3743c56e406d1a38995700e7fe7e91ba3acbc918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4b:94:23:63:59:95:f6:5d:1c:80:62:6e:d7:
75:c4:15:e2:86:bb:f7:ad:2c:7a:55:06:54:b4:ae:
18:78:8a:e1:b8:f4:e6:6a:e4:9e:b1:77:88:ff:52:
e3:f1:9d:3b:6a:9d:82:4c:b6:25:84:ce:60:02:f5:
c4:f0:69:92:50:62:08:e5:61:eb:85:56:2a:3f:e8:
d3:54:89:17:b0:ca:6c:74:da:19:74:d1:b4:39:21:
94:c2:4a:9a:04:b4:7a:d5:c1:55:9b:8a:42:e7:ca:
59:b8:28:40:47:e4:b1:18:18:43:cd:c3:32:b7:ae:
5a:1f:a9:4e:2e:28:8f:6c:63:71:7c:b0:3b:c5:2e:
f1:d7:93:6f:43:c9:3f:35:9d:ed:ad:c0:45:2b:17:
0d:79:f5:5a:4e:c8:27:df:da:4c:6b:21:2f:3f:ce:
0d:de:dd:b1:a6:bd:de:47:25:ae:fc:52:e7:0e:7e:
f7:ed:c8:33:73:84:44:44:18:55:61:ce:09:61:11:
37:03:b8:27:fe:15:fa:b8:7f:88:65:2d:df:4d:1d:
23:ab:a7:07:f4:0e:17:ad:6d:19:4e:65:2a:e8:f1:
61:ff:08:1d:ba:85:0f:83:6d:23:21:3d:a1:5d:3d:
53:63:0f:1e:f7:07:43:fb:35:4c:93:38:42:41:1b:
9b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:43:C5:6E:40:6D:1A:38:99:57:00:E7:FE:7E:91:BA:3A:CB:C9:18
X509v3 Authority Key Identifier:
keyid:48:F5:9B:AC:51:D4:85:2D:2F:C9:6E:8B:4C:FB:B9:FF:F8:B4:A9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:57:01:6a:8d:5a:cf:ee:18:2c:ab:34:86:14:9a:27:d0:1f:
4a:ef:4f:3a:65:5d:c2:64:95:28:b6:5f:d5:b9:e1:67:18:a9:
97:0b:61:64:aa:28:18:f0:a4:12:a5:56:13:6d:59:a0:0b:b6:
e8:7d:3f:18:d8:f5:97:09:49:d1:4c:75:bc:8b:66:2e:f9:94:
00:d9:34:3e:31:88:31:ab:e4:4d:ef:e8:a3:75:c6:e7:c1:62:
9b:59:51:51:58:0d:e4:27:ca:e2:cc:ca:f0:21:89:f1:d1:31:
9b:9d:e4:cd:8d:d7:79:f7:9a:e0:f2:3d:64:f3:75:92:59:d5:
37:63:89:79:50:91:df:40:52:d9:5d:6e:a5:5b:e6:48:78:b0:
11:31:c3:eb:90:79:6d:dc:dd:d7:2d:8c:42:28:86:0e:8d:c9:
0b:5a:2d:94:68:b6:78:27:fb:bd:ef:c8:d1:df:50:9a:70:59:
5c:83:c6:e7:85:10:88:4c:52:4c:ee:a3:17:d7:54:bf:e6:cb:
eb:d0:2c:bf:11:fe:5c:5e:8f:95:7b:ab:cd:31:3a:32:08:61:
90:e3:4b:b0:10:64:ec:9f:74:69:7b:41:e9:9c:41:f0:85:4b:
56:36:f5:1b:d2:a2:af:e0:1c:d5:c8:30:0d:fc:af:bb:8e:c5:
87:59:60:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BOpvdFxzUnVOm9y89hh5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZjU5YmFjNTFkNDg1MmQyZmM5NmU4YjRjZmJiOWZmZjhi
NGE5MzkwHhcNMjUwMTMxMTEwMDI2WhcNMjUwMjAxMTEwMDI2WjAzMTEwLwYDVQQD
EygzNzQzYzU2ZTQwNmQxYTM4OTk1NzAwZTdmZTdlOTFiYTNhY2JjOTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0uUI2NZlfZdHIBibtd1xBXihrv3
rSx6VQZUtK4YeIrhuPTmauSesXeI/1Lj8Z07ap2CTLYlhM5gAvXE8GmSUGII5WHr
hVYqP+jTVIkXsMpsdNoZdNG0OSGUwkqaBLR61cFVm4pC58pZuChAR+SxGBhDzcMy
t65aH6lOLiiPbGNxfLA7xS7x15NvQ8k/NZ3trcBFKxcNefVaTsgn39pMayEvP84N
3t2xpr3eRyWu/FLnDn737cgzc4RERBhVYc4JYRE3A7gn/hX6uH+IZS3fTR0jq6cH
9A4XrW0ZTmUq6PFh/wgduoUPg20jIT2hXT1TYw8e9wdD+zVMkzhCQRubjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdDxW5AbRo4mVcA5/5+kbo6y8kYMB8GA1UdIwQY
MBaAFEj1m6xR1IUtL8lui0z7uf/4tKk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1BXYnJGSFVoUzB2eVc2TFRQdTVfX2kwcVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80MDQ4NGMtYjk5Zi00ZGJiLWI1ZGIt
OGMyZWFjMDNkZjg2LzEvU1BXYnJGSFVoUzB2eVc2TFRQdTVfX2kwcVRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy80MDQ4NGMtYjk5Zi00ZGJiLWI1ZGItOGMyZWFjMDNkZjg2
LzEvU1BXYnJGSFVoUzB2eVc2TFRQdTVfX2kwcVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1cBao1a
z+4YLKs0hhSaJ9AfSu9POmVdwmSVKLZf1bnhZxiplwthZKooGPCkEqVWE21ZoAu2
6H0/GNj1lwlJ0Ux1vItmLvmUANk0PjGIMavkTe/oo3XG58Fim1lRUVgN5CfK4szK
8CGJ8dExm53kzY3Xefea4PI9ZPN1klnVN2OJeVCR30BS2V1upVvmSHiwETHD65B5
bdzd1y2MQiiGDo3JC1otlGi2eCf7ve/I0d9QmnBZXIPG54UQiExSTO6jF9dUv+bL
69AsvxH+XF6PlXurzTE6MghhkONLsBBk7J90aXtB6ZxB8IVLVjb1G9Kir+Ac1cgw
Dfyvu47Fh1lgkQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:28 2025 by rpki-client