Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
File: SGbUAn3jwn6JfXKtsshth6t-WsI.mft (raw, json)
Hash identifier: S0woxLopmkRhuJUDJfqMATaUt3+rVkFrsoYVeUzJHjg=
Subject key identifier: 13:B4:12:2B:3D:1D:96:B2:9C:A9:71:DB:08:54:35:AA:BD:08:14:ED
Authority key identifier: 48:66:D4:02:7D:E3:C2:7E:89:7D:72:AD:B2:C8:6D:87:AB:7E:5A:C2
Certificate issuer: /CN=4866d4027de3c27e897d72adb2c86d87ab7e5ac2
Certificate serial: 0194BD85AD8D500DB75979F2E67BA8BF1A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: MXST_7VxoAANhfz5HopBnTAfZfE.roa (hash: WwAleikgSWf+4k301L6Hz+MXSbtdCoBSAXsJKdsGXBk=)
2: SGbUAn3jwn6JfXKtsshth6t-WsI.crl (hash: IM124bNM9oQeZlx+FiVmkdg617GobLUGI/uqxbVUoig=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ad:8d:50:0d:b7:59:79:f2:e6:7b:a8:bf:1a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4866d4027de3c27e897d72adb2c86d87ab7e5ac2
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=13b4122b3d1d96b29ca971db085435aabd0814ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:96:e6:cf:08:e5:d6:20:af:e1:85:a4:c8:20:
30:46:1a:fa:b8:ca:53:3d:e1:bb:cc:b2:25:18:be:
1b:fd:d3:ba:f3:6e:d6:ba:74:2b:8a:83:bd:9c:d1:
a2:a2:dc:f7:63:6c:77:44:c9:ae:55:c0:b7:de:51:
36:7b:b6:b5:d6:2c:f0:13:07:ab:3d:f0:5e:be:cc:
12:0d:6d:53:08:c5:2a:09:9d:66:c6:e6:ff:34:fe:
78:1e:58:d6:40:88:75:32:7c:00:4e:29:14:72:fa:
79:dc:97:10:2c:42:48:b7:3b:16:6b:b6:74:3c:fa:
6d:68:77:86:a1:8c:e3:19:65:1e:a6:2d:6e:8d:50:
f9:39:af:cc:01:bd:65:1e:90:50:a8:84:67:2d:4a:
c5:b6:21:a9:1f:46:1e:75:ab:41:12:50:90:6e:17:
e2:9a:82:ca:15:02:c6:f9:81:e3:1d:4c:e4:a4:92:
35:10:2a:bc:a2:33:4e:f0:86:72:50:75:81:6d:83:
88:e6:86:37:a1:41:54:b7:0a:fa:b5:b2:5a:98:e1:
64:3b:7b:de:56:69:6a:a3:1a:08:a2:25:62:8e:e0:
37:31:c2:ff:20:2a:1c:0d:75:78:92:07:89:2d:8c:
cd:6b:d9:38:e1:96:c4:6f:b9:49:e7:5d:4c:56:8c:
32:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B4:12:2B:3D:1D:96:B2:9C:A9:71:DB:08:54:35:AA:BD:08:14:ED
X509v3 Authority Key Identifier:
keyid:48:66:D4:02:7D:E3:C2:7E:89:7D:72:AD:B2:C8:6D:87:AB:7E:5A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:cb:93:0e:30:7e:91:1e:43:90:8f:ea:91:72:5a:e7:0a:e3:
ee:61:6a:ab:c6:b2:4a:bc:0b:c1:4e:4f:e2:bf:00:24:cc:bf:
14:af:1c:4d:da:ce:09:68:c5:3c:a6:f6:63:15:8b:46:61:05:
cb:f5:64:e2:ec:cc:4c:51:f7:c5:28:1a:a9:81:e6:07:e8:c2:
