Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
File: SxEEihpJFuExuM4Iji1v5OXF49s.mft (raw, json)
Hash identifier: GWO/Blcfl+cvkRJZVnpSudxpl8I58fNm+6goGxAjZ1U=
Subject key identifier: 52:5B:F8:18:12:5C:5D:82:56:0F:08:43:8A:E1:EC:D4:BE:91:D1:0F
Authority key identifier: 4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB
Certificate issuer: /CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db
Certificate serial: 0194BD4E5754C30B2F708992C17A5C99AA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
Manifest number: 69
Signing time: Fri 31 Jan 2025 17:00:15 +0000
Manifest this update: Fri 31 Jan 2025 17:00:15 +0000
Manifest next update: Sat 01 Feb 2025 17:00:15 +0000
Files and hashes: 1: SxEEihpJFuExuM4Iji1v5OXF49s.crl (hash: AU8p94aRnLdp5fFoJmHYlkjfsfHi5gpxR+KVVmUHLuw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:57:54:c3:0b:2f:70:89:92:c1:7a:5c:99:aa:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db
Validity
Not Before: Jan 31 17:00:15 2025 GMT
Not After : Feb 1 17:00:15 2025 GMT
Subject: CN=525bf818125c5d82560f08438ae1ecd4be91d10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:53:3a:59:f7:16:6e:5b:1f:32:4a:81:e6:
0d:ce:76:8d:85:9a:46:0f:cb:e6:22:80:05:0a:a9:
fe:08:06:96:26:35:11:cd:de:c0:74:49:cc:6f:77:
f4:1f:b3:d5:67:3c:0a:9e:2f:59:85:62:a5:a1:48:
79:17:7f:16:e8:65:bb:2f:ed:e4:d6:64:11:5d:d0:
87:63:65:4e:35:ce:26:d5:27:d3:05:17:97:a2:63:
8e:28:8c:7f:09:93:3c:3a:69:59:b2:33:70:69:b3:
88:77:07:9f:aa:5d:30:65:5f:61:42:93:51:b6:c1:
7f:23:da:65:3b:86:25:35:53:f2:14:95:53:b3:66:
11:a3:a5:68:32:61:bd:af:fc:57:56:23:9c:dd:9a:
ea:d7:8b:90:13:ae:2e:4a:55:d0:01:59:c8:b4:80:
92:0b:2d:6c:c2:5e:00:7a:ba:47:3b:45:62:51:70:
64:31:4b:cf:88:60:3f:89:83:08:3d:d8:9d:b8:48:
87:a6:e6:24:45:39:9f:e3:e2:00:81:58:73:0b:24:
4f:d1:40:ae:e6:58:e9:f2:de:11:ff:40:aa:66:27:
37:4b:6d:4f:c6:88:86:8a:21:bc:8d:97:d4:2a:6b:
0b:c0:03:db:f5:b2:d1:4b:70:e2:7b:62:3a:d8:82:
5b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5B:F8:18:12:5C:5D:82:56:0F:08:43:8A:E1:EC:D4:BE:91:D1:0F
X509v3 Authority Key Identifier:
keyid:4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1c:bb:e2:50:50:b6:31:f5:68:a6:64:cc:61:80:8f:3d:84:
2a:6c:4c:77:6f:2b:d3:ac:e8:47:90:ca:97:32:c8:58:fc:a8:
d0:92:25:41:fb:65:f8:75:b7:87:01:20:58:47:33:44:f0:b4:
1f:9c:94:f9:c2:0c:f2:5a:1f:7b:67:c6:f1:27:cf:62:ea:75:
d1:ec:90:9f:c6:cb:5e:b1:69:23:4e:a2:29:c1:a8:ef:87:88:
a2:33:e9:7f:ef:e1:12:76:e9:69:14:9e:25:dd:ce:21:a2:37:
3d:13:e7:66:f0:b4:c2:b0:65:d9:df:48:97:35:ba:53:a7:62:
c4:93:dc:ad:b0:90:ad:3b:67:e2:53:8e:5c:e7:42:48:67:0c:
60:c9:d2:c6:15:1c:d8:cd:3a:aa:95:a3:ce:08:60:a1:b9:5f:
ef:5c:21:fc:cb:0c:24:65:26:70:5b:6c:d9:f2:18:44:8d:06:
80:eb:08:20:f2:45:8c:17:87:65:e4:f7:19:0f:4e:ca:f8:10:
3f:f4:23:ab:f9:b2:42:44:f5:51:c5:18:7f:fb:e6:d0:a0:da:
64:d6:ab:21:a5:82:34:53:f0:4c:19:a8:ba:ee:61:e6:bd:cb:
c4:30:c3:db:6a:e0:77:39:21:2a:db:9d:3c:52:4f:08:77:59:
9c:b3:a7:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TldUwwsvcImSwXpcmaoRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMTEwNDhhMWE0OTE2ZTEzMWI4Y2UwODhlMmQ2ZmU0ZTVj
NWUzZGIwHhcNMjUwMTMxMTcwMDE1WhcNMjUwMjAxMTcwMDE1WjAzMTEwLwYDVQQD
Eyg1MjViZjgxODEyNWM1ZDgyNTYwZjA4NDM4YWUxZWNkNGJlOTFkMTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6xTOln3Fm5bHzJKgeYNznaNhZpG
D8vmIoAFCqn+CAaWJjURzd7AdEnMb3f0H7PVZzwKni9ZhWKloUh5F38W6GW7L+3k
1mQRXdCHY2VONc4m1SfTBReXomOOKIx/CZM8OmlZsjNwabOIdwefql0wZV9hQpNR
tsF/I9plO4YlNVPyFJVTs2YRo6VoMmG9r/xXViOc3Zrq14uQE64uSlXQAVnItICS
Cy1swl4AerpHO0ViUXBkMUvPiGA/iYMIPdiduEiHpuYkRTmf4+IAgVhzCyRP0UCu
5ljp8t4R/0CqZic3S21PxoiGiiG8jZfUKmsLwAPb9bLRS3Die2I62IJbjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJb+BgSXF2CVg8IQ4rh7NS+kdEPMB8GA1UdIwQY
MBaAFEsRBIoaSRbhMbjOCI4tb+TlxePbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3hFRWlocEpGdUV4dU00SWppMXY1T1hGNDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kM2EyMjgtZmM0Zi00MGIyLTg4YjIt
ZTQ4NDYxMWE5NjIxLzEvU3hFRWlocEpGdUV4dU00SWppMXY1T1hGNDlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9kM2EyMjgtZmM0Zi00MGIyLTg4YjItZTQ4NDYxMWE5NjIx
LzEvU3hFRWlocEpGdUV4dU00SWppMXY1T1hGNDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxy74lBQ
tjH1aKZkzGGAjz2EKmxMd28r06zoR5DKlzLIWPyo0JIlQftl+HW3hwEgWEczRPC0
H5yU+cIM8lofe2fG8SfPYup10eyQn8bLXrFpI06iKcGo74eIojPpf+/hEnbpaRSe
Jd3OIaI3PRPnZvC0wrBl2d9IlzW6U6dixJPcrbCQrTtn4lOOXOdCSGcMYMnSxhUc
2M06qpWjzghgoblf71wh/MsMJGUmcFts2fIYRI0GgOsIIPJFjBeHZeT3GQ9OyvgQ
P/Qjq/myQkT1UcUYf/vm0KDaZNarIaWCNFPwTBmouu5h5r3LxDDD22rgdzkhKtud
PFJPCHdZnLOnCA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:39 2025 by rpki-client