Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
File: svJ5U61GkMBo-0D581YAM3m7Y_g.mft (raw, json)
Hash identifier: LxtrcEYR6NI/FmEC9dmdoqZ3DpmBM22rAYetj5EdyKw=
Subject key identifier: 46:D8:2F:41:80:C1:BA:AC:AD:B1:03:53:2A:AF:33:F0:08:E1:A8:5B
Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
Certificate issuer: /CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Certificate serial: 0194BC7305A9B3642B789C56F97AA48B8BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
Manifest number: 0DBA
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: bkaEgwUfFQuvU4deHKYEq645oxo.roa (hash: a6t899hSFrNnCxDeJsEHX7KWBkAwoAJJxMP3KbPkcsM=)
2: gM8Vs4rZduYc-FMusqbqCtswvSM.roa (hash: PdGvc2+s2b+cxeznU9E/uPp7OuLxD8n8FSf7bdTA3Io=)
3: svJ5U61GkMBo-0D581YAM3m7Y_g.crl (hash: LFf/o8NuKAtaTAIf7T2Z2hA6A5IKXKvNwgqGEObcyV4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:05:a9:b3:64:2b:78:9c:56:f9:7a:a4:8b:8b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=46d82f4180c1baacadb103532aaf33f008e1a85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:b0:a0:ef:3d:eb:5a:17:6c:d7:9c:14:82:
33:96:2c:fa:91:55:e7:d3:e8:a2:63:55:db:96:b8:
ca:88:9e:a4:a6:9c:82:fb:04:69:e2:c3:d6:7a:48:
d0:6f:10:c9:4c:39:76:52:78:51:14:bd:65:59:fc:
51:5d:49:d8:be:a6:d1:6d:45:74:f5:c0:5e:a4:f6:
f6:07:96:6a:a2:f8:1d:15:e6:b1:db:3a:80:4e:4c:
11:bf:7d:67:1c:29:f3:08:d5:10:a2:ae:cd:f6:ca:
f4:a2:30:78:3e:61:26:ba:84:8e:42:69:d5:dd:9c:
07:fe:45:c8:ee:c6:7e:08:1d:e3:37:39:36:2c:73:
ca:e5:bc:47:23:4e:9c:13:f4:f6:a9:85:d2:9a:c6:
47:ab:63:d2:f4:f0:49:6a:ad:b0:b7:c6:95:23:ac:
32:51:01:40:b3:25:c4:c1:97:3b:53:8e:dc:f6:b9:
7d:f2:a6:0e:e2:69:58:a0:d6:91:70:d3:23:3e:f1:
04:cb:cb:b8:5a:30:86:65:c0:c4:20:0b:e3:ab:9a:
0b:f8:cd:80:4e:d8:45:7f:97:d6:a3:ee:99:b9:bd:
7e:1c:e5:eb:6f:79:de:3e:cd:f5:5c:f4:5f:71:77:
98:53:41:b8:89:ec:34:17:14:86:89:17:d6:67:8d:
f9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D8:2F:41:80:C1:BA:AC:AD:B1:03:53:2A:AF:33:F0:08:E1:A8:5B
X509v3 Authority Key Identifier:
keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b7:12:a9:d8:50:db:f7:3e:04:91:be:5d:7a:b8:59:eb:84:
48:40:06:c0:6b:d2:bd:c0:22:9e:d9:ac:3c:90:0f:7a:bc:7b:
c4:db:b1:97:89:5b:76:84:0e:3a:e2:3e:e4:dd:55:d4:6f:6e:
cf:0c:81:90:18:31:d1:0a:9c:59:50:3e:a0:90:84:e3:ab:42:
7b:71:8e:0f:20:e3:f2:c5:b9:5b:79:ff:c5:b6:ce:85:b1:e3:
b1:13:a0:6c:a2:75:f8:f4:d0:87:58:b8:3c:8f:01:41:12:84:
cf:45:9b:80:bc:1f:b6:74:b4:a8:42:35:91:18:00:3b:6f:14:
dc:01:63:a1:91:40:8c:80:89:ae:95:7b:7f:6d:20:e2:12:c0:
63:9e:0b:fc:e4:c6:d6:63:15:a5:8e:eb:8b:9a:d9:2f:9f:fb:
1b:3b:4a:84:fa:12:a9:cf:13:e0:20:f1:c6:1e:c6:ed:32:f5:
e0:78:1f:47:41:86:1a:3d:de:d9:bf:8d:1a:96:13:6f:29:b4:
a4:47:2d:ff:55:83:6f:ea:75:e3:19:bc:d1:5c:e3:cf:0f:15:
4b:52:23:a4:34:63:b2:4f:d3:f5:a9:a4:24:4a:3b:7c:42:77:
19:11:78:da:d4:58:49:e0:49:c8:e9:50:40:a4:e8:7f:a7:64:
fc:82:86:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cwWps2QreJxW+Xqki4urMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZjI3OTUzYWQ0NjkwYzA2OGZiNDBmOWYzNTYwMDMzNzli
YjYzZjgwHhcNMjUwMTMxMTMwMDQyWhcNMjUwMjAxMTMwMDQyWjAzMTEwLwYDVQQD
Eyg0NmQ4MmY0MTgwYzFiYWFjYWRiMTAzNTMyYWFmMzNmMDA4ZTFhODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTqwoO8961oXbNecFIIzliz6kVXn
0+iiY1XblrjKiJ6kppyC+wRp4sPWekjQbxDJTDl2UnhRFL1lWfxRXUnYvqbRbUV0
9cBepPb2B5ZqovgdFeax2zqATkwRv31nHCnzCNUQoq7N9sr0ojB4PmEmuoSOQmnV
3ZwH/kXI7sZ+CB3jNzk2LHPK5bxHI06cE/T2qYXSmsZHq2PS9PBJaq2wt8aVI6wy
UQFAsyXEwZc7U47c9rl98qYO4mlYoNaRcNMjPvEEy8u4WjCGZcDEIAvjq5oL+M2A
TthFf5fWo+6Zub1+HOXrb3nePs31XPRfcXeYU0G4iew0FxSGiRfWZ4350wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbYL0GAwbqsrbEDUyqvM/AI4ahbMB8GA1UdIwQY
MBaAFLLyeVOtRpDAaPtA+fNWADN5u2P4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wODk3M2YtZmI2YS00MWU1LTg3MjAt
ZmI0Y2YxMzdjMWU5LzEvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wODk3M2YtZmI2YS00MWU1LTg3MjAtZmI0Y2YxMzdjMWU5
LzEvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObcSqdhQ
2/c+BJG+XXq4WeuESEAGwGvSvcAintmsPJAPerx7xNuxl4lbdoQOOuI+5N1V1G9u
zwyBkBgx0QqcWVA+oJCE46tCe3GODyDj8sW5W3n/xbbOhbHjsROgbKJ1+PTQh1i4
PI8BQRKEz0WbgLwftnS0qEI1kRgAO28U3AFjoZFAjICJrpV7f20g4hLAY54L/OTG
1mMVpY7ri5rZL5/7GztKhPoSqc8T4CDxxh7G7TL14HgfR0GGGj3e2b+NGpYTbym0
pEct/1WDb+p14xm80Vzjzw8VS1IjpDRjsk/T9amkJEo7fEJ3GRF42tRYSeBJyOlQ
QKTof6dk/IKGWg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:46:54 2025 by rpki-client