Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
File: SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft (raw, json)
Hash identifier: jzr2CQmbWcDYE/rhQX0h9URKOl8emvGIfV4zCEBPc/c=
Subject key identifier: 34:F9:9D:85:7B:6B:23:98:8A:CC:64:89:48:97:23:67:38:79:B9:42
Authority key identifier: 48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
Certificate issuer: /CN=48de4638c972c8ce19c4669ab57db266af7285b7
Certificate serial: 0194BD85B26152D73FC9619E94F8BA0C7B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
Manifest number: 0B47
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl (hash: xvm1IsY4wEjDFu6FWHWTBAnz9mlzppjIKwrndHtLJHg=)
2: q3FDx21p8smEfAYPTo0ZQLgPkqo.roa (hash: 2Du6IDXw8hGPYtGe+KE8+hTPSOOHZMlNjWnrWGKbnPs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b2:61:52:d7:3f:c9:61:9e:94:f8:ba:0c:7b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48de4638c972c8ce19c4669ab57db266af7285b7
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=34f99d857b6b23988acc6489489723673879b942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:83:50:e5:52:66:b2:39:26:e9:e4:0f:e4:
01:b8:b5:f3:71:d2:fe:b7:c3:52:78:cd:8d:10:27:
65:c7:10:a1:93:af:6e:6f:1e:cd:40:5e:f0:1e:3d:
af:ea:7c:18:d2:13:df:1e:da:90:b3:dc:0b:d0:04:
56:da:cc:aa:0b:4e:46:b3:37:a1:c5:18:dd:a9:95:
4a:e0:5e:04:dc:56:c0:76:6f:17:da:46:3f:c7:36:
ec:59:70:44:e0:9c:ec:f3:3c:80:c0:f1:f2:90:9d:
91:ad:49:65:a5:33:09:c2:00:cb:90:f8:9c:42:b8:
ad:94:78:3c:fc:a4:c3:39:33:bb:ad:1c:db:4c:d0:
58:8d:f6:8e:22:20:cb:e6:70:61:db:01:60:92:55:
e0:50:11:f0:5d:9a:a8:96:71:88:19:0a:ac:08:d6:
cf:12:a9:f1:f6:04:92:22:67:83:44:af:47:0e:69:
e3:75:55:dc:e2:49:19:d5:95:7d:8f:6b:19:a9:6c:
15:dd:cc:63:10:1e:5a:98:a5:5c:79:a2:d9:69:3b:
4a:08:62:4e:17:1f:a4:41:56:84:c3:16:71:d5:2f:
9a:3a:8b:bc:8e:29:da:e1:0f:fe:9d:ea:17:a9:c4:
0b:f3:a4:e4:9c:6a:6b:55:47:e2:42:37:13:2e:a8:
00:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F9:9D:85:7B:6B:23:98:8A:CC:64:89:48:97:23:67:38:79:B9:42
X509v3 Authority Key Identifier:
keyid:48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e0:fc:4c:e2:87:ad:e3:d2:ce:67:c8:a4:91:b0:af:ec:78:
6b:ec:9c:ba:1e:85:94:3a:5a:18:03:0f:a3:32:f3:c5:e2:ac:
10:52:31:7a:c7:28:98:bc:74:38:8f:8a:a3:f2:63:be:8a:8a:
c4:f0:e0:f8:77:b8:b9:6d:f5:24:9c:25:47:15:eb:30:e3:f5:
2d:98:53:05:19:fb:ae:c5:bb:3d:e7:e2:c4:34:a2:56:24:13:
c8:4f:b9:21:08:e2:02:43:e4:05:cc:65:9a:e2:d4:fc:9a:71:
35:92:c0:87:ed:90:4d:7d:b7:3b:2c:00:7a:0d:79:8d:1f:0c:
4d:05:33:c6:44:9a:80:eb:43:89:ba:45:d4:e3:a9:ba:63:e9:
df:bf:a0:e7:e8:77:0d:2d:5e:51:e0:1b:37:6e:0c:96:f0:2f:
4e:80:da:df:5c:e1:ce:00:a0:7f:05:57:02:66:23:9b:f0:81:
62:32:22:d0:e0:b1:20:a4:cc:d4:8c:e9:29:78:e5:c0:37:b2:
ff:dd:d0:49:16:1e:e4:32:ab:46:02:c8:1a:b7:67:c7:2a:6d:
48:fd:35:29:03:5d:f3:25:88:3e:2d:a3:37:22:f3:6a:39:00:
6e:73:25:fe:04:3e:75:60:07:c8:b5:a3:45:93:46:6f:b7:2e:
ec:70:b4:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hbJhUtc/yWGelPi6DHs7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZGU0NjM4Yzk3MmM4Y2UxOWM0NjY5YWI1N2RiMjY2YWY3
Mjg1YjcwHhcNMjUwMTMxMTgwMDQzWhcNMjUwMjAxMTgwMDQzWjAzMTEwLwYDVQQD
EygzNGY5OWQ4NTdiNmIyMzk4OGFjYzY0ODk0ODk3MjM2NzM4NzliOTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwqDUOVSZrI5JunkD+QBuLXzcdL+
t8NSeM2NECdlxxChk69ubx7NQF7wHj2v6nwY0hPfHtqQs9wL0ARW2syqC05Gszeh
xRjdqZVK4F4E3FbAdm8X2kY/xzbsWXBE4Jzs8zyAwPHykJ2RrUllpTMJwgDLkPic
QritlHg8/KTDOTO7rRzbTNBYjfaOIiDL5nBh2wFgklXgUBHwXZqolnGIGQqsCNbP
Eqnx9gSSImeDRK9HDmnjdVXc4kkZ1ZV9j2sZqWwV3