Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
File: SBVxyrg7M5yGCR7HR8ITX85PZYc.mft (raw, json)
Hash identifier: arqjNLV5hGZf0EKA8A+WQ1d2YUWCgSkgUYyNbe7QOsU=
Subject key identifier: A4:BD:2F:9C:9B:12:F1:85:BD:2D:AA:DF:4F:A8:4A:EF:B5:A5:07:A0
Authority key identifier: 48:15:71:CA:B8:3B:33:9C:86:09:1E:C7:47:C2:13:5F:CE:4F:65:87
Certificate issuer: /CN=481571cab83b339c86091ec747c2135fce4f6587
Certificate serial: 0194BC72A86FE4BF0EBC74C53831D8F70A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
Manifest number: 12CE
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: SBVxyrg7M5yGCR7HR8ITX85PZYc.crl (hash: K11Z5ZpHtads0i/OPOA3QJcROlTRg68fEW3oc7ILlhw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a8:6f:e4:bf:0e:bc:74:c5:38:31:d8:f7:0a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481571cab83b339c86091ec747c2135fce4f6587
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=a4bd2f9c9b12f185bd2daadf4fa84aefb5a507a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a7:68:0a:77:94:36:48:3f:7b:cb:44:84:a2:
18:ce:e7:c0:b6:7d:a3:32:61:fb:2b:26:c9:2a:c4:
61:2c:22:c1:2f:62:14:62:a2:26:9d:f3:ee:09:ed:
4c:c4:02:c0:fb:ad:e4:b2:c7:03:24:41:f9:c2:46:
cd:45:ca:45:e5:fc:bc:1a:93:c0:1e:17:e8:ed:9d:
eb:b3:ac:f9:6d:9d:7d:bf:a7:24:64:75:2f:6b:9f:
b9:7d:e4:88:b3:0b:3c:1f:ed:fd:c8:ce:38:4c:54:
cc:33:c0:3e:a3:97:80:1f:89:89:99:e6:c7:2f:a3:
89:af:be:6e:b0:27:0c:48:3d:18:10:53:a9:0f:4b:
1b:41:29:6c:03:24:e3:1c:20:24:b0:78:0a:e4:4a:
6f:5c:a9:46:be:59:c7:e7:d5:34:c5:2a:5c:11:39:
90:6f:4c:06:71:9d:bf:35:47:a6:08:07:0d:42:7e:
50:0f:b8:58:26:d9:9f:b4:76:9a:ab:ab:d1:00:aa:
91:d6:8c:27:38:8a:42:bb:c9:3a:76:23:de:9a:55:
4c:27:9d:33:43:40:0b:46:16:54:c9:2c:03:b9:86:
65:1d:be:a9:ff:de:8a:c9:43:cc:60:99:aa:1b:ad:
49:a3:fc:36:9d:fd:81:a2:19:41:37:a3:ba:28:75:
d9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BD:2F:9C:9B:12:F1:85:BD:2D:AA:DF:4F:A8:4A:EF:B5:A5:07:A0
X509v3 Authority Key Identifier:
keyid:48:15:71:CA:B8:3B:33:9C:86:09:1E:C7:47:C2:13:5F:CE:4F:65:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:64:e6:c4:da:8e:1a:17:89:c1:35:34:62:bf:3a:e1:07:bd:
30:fd:91:de:35:15:1f:ef:ea:e2:00:2d:7a:7f:06:e8:87:13:
69:64:b0:9e:19:3f:75:ec:ff:d5:9e:e1:2f:81:9b:3a:53:e4:
bb:c0:9d:4c:06:22:88:c0:f7:51:dc:64:ba:77:23:8d:d0:12:
fe:07:18:66:ea:dc:a5:b7:57:48:25:12:ae:1e:03:e4:b4:81:
f5:82:8d:8a:39:9b:c9:d4:9b:88:34:b4:9a:d3:6b:d2:0e:7f:
eb:6c:0c:8e:a6:62:f3:c1:51:f7:a4:f3:20:42:b7:87:9b:7f:
9d:3d:56:f0:26:fa:39:0d:77:1e:34:8d:c7:ba:53:44:79:c6:
b8:c0:3d:13:73:00:5c:8d:16:1e:7d:63:e9:0e:c7:07:84:41:
d2:45:b4:ca:95:60:04:98:ef:d5:cc:93:cd:25:36:8a:0c:a0:
68:41:a7:1f:56:9b:8d:32:de:10:23:06:ac:0c:02:1d:29:17:
a3:16:a3:c0:01:3a:e1:32:ee:7c:66:1a:dc:1d:72:4f:7e:fd:
4f:aa:a4:f2:8a:6f:ff:54:8e:08:3c:24:3a:7e:19:5a:e7:88:
7c:04:92:98:f9:f2:55:21:bf:1a:8f:92:d4:fa:0c:14:cc:a8:
e5:64:cc:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cqhv5L8OvHTFODHY9wqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MTU3MWNhYjgzYjMzOWM4NjA5MWVjNzQ3YzIxMzVmY2U0
ZjY1ODcwHhcNMjUwMTMxMTMwMDE4WhcNMjUwMjAxMTMwMDE4WjAzMTEwLwYDVQQD
EyhhNGJkMmY5YzliMTJmMTg1YmQyZGFhZGY0ZmE4NGFlZmI1YTUwN2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KdoCneUNkg/e8tEhKIYzufAtn2j
MmH7KybJKsRhLCLBL2IUYqImnfPuCe1MxALA+63ksscDJEH5wkbNRcpF5fy8GpPA
Hhfo7Z3rs6z5bZ19v6ckZHUva5+5feSIsws8H+39yM44TFTMM8A+o5eAH4mJmebH
L6OJr75usCcMSD0YEFOpD0sbQSlsAyTjHCAksHgK5EpvXKlGvlnH59U0xSpcETmQ
b0wGcZ2/NUemCAcNQn5QD7hYJtmftHaaq6vRAKqR1ownOIpCu8k6diPemlVMJ50z
Q0ALRhZUySwDuYZlHb6p/96KyUPMYJmqG61Jo/w2nf2BohlBN6O6KHXZ9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKS9L5ybEvGFvS2q30+oSu+1pQegMB8GA1UdIwQY
MBaAFEgVccq4OzOchgkex0fCE1/OT2WHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0JWeHlyZzdNNXlHQ1I3SFI4SVRYODVQWlljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lMWMyOWEtYTkzNi00OTBiLTk2MDct
NmYzOWNjNjcyMmMyLzEvU0JWeHlyZzdNNXlHQ1I3SFI4SVRYODVQWlljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9lMWMyOWEtYTkzNi00OTBiLTk2MDctNmYzOWNjNjcyMmMy
LzEvU0JWeHlyZzdNNXlHQ1I3SFI4SVRYODVQWlljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2TmxNqO
GheJwTU0Yr864Qe9MP2R3jUVH+/q4gAten8G6IcTaWSwnhk/dez/1Z7hL4GbOlPk
u8CdTAYiiMD3UdxkuncjjdAS/gcYZurcpbdXSCUSrh4D5LSB9YKNijmbydSbiDS0
mtNr0g5/62wMjqZi88FR96TzIEK3h5t/nT1W8Cb6OQ13HjSNx7pTRHnGuMA9E3MA
XI0WHn1j6Q7HB4RB0kW0ypVgBJjv1cyTzSU2igygaEGnH1abjTLeECMGrAwCHSkX
oxajwAE64TLufGYa3B1yT379T6qk8opv/1SOCDwkOn4ZWueIfASSmPnyVSG/Go+S
1PoMFMyo5WTM7Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:58 2025 by rpki-client