Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a71248-a465-40d4-a2cf-a41b50aa272d/1/SyXfhiA3QkPjxeqyVVCvJODv9Iw.mft
File: SyXfhiA3QkPjxeqyVVCvJODv9Iw.mft (raw, json)
Hash identifier: eUSfAhu+cFImR8nv3EyxiVv0kknA32MXDfwfoydvhEA=
Subject key identifier: DB:46:1D:6F:25:F0:D7:10:CB:00:78:E5:F2:98:AF:EF:81:39:DB:45
Authority key identifier: 4B:25:DF:86:20:37:42:43:E3:C5:EA:B2:55:50:AF:24:E0:EF:F4:8C
Certificate issuer: /CN=4b25df8620374243e3c5eab25550af24e0eff48c
Certificate serial: 0194BD4EA949EEA55D3A2D43751486F84F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyXfhiA3QkPjxeqyVVCvJODv9Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a71248-a465-40d4-a2cf-a41b50aa272d/1/SyXfhiA3QkPjxeqyVVCvJODv9Iw.mft
Manifest number: 0B42
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: 4fhMcxqZft6BZ9fRgxnz8D-3Rjg.roa (hash: x/UT9iVMrFXYt0bA6ZGg+tJGv54SMCnK8XbBkWjAHsk=)
2: SyXfhiA3QkPjxeqyVVCvJODv9Iw.crl (hash: ae745lmA5+yM+RNjBB1e901MDd+ucknE6mAkqVAloP4=)
3: r6yE4xsEP2nk8bhnU6JLqIojHRE.roa (hash: wfYcyjtmeOZql+vdku9sv4NfFmu1SJxHS5aDVoKI+Kk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a9:49:ee:a5:5d:3a:2d:43:75:14:86:f8:4f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b25df8620374243e3c5eab25550af24e0eff48c
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=db461d6f25f0d710cb0078e5f298afef8139db45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:14:5a:80:e2:a8:34:0b:28:7e:53:23:91:c9:
25:61:60:36:4d:2f:e0:ce:73:f3:89:30:c5:56:89:
25:8f:cb:33:e3:fe:66:3f:10:1f:3e:44:2b:0e:e0:
c0:1b:6f:77:32:ef:5e:04:68:af:ee:ab:4b:28:d8:
37:49:b3:3d:08:ac:b8:b7:fa:0a:e9:4b:7c:57:69:
4e:5f:90:a5:d2:30:6a:7a:b2:32:4e:5d:ba:8c:57:
b3:e2:15:fd:a4:0e:15:35:4e:5f:61:2f:25:81:f1:
41:40:98:31:c7:ae:83:3e:26:13:29:9f:86:f1:93:
af:b1:37:55:1a:21:e4:c4:92:c9:73:85:74:6a:fc:
8c:bd:87:54:83:64:52:cf:31:de:0d:4f:1d:b4:b6:
05:3e:ad:46:4c:78:72:92:d8:da:1a:9f:50:a0:83:
1b:54:8a:80:38:b6:52:37:23:aa:45:f8:94:42:10:
cf:1f:31:d4:6a:0a:6d:1c:18:f7:c8:ce:89:dd:c8:
0a:d6:31:72:78:06:20:79:34:42:ed:7d:a0:01:f4:
ce:f6:b4:99:26:6b:5d:c7:ca:da:fc:b5:0b:0c:45:
da:a9:4f:2b:e4:57:32:cf:28:49:00:55:c1:d9:df:
44:0c:f4:cd:17:84:d3:66:0f:0e:db:e1:a7:63:ee:
99:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:46:1D:6F:25:F0:D7:10:CB:00:78:E5:F2:98:AF:EF:81:39:DB:45
X509v3 Authority Key Identifier:
keyid:4B:25:DF:86:20:37:42:43:E3:C5:EA:B2:55:50:AF:24:E0:EF:F4:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyXfhiA3QkPjxeqyVVCvJODv9Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a71248-a465-40d4-a2cf-a41b50aa272d/1/SyXfhiA3QkPjxeqyVVCvJODv9Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a71248-a465-40d4-a2cf-a41b50aa272d/1/SyXfhiA3QkPjxeqyVVCvJODv9Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f6:d8:50:a7:77:09:f7:61:ae:4c:a7:b4:95:b2:88:d7:8c:
