Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.mft
File: S4UouKy8h0J2SlgajZeaGEKVZj4.mft (raw, json)
Hash identifier: /P2ESwrgauRNLSdsUE84RFhnBn+tx7N3JxSQPYQijsc=
Subject key identifier: 99:0F:7F:E7:6C:3E:5F:E9:48:D5:94:61:A0:D6:E1:9D:3B:6C:9B:E2
Authority key identifier: 4B:85:28:B8:AC:BC:87:42:76:4A:58:1A:8D:97:9A:18:42:95:66:3E
Certificate issuer: /CN=4b8528b8acbc8742764a581a8d979a184295663e
Certificate serial: 0194BBCDB331C71A79FA213CAF9842A9EC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4UouKy8h0J2SlgajZeaGEKVZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.mft
Manifest number: 01D8
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: S4UouKy8h0J2SlgajZeaGEKVZj4.crl (hash: +3/aypJzTOPQuG38S/akY/Sk6Ir34iy360QEcnMEeCE=)
2: vPSZGNLszHola-aE32fRdWDCw-Q.roa (hash: nE9CEsfxd7QnexQKpbRsasvakxwQXgvQt/2wyGB1J9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b3:31:c7:1a:79:fa:21:3c:af:98:42:a9:ec:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8528b8acbc8742764a581a8d979a184295663e
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=990f7fe76c3e5fe948d59461a0d6e19d3b6c9be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:24:c9:44:d3:51:76:3e:dc:b9:1f:12:44:
8c:ea:d3:bf:ab:28:55:57:6a:2a:66:2e:37:fc:b6:
7a:8b:34:4b:63:3c:5d:b4:1e:f8:9a:20:28:ee:e8:
98:be:34:5a:8a:92:d3:0a:3c:15:8d:ff:2f:3e:ed:
8e:f4:ed:24:2a:15:c2:bd:5f:60:4a:1f:c6:72:ce:
f4:8b:01:a3:e1:4d:f0:13:98:b2:d9:7e:c7:0d:1d:
fe:ba:12:0f:1b:3d:53:52:ac:b2:fb:ba:3f:6a:73:
52:15:6f:54:72:9f:6a:29:9b:f8:f3:d1:e2:fd:23:
6e:b7:d3:f2:f5:d6:45:af:3e:e9:49:e5:cb:82:90:
9c:0b:aa:db:41:0a:cf:70:52:9d:ab:e8:16:6f:2d:
2c:53:7a:2b:d6:08:9b:cf:65:c5:14:7f:98:9d:be:
62:d3:fd:7a:1d:7e:f3:3d:81:b5:fa:98:68:de:06:
3f:ae:12:c9:ca:0b:d0:3c:3a:ec:f1:d2:8a:09:4c:
c1:76:31:2d:74:13:44:52:09:d9:fc:cd:2d:8b:25:
9c:30:84:be:a5:88:0f:44:a0:28:4c:be:5c:a8:fc:
02:42:cc:29:fe:ef:ea:5d:49:a1:46:bb:af:6e:5d:
c3:97:83:ab:e6:5f:b2:7a:40:0f:cc:36:5a:11:68:
a6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0F:7F:E7:6C:3E:5F:E9:48:D5:94:61:A0:D6:E1:9D:3B:6C:9B:E2
X509v3 Authority Key Identifier:
keyid:4B:85:28:B8:AC:BC:87:42:76:4A:58:1A:8D:97:9A:18:42:95:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4UouKy8h0J2SlgajZeaGEKVZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c0:c6:6d:92:b0:75:91:3b:6f:e4:f2:e2:cf:a1:2e:0b:95:
1c:e9:08:28:7f:bc:c9:ab:1f:3f:2b:ac:4d:37:17:2d:8e:ff:
2f:58:8e:b7:24:13:05:44:d3:83:02:f5:d8:8f:fe:d7:7c:28:
ad:b5:a4:0c:f2:a6:4e:8d:b7:04:ce:5b:d8:04:e0:d6:23:3e:
7a:3f:08:f1:b1:14:13:33:b9:56:65:b1:01:38:c5:92:94:12:
cb:5a:47:7f:fa:ce:38:ba:af:13:61:63:6e:6f:8e:96:96:8d:
a8:4f:15:7a:78:a5:24:da:bc:b3:f3:b4:f9:17:e5:3f:03:83:
97:40:ba:56:cd:66:b7:02:a3:85:fa:91:09:0b:19:9a:c6:71:
01:f4:70:14:75:32:ef:67:6a:e0:34:7c:84:ff:3c:1c:86:4c:
ff:8f:1e:c5:1d:ed:98:ec:dd:dd:ab:18:48:d3:47:b6:62:8c:
6b:13:04:16:fa:92:4b:b2:89:05:9d:b9:82:57:bc:4c:73:a7:
f8:87:33:b7:ac:82:74:b0:9d:07:5d:d3:c1:2d:e9:da:4c:ef:
83:4f:a3:0f:80:f5:75:d7:61:fb:3d:5c:88:3a:51:60:69:e2:
e4:f2:6e:93:a3:50:58:81:41:8f:b8:30:0f:99:dd:ae:71:63:
e3:f7:ba:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zbMxxxp5+iE8r5hCqex7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiODUyOGI4YWNiYzg3NDI3NjRhNTgxYThkOTc5YTE4NDI5
NTY2M2UwHhcNMjUwMTMxMTAwMDA3WhcNMjUwMjAxMTAwMDA3WjAzMTEwLwYDVQQD
Eyg5OTBmN2ZlNzZjM2U1ZmU5NDhkNTk0NjFhMGQ2ZTE5ZDNiNmM5YmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgQkyUTTUXY+3LkfEkSM6tO/qyhV
V2oqZi43/LZ6izRLYzxdtB74miAo7uiYvjRaipLTCjwVjf8vPu2O9O0kKhXCvV9g
Sh/Gcs70iwGj4U3wE5iy2X7HDR3+uhIPGz1TUqyy+7o/anNSFW9Ucp9qKZv489Hi
/SNut9Py9dZFrz7pSeXLgpCcC6rbQQrPcFKdq+gWby0sU3or1gibz2XFFH+Ynb5i
0/16HX7zPYG1+pho3gY/rhLJygvQPDrs8dKKCUzBdjEtdBNEUgnZ/M0tiyWcMIS+
pYgPRKAoTL5cqPwCQswp/u/qXUmhRruvbl3Dl4Or5l+yekAPzDZaEWim5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkPf+dsPl/pSNWUYaDW4Z07bJviMB8GA1UdIwQY
MBaAFEuFKLisvIdCdkpYGo2XmhhClWY+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzRVb3VLeThoMEoyU2xnYWpaZWFHRUtWWmo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kNzc3ZTYtMGU1OC00MzQ1LWIwYTQt
NGNiZDIyOTE3ZDY1LzEvUzRVb3VLeThoMEoyU2xnYWpaZWFHRUtWWmo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9kNzc3ZTYtMGU1OC00MzQ1LWIwYTQtNGNiZDIyOTE3ZDY1
LzEvUzRVb3VLeThoMEoyU2xnYWpaZWFHRUtWWmo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8DGbZKw
dZE7b+Ty4s+hLguVHOkIKH+8yasfPyusTTcXLY7/L1iOtyQTBUTTgwL12I/+13wo
rbWkDPKmTo23BM5b2ATg1iM+ej8I8bEUEzO5VmWxATjFkpQSy1pHf/rOOLqvE2Fj
bm+OlpaNqE8VenilJNq8s/O0+RflPwODl0C6Vs1mtwKjhfqRCQsZmsZxAfRwFHUy
72dq4DR8hP88HIZM/48exR3tmOzd3asYSNNHtmKMaxMEFvqSS7KJBZ25gle8THOn
+Iczt6yCdLCdB13TwS3p2kzvg0+jD4D1dddh+z1ciDpRYGni5PJuk6NQWIFBj7gw
D5ndrnFj4/e6ng==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:48 2025 by rpki-client