Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft
File: sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft (raw, json)
Hash identifier: ausr4Yu9XRPPOcPZt0F2oZFSEKS6l3tV+hOQCfCyOng=
Subject key identifier: 59:5F:66:3A:F1:47:CB:2E:FE:EA:E2:B0:88:97:CC:ED:77:81:21:11
Authority key identifier: B0:D8:F4:69:B9:07:11:A1:28:2B:F4:90:D0:0F:15:60:96:59:77:60
Certificate issuer: /CN=b0d8f469b90711a1282bf490d00f156096597760
Certificate serial: 0194BBCDFA68FD895342EB00F075EAF65F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNj0abkHEaEoK_SQ0A8VYJZZd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft
Manifest number: 1384
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: 4W2MsaFzCqc3vmN-m_KV3fKLCCE.roa (hash: yb1ZkdtEhTyv9DB1WP29BM5drsp9NA6SmJ1955YSoLA=)
2: sNj0abkHEaEoK_SQ0A8VYJZZd2A.crl (hash: to7F04VH2h9BnVZnt8tv1t+YVQOMDKn1h/b1yYcLCX4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fa:68:fd:89:53:42:eb:00:f0:75:ea:f6:5f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d8f469b90711a1282bf490d00f156096597760
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=595f663af147cb2efeeae2b08897cced77812111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d6:0d:9d:39:80:f8:a6:f2:0b:ca:3a:da:d0:
b3:0a:9d:88:bb:a7:42:b1:df:b0:1d:d1:35:cc:74:
3b:e3:a9:f1:66:8e:ed:bf:ce:cc:66:0e:ba:bf:e8:
9b:b0:5e:c8:d5:11:78:70:a3:3b:5d:90:07:f7:d0:
8b:1b:05:7b:b1:bb:da:77:12:d0:8e:74:3b:53:d9:
37:a1:d0:a2:0e:ce:20:f1:e7:cf:ff:38:8d:f7:8a:
2e:fa:ea:08:3a:4d:6b:29:0d:eb:9d:e1:0d:83:e0:
ec:6d:3d:90:0c:d4:4c:29:34:e0:71:9e:b9:e0:2f:
4c:f0:9a:3a:66:ea:50:bf:23:aa:72:66:ff:5c:c6:
fa:ff:5e:d5:fb:34:9e:e6:38:b4:7e:a5:19:d9:5a:
ac:2a:8e:9a:1e:11:07:4c:9c:60:d5:ee:08:1d:6c:
1f:04:11:aa:4c:67:40:d1:81:b7:0a:63:a2:dc:77:
bf:e0:bd:fa:36:23:38:99:af:47:b3:e1:de:46:cc:
68:38:87:c2:bc:eb:8b:2a:f8:34:6f:53:b2:26:87:
6c:4d:71:a2:4e:db:5b:82:aa:57:c8:c2:3e:cf:34:
11:83:05:8a:9d:8c:72:6a:fd:d9:5d:a6:40:c2:a9:
fa:69:f9:49:c8:67:10:21:e8:8e:3d:06:b7:6e:7c:
37:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5F:66:3A:F1:47:CB:2E:FE:EA:E2:B0:88:97:CC:ED:77:81:21:11
X509v3 Authority Key Identifier:
keyid:B0:D8:F4:69:B9:07:11:A1:28:2B:F4:90:D0:0F:15:60:96:59:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNj0abkHEaEoK_SQ0A8VYJZZd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:86:ab:e6:c7:48:9c:08:d8:b6:ef:59:85:56:09:ce:89:82:
5f:80:f5:56:3e:92:3b:b4:71:32:86:3f:cc:f0:2c:65:87:7b:
4a:08:78:fb:84:f2:9d:88:0a:3a:76:85:71:90:90:f5:22:ac:
12:e4:c3:a2:82:d8:fb:aa:9d:a8:9d:e4:9d:f8:fd:00:75:9d:
84:d4:b1:ff:77:74:9f:96:8b:fc:b6:d5:55:c9:17:26:2b:18:
fc:82:6d:f3:20:0e:eb:6b:d4:0c:f5:7e:c3:31:be:8b:ae:92:
24:7b:4d:b8:31:fa:51:a2:ce:41:a3:d0:ef:55:69:5f:f3:f5:
e7:6f:97:29:64:89:09:91:0a:c5:80:44:8b:42:83:ac:2a:c3:
37:ba:2c:2b:b7:96:f4:65:e7:ce:0a:78:ad:92:ad:ea:e3:ee:
ad:df:00:7d:f8:57:9f:50:80:e1:17:dc:08:f0:e6:77:b5:84:
a9:8f:7a:68:18:8c:71:c3:71:c1:15:ad:a0:af:62:7c:c3:38:
2d:0c:f1:f8:f5:43:aa:27:5d:4a:90:c8:94:d0:33:d3:50:3d:
cd:c6:59:d5:1e:91:c4:08:6d:a2:63:4e:3f:b0:fd:50:80:05:
2d:39:b2:ef:e8:01:95:5b:9d:47:3d:c4:60:5a:9b:d1:8a:79:
5b:75:61:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zfpo/YlTQusA8HXq9l9rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZDhmNDY5YjkwNzExYTEyODJiZjQ5MGQwMGYxNTYwOTY1
OTc3NjAwHhcNMjUwMTMxMTAwMDI1WhcNMjUwMjAxMTAwMDI1WjAzMTEwLwYDVQQD
Eyg1OTVmNjYzYWYxNDdjYjJlZmVlYWUyYjA4ODk3Y2NlZDc3ODEyMTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdYNnTmA+KbyC8o62tCzCp2Iu6dC
sd+wHdE1zHQ746nxZo7tv87MZg66v+ibsF7I1RF4cKM7XZAH99CLGwV7sbvadxLQ
jnQ7U9k3odCiDs4g8efP/ziN94ou+uoIOk1rKQ3rneENg+DsbT2QDNRMKTTgcZ65
4C9M8Jo6ZupQvyOqcmb/XMb6/17V+zSe5ji0fqUZ2VqsKo6aHhEHTJxg1e4IHWwf
BBGqTGdA0YG3CmOi3He/4L36NiM4ma9Hs+HeRsxoOIfCvOuLKvg0b1OyJodsTXGi
TttbgqpXyMI+zzQRgwWKnYxyav3ZXaZAwqn6aflJyGcQIeiOPQa3bnw3pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlfZjrxR8su/urisIiXzO13gSERMB8GA1UdIwQY
MBaAFLDY9Gm5BxGhKCv0kNAPFWCWWXdgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc05qMGFia0hFYUVvS19TUTBBOFZZSlpaZDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81MzBjMmItOTQ0Mi00NjIxLThlOTEt
ZDBlNDg2ODBmMjMyLzEvc05qMGFia0hFYUVvS19TUTBBOFZZSlpaZDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi81MzBjMmItOTQ0Mi00NjIxLThlOTEtZDBlNDg2ODBmMjMy
LzEvc05qMGFia0hFYUVvS19TUTBBOFZZSlpaZDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIar5sdI
nAjYtu9ZhVYJzomCX4D1Vj6SO7RxMoY/zPAsZYd7Sgh4+4TynYgKOnaFcZCQ9SKs
EuTDooLY+6qdqJ3knfj9AHWdhNSx/3d0n5aL/LbVVckXJisY/IJt8yAO62vUDPV+
wzG+i66SJHtNuDH6UaLOQaPQ71VpX/P152+XKWSJCZEKxYBEi0KDrCrDN7osK7eW
9GXnzgp4rZKt6uPurd8AffhXn1CA4RfcCPDmd7WEqY96aBiMccNxwRWtoK9ifMM4
LQzx+PVDqiddSpDIlNAz01A9zcZZ1R6RxAhtomNOP7D9UIAFLTmy7+gBlVudRz3E
YFqb0Yp5W3Vh+w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:33 2025 by rpki-client