Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
File: S58x5zUqhwe5jG0nNI6LxJPRqa8.mft (raw, json)
Hash identifier: bZG+xqApRm/1KJOqoK2ciug+cEMdItyb9BPCLOYV3z8=
Subject key identifier: 0D:6B:47:3A:70:16:36:3C:63:2D:F2:68:C2:40:CD:09:D0:3C:96:D4
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial: 0194BCA986554C7FD25CE991425631A75115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: JOqhFiRetaCWX-COli2qt4epZmU.roa (hash: Tggn3wwdEvZYJd/9CH5nD5nBnaCH9L0m/C7cCJYB59s=)
2: S58x5zUqhwe5jG0nNI6LxJPRqa8.crl (hash: pV69nmVH6e9aV16IpVn7g2Ju+g9dmGktXUL2mfU1KM0=)
3: rPpO-fPVx8XfYvByx6grU3jDRqc.roa (hash: yhGIutrfrX3qPTF0PHHiWDvjrLT7q6l6BKv9z17Nw1s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:86:55:4c:7f:d2:5c:e9:91:42:56:31:a7:51:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=0d6b473a7016363c632df268c240cd09d03c96d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ad:26:40:cd:1d:60:19:b3:b9:d3:16:28:4a:
06:04:df:17:40:a6:46:80:ec:68:77:3b:1a:d1:70:
34:b1:08:cb:48:2c:29:3f:a0:cc:b7:b7:63:5d:4a:
4d:26:48:c7:81:59:06:ae:48:f1:bd:49:f0:28:89:
ee:3c:a7:66:12:da:c9:10:d8:89:3c:65:5b:8e:ff:
f8:ac:db:95:15:fe:88:5a:a8:16:b8:4e:02:6c:c8:
e5:17:ea:df:b1:9b:f0:d8:04:18:fe:30:7b:d3:5c:
6f:a5:7e:1a:02:08:a6:45:48:f0:3a:26:0f:a3:e5:
85:51:d5:58:d6:aa:db:29:27:ae:46:97:d2:1d:c1:
2a:fb:ba:fc:fe:4b:fc:b8:58:43:ad:3a:54:47:7a:
fe:76:98:09:58:80:dc:92:4c:3e:b0:99:52:09:b5:
ae:ec:aa:68:87:c4:5d:57:06:b2:ed:83:36:32:6c:
1a:68:29:7f:b7:2f:be:08:f7:4c:18:0e:1d:a4:98:
dc:92:6a:83:9b:3d:1a:51:97:4c:e7:26:9a:9d:19:
ae:5a:5e:78:af:6b:7f:c3:24:65:c7:a6:84:23:e0:
cd:fa:74:5f:ad:91:93:fd:6b:ed:c7:2a:71:5d:81:
b6:d2:20:35:38:54:d6:be:57:a8:c8:38:92:cb:07:
ab:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6B:47:3A:70:16:36:3C:63:2D:F2:68:C2:40:CD:09:D0:3C:96:D4
X509v3 Authority Key Identifier:
keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f1:74:36:94:4b:40:f1:77:b0:dd:7d:33:28:ef:5d:02:34:
ec:8e:fd:b9:b8:56:85:31:23:7c:ef:b1:7d:d1:2a:05:12:e1:
1c:ea:28:50:0b:bd:ea:3f:b8:38:51:25:e8:61:f0:0a:da:e8:
c4:3b:90:ea:41:d9:9a:76:15:c9:ac:ce:dd:ff:5f:89:db:d9:
a0:57:7a:cb:0a:9f:cd:94:ba:62:d8:15:6c:e8:4f:c9:c7:1d:
3f:fb:b8:48:1b:07:22:d2:ae:07:15:ad:f1:2e:20:d5:8a:9b:
df:9a:f4:29:5e:f7:fe:b1:39:1b:72:30:32:46:59:f3:02:a2:
0c:0b:fb:db:ae:22:8a:bd:5f:86:8f:13:f5:17:16:78:57:d7:
7b:31:59:aa:d2:1f:47:d1:b0:b5:22:39:ce:e2:1d:1a:e4:cc:
5b:34:91:fa:b0:68:21:5b:7e:2d:b9:9e:74:26:22:a4:82:83:
14:16:f2:96:ff:89:dd:00:ae:77:d4:57:b3:09:73:ae:99:5b:
2d:59:ff:f7:30:49:22:a5:c9:49:79:c8:f6:0a:d4:0a:2f:9f:
c5:95:68:f6:7d:17:54:b9:45:0a:5d:a6:02:77:80:2b:71:6d:
44:2a:89:5f:6f:bc:27:65:8c:f4:98:9f:0c:0e:8d:12:39:16:
83:f0:6a:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYZVTH/SXOmRQlYxp1EVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOWYzMWU3MzUyYTg3MDdiOThjNmQyNzM0OGU4YmM0OTNk
MWE5YWYwHhcNMjUwMTMxMTQwMDE0WhcNMjUwMjAxMTQwMDE0WjAzMTEwLwYDVQQD
EygwZDZiNDczYTcwMTYzNjNjNjMyZGYyNjhjMjQwY2QwOWQwM2M5NmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5a0mQM0dYBmzudMWKEoGBN8XQKZG
gOxodzsa0XA0sQjLSCwpP6DMt7djXUpNJkjHgVkGrkjxvUnwKInuPKdmEtrJENiJ
PGVbjv/4rNuVFf6IWqgWuE4CbMjlF+rfsZvw2AQY/jB701xvpX4aAgimRUjwOiYP
o+WFUdVY1qrbKSeuRpfSHcEq+7r8/kv8uFhDrTpUR3r+dpgJWIDckkw+sJlSCbWu
7Kpoh8RdVway7YM2MmwaaCl/ty++CPdMGA4dpJjckmqDmz0aUZdM5yaanRmuWl54
r2t/wyRlx6aEI+DN+nRfrZGT/WvtxypxXYG20iA1OFTWvleoyDiSywer7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1rRzpwFjY8Yy3yaMJAzQnQPJbUMB8GA1UdIwQY
MBaAFEufMec1KocHuYxtJzSOi8ST0amvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84NWZkMzEtZmU5MS00Mzg5LWFiNjct
MzY1MWU0MGYxNDM2LzEvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84NWZkMzEtZmU5MS00Mzg5LWFiNjctMzY1MWU0MGYxNDM2
LzEvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPF0NpRL
QPF3sN19MyjvXQI07I79ubhWhTEjfO+xfdEqBRLhHOooUAu96j+4OFEl6GHwCtro
xDuQ6kHZmnYVyazO3f9fidvZoFd6ywqfzZS6YtgVbOhPyccdP/u4SBsHItKuBxWt
8S4g1Yqb35r0KV73/rE5G3IwMkZZ8wKiDAv7264iir1fho8T9RcWeFfXezFZqtIf
R9GwtSI5zuIdGuTMWzSR+rBoIVt+LbmedCYipIKDFBbylv+J3QCud9RXswlzrplb
LVn/9zBJIqXJSXnI9grUCi+fxZVo9n0XVLlFCl2mAneAK3FtRCqJX2+8J2WM9Jif
DA6NEjkWg/BqEQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:28:33 2025 by rpki-client