Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
File: si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft (raw, json)
Hash identifier: GzRN08PcBZbz7fiRpk/PP5HgD37uI78p4QZpWCwJ0/c=
Subject key identifier: 95:B9:98:06:F3:25:6D:D0:3B:E7:79:DD:59:CC:27:51:A9:E7:B7:BF
Authority key identifier: B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6
Certificate issuer: /CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6
Certificate serial: 0194BC04DC7C618F05F04C6A457EE2C5D81F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
Manifest number: 01FA
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: Ol4H0Ofe0seTJhjp23zwbv14mcA.roa (hash: h0M7hTbR8JXwLU22tU4Fw/p8crplmJ6JisUg1rjxv0k=)
2: si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl (hash: ZoQv6Eo5PmvsbKhGAXakoRaaOYlv1MZd8cro5Wmefds=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:dc:7c:61:8f:05:f0:4c:6a:45:7e:e2:c5:d8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=95b99806f3256dd03be779dd59cc2751a9e7b7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:1c:eb:c7:64:c4:e3:a3:ae:3e:ae:96:8b:
16:ec:65:5b:d6:1b:c0:eb:d1:0e:b3:0e:46:49:91:
4f:3c:db:7e:2f:4b:0c:69:f2:13:0e:2a:63:dc:fe:
20:3d:a4:06:30:ef:04:4a:f7:bc:4c:18:b2:07:af:
5c:d6:7a:b3:ce:e9:06:3b:34:19:19:30:ee:ea:95:
d0:16:6b:c8:50:a1:53:4e:6b:92:20:1f:3e:e4:23:
9a:66:a9:12:6b:50:56:9e:40:ed:0a:6d:cf:96:77:
e5:06:cc:d2:ae:c4:6e:bb:32:e9:ce:1c:9a:f2:73:
20:76:22:c3:b4:71:be:cd:52:1e:df:e0:db:8a:29:
ac:e2:d7:10:db:bc:1a:25:1b:ed:2e:7d:fb:65:7a:
9c:ac:b0:b9:a0:94:ac:71:9e:6c:d1:06:9b:a3:be:
b9:01:1f:16:2b:c5:25:bd:9a:2f:81:46:88:b6:be:
e9:ab:0b:a8:06:d7:b1:f9:a3:bf:e4:53:b4:13:fa:
fe:33:87:a3:ee:b6:e7:14:17:39:64:8f:6e:26:24:
8b:ed:5c:31:6d:04:6b:a0:01:4c:54:71:61:aa:b3:
b6:5b:f4:a1:a4:22:c5:b4:dc:a9:f7:ec:94:1d:cc:
8d:58:d2:4e:d9:af:8a:8d:64:66:ca:92:64:5b:63:
d8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B9:98:06:F3:25:6D:D0:3B:E7:79:DD:59:CC:27:51:A9:E7:B7:BF
X509v3 Authority Key Identifier:
keyid:B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d8:07:e3:a4:71:5b:5c:78:9a:63:87:84:b9:2d:5b:56:36:
d6:7d:7e:6e:d7:c9:fa:43:e9:b7:2c:65:31:8c:68:6e:07:50:
cd:4a:86:ea:62:43:fe:87:be:86:79:76:28:64:a7:42:8a:da:
15:9e:21:50:96:e9:de:74:f8:5e:da:0f:90:25:4c:ab:7c:36:
b1:46:7b:56:74:b7:e0:94:e9:60:5d:25:8e:bd:48:d2:fa:84:
79:c9:a8:15:68:9e:e2:a7:a3:55:14:3f:af:ed:a6:c2:76:92:
96:73:c5:09:6f:09:77:b4:75:9e:d1:6b:c4:35:f4:c3:37:92:
b2:c8:28:94:a9:5d:5b:f6:fd:6c:45:a3:45:0f:aa:15:76:4b:
8c:eb:9c:c1:06:c6:ed:46:ba:33:a6:cb:c7:32:22:6b:2f:2c:
79:97:46:ca:50:66:a4:b9:50:13:d1:7a:de:b6:69:a3:3e:f4:
e7:5b:d5:7b:1c:a8:2c:11:f4:46:fd:c9:7c:20:6d:9e:93:01:
c4:6b:33:ba:23:75:0c:3d:f1:9b:c6:30:c3:da:e2:fb:9d:a2:
23:cc:ac:fc:62:cf:bf:ed:89:fa:85:5a:3b:55:3e:03:33:03:
49:ba:f6:bd:24:87:c8:ce:dd:45:92:9d:db:ca:93:7b:9d:9d:
63:9c:c3:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BNx8YY8F8ExqRX7ixdgfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMmRkMDY1MDFmOTlkNDcwMjJkM2E0MDM5ZWZjZjQzOWQw
YmM3ZTYwHhcNMjUwMTMxMTEwMDIyWhcNMjUwMjAxMTEwMDIyWjAzMTEwLwYDVQQD
Eyg5NWI5OTgwNmYzMjU2ZGQwM2JlNzc5ZGQ1OWNjMjc1MWE5ZTdiN2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy0c68dkxOOjrj6ulosW7GVb1hvA
69EOsw5GSZFPPNt+L0sMafITDipj3P4gPaQGMO8ESve8TBiyB69c1nqzzukGOzQZ
GTDu6pXQFmvIUKFTTmuSIB8+5COaZqkSa1BWnkDtCm3PlnflBszSrsRuuzLpzhya
8nMgdiLDtHG+zVIe3+Dbiims4tcQ27waJRvtLn37ZXqcrLC5oJSscZ5s0Qabo765
AR8WK8UlvZovgUaItr7pqwuoBtex+aO/5FO0E/r+M4ej7rbnFBc5ZI9uJiSL7Vwx
bQRroAFMVHFhqrO2W/ShpCLFtNyp9+yUHcyNWNJO2a+KjWRmypJkW2PYYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJW5mAbzJW3QO+d53VnMJ1Gp57e/MB8GA1UdIwQY
MBaAFLIt0GUB+Z1HAi06QDnvz0OdC8fmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2kzUVpRSDVuVWNDTFRwQU9lX1BRNTBMeC1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yMDI2MzMtYzY5MC00OGU1LTk2MTMt
NzExZmZkZjkxNjk4LzEvc2kzUVpRSDVuVWNDTFRwQU9lX1BRNTBMeC1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yMDI2MzMtYzY5MC00OGU1LTk2MTMtNzExZmZkZjkxNjk4
LzEvc2kzUVpRSDVuVWNDTFRwQU9lX1BRNTBMeC1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9gH46Rx
W1x4mmOHhLktW1Y21n1+btfJ+kPptyxlMYxobgdQzUqG6mJD/oe+hnl2KGSnQora
FZ4hUJbp3nT4XtoPkCVMq3w2sUZ7VnS34JTpYF0ljr1I0vqEecmoFWie4qejVRQ/
r+2mwnaSlnPFCW8Jd7R1ntFrxDX0wzeSssgolKldW/b9bEWjRQ+qFXZLjOucwQbG
7Ua6M6bLxzIiay8seZdGylBmpLlQE9F63rZpoz7051vVexyoLBH0Rv3JfCBtnpMB
xGszuiN1DD3xm8Yww9ri+52iI8ys/GLPv+2J+oVaO1U+AzMDSbr2vSSHyM7dRZKd
28qTe52dY5zDXQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:57 2025 by rpki-client