53:06:e2:4e:cd:d5:50:05:d7:22:7b:a7:6a:c0:3d:d4:5f:3c:
71:55:b7:dd:08:72:f9:97:5c:57:7a:46:7c:30:80:67:e2:a9:
f3:86:8e:60:98:fa:ca:4f:61:57:43:ce:bc:3b:22:0b:1f:f0:
96:47:c2:d0:6d:89:60:9f:89:8b:74:e4:e4:0c:2b:d6:0d:01:
da:7a:08:42:8c:6c:2f:09:aa:ee:06:c1:68:e1:33:f1:4d:c8:
1c:79:49:8d:d9:6c:04:8c:57:8f:20:c0:52:c3:96:4f:04:86:
9b:eb:b0:40:26:ca:c1:dd:83:8b:dd:49:9c:0b:a5:59:c4:4f:
64:72:e8:30:5b:2b:b8:d2:dc:d5:48:b8:37:66:46:31:79:8c:
9d:ae:77:9c:38:6b:e7:14:7f:d8:9e:50:df:e4:6c:3a:43:61:
a3:b1:80:79:ba:e4:a5:d3:2a:75:e3:ee:14:c1:32:dd:a3:3a:
78:7f:78:0c:f9:30:f7:80:63:ab:b4:23:02:36:9f:8c:57:93:
e6:55:7a:61:32:d0:15:21:05:70:99:7e:92:3a:f7:1c:f9:3c:
a3:19:7d:cc:b1:46:16:af:e5:0c:ea:83:4e:d5:40:73:a8:87:
7b:9d:ba:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TqlJ7qVdOi1DdRSG+E+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMjVkZjg2MjAzNzQyNDNlM2M1ZWFiMjU1NTBhZjI0ZTBl
ZmY0OGMwHhcNMjUwMTMxMTcwMDM2WhcNMjUwMjAxMTcwMDM2WjAzMTEwLwYDVQQD
EyhkYjQ2MWQ2ZjI1ZjBkNzEwY2IwMDc4ZTVmMjk4YWZlZjgxMzlkYjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xRagOKoNAsoflMjkcklYWA2TS/g
znPziTDFVoklj8sz4/5mPxAfPkQrDuDAG293Mu9eBGiv7qtLKNg3SbM9CKy4t/oK
6Ut8V2lOX5Cl0jBqerIyTl26jFez4hX9pA4VNU5fYS8lgfFBQJgxx66DPiYTKZ+G
8ZOvsTdVGiHkxJLJc4V0avyMvYdUg2RSzzHeDU8dtLYFPq1GTHhyktjaGp9QoIMb
VIqAOLZSNyOqRfiUQhDPHzHUagptHBj3yM6J3cgK1jFyeAYgeTRC7X2gAfTO9rSZ
Jmtdx8ra/LULDEXaqU8r5FcyzyhJAFXB2d9EDPTNF4TTZg8O2+GnY+6ZzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtGHW8l8NcQywB45fKYr++BOdtFMB8GA1UdIwQY
MBaAFEsl34YgN0JD48XqslVQryTg7/SMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3lYZmhpQTNRa1BqeGVxeVZWQ3ZKT0R2OUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNzEyNDgtYTQ2NS00MGQ0LWEyY2Yt
YTQxYjUwYWEyNzJkLzEvU3lYZmhpQTNRa1BqeGVxeVZWQ3ZKT0R2OUl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hNzEyNDgtYTQ2NS00MGQ0LWEyY2YtYTQxYjUwYWEyNzJk
LzEvU3lYZmhpQTNRa1BqeGVxeVZWQ3ZKT0R2OUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/bYUKd3
CfdhrkyntJWyiNeMUwbiTs3VUAXXInunasA91F88cVW33Qhy+ZdcV3pGfDCAZ+Kp
84aOYJj6yk9hV0POvDsiCx/wlkfC0G2JYJ+Ji3Tk5Awr1g0B2noIQoxsLwmq7gbB
aOEz8U3IHHlJjdlsBIxXjyDAUsOWTwSGm+uwQCbKwd2Di91JnAulWcRPZHLoMFsr
uNLc1Ui4N2ZGMXmMna53nDhr5xR/2J5Q3+RsOkNho7GAebrkpdMqdePuFMEy3aM6
eH94DPkw94Bjq7QjAjafjFeT5lV6YTLQFSEFcJl+kjr3HPk8oxl9zLFGFq/lDOqD
TtVAc6iHe526TQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:08:19 2025 by rpki-client