ee:24:87:a8:78:c1:e4:e5:33:5e:d5:e2:64:3f:b1:17:09:89:
b0:4f:02:ee:5b:62:09:89:c7:9e:05:a6:a9:a2:ea:ce:64:db:
87:14:f0:3c:6f:8e:a8:d2:0e:a4:d0:7f:ad:53:a6:36:fd:49:
83:f8:42:e8:93:59:2b:16:66:08:bd:cf:a4:4b:43:26:cd:0e:
54:71:b1:ac:35:67:96:bc:39:2b:bf:6e:da:b3:cb:2b:fe:58:
ac:0c:d0:06:67:18:20:87:8a:ff:b6:d3:85:ec:ac:bb:56:19:
97:30:00:7b:50:45:3c:70:63:97:91:a5:11:d9:97:10:64:d2:
3c:9d:c9:b9:ce:8d:92:0a:cd:a9:6d:ad:bb:68:6f:5e:34:cb:
d9:e0:cb:c8:ef:0d:f8:b7:1e:92:35:0f:c5:5a:d6:b4:07:94:
ad:4d:ec:d2:c5:dd:c3:1d:16:71:9f:f9:3b:1d:34:54:8e:3f:
5b:71:ba:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9ha2NUA23WXny5nuovxohMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NjZkNDAyN2RlM2MyN2U4OTdkNzJhZGIyYzg2ZDg3YWI3
ZTVhYzIwHhcNMjUwMTMxMTgwMDQxWhcNMjUwMjAxMTgwMDQxWjAzMTEwLwYDVQQD
EygxM2I0MTIyYjNkMWQ5NmIyOWNhOTcxZGIwODU0MzVhYWJkMDgxNGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Zbmzwjl1iCv4YWkyCAwRhr6uMpT
PeG7zLIlGL4b/dO6827WunQrioO9nNGiotz3Y2x3RMmuVcC33lE2e7a11izwEwer
PfBevswSDW1TCMUqCZ1mxub/NP54HljWQIh1MnwATikUcvp53JcQLEJItzsWa7Z0
PPptaHeGoYzjGWUepi1ujVD5Oa/MAb1lHpBQqIRnLUrFtiGpH0YedatBElCQbhfi
moLKFQLG+YHjHUzkpJI1ECq8ojNO8IZyUHWBbYOI5oY3oUFUtwr6tbJamOFkO3ve
VmlqoxoIoiVijuA3McL/ICocDXV4kgeJLYzNa9k44ZbEb7lJ511MVowy/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBO0Eis9HZaynKlx2whUNaq9CBTtMB8GA1UdIwQY
MBaAFEhm1AJ948J+iX1yrbLIbYerflrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0diVUFuM2p3bjZKZlhLdHNzaHRoNnQtV3NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni81NTZhZDUtMmU2Yi00ZDUxLTg1NmMt
NjFjOWMyOWMyNzVkLzEvU0diVUFuM2p3bjZKZlhLdHNzaHRoNnQtV3NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni81NTZhZDUtMmU2Yi00ZDUxLTg1NmMtNjFjOWMyOWMyNzVk
LzEvU0diVUFuM2p3bjZKZlhLdHNzaHRoNnQtV3NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsuTDjB+
kR5DkI/qkXJa5wrj7mFqq8aySrwLwU5P4r8AJMy/FK8cTdrOCWjFPKb2YxWLRmEF
y/Vk4uzMTFH3xSgaqYHmB+jC7iSHqHjB5OUzXtXiZD+xFwmJsE8C7ltiCYnHngWm
qaLqzmTbhxTwPG+OqNIOpNB/rVOmNv1Jg/hC6JNZKxZmCL3PpEtDJs0OVHGxrDVn
lrw5K79u2rPLK/5YrAzQBmcYIIeK/7bTheysu1YZlzAAe1BFPHBjl5GlEdmXEGTS
PJ3Juc6NkgrNqW2tu2hvXjTL2eDLyO8N+LcekjUPxVrWtAeUrU3s0sXdwx0WcZ/5
Ox00VI4/W3G6HQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:14 2025 by rpki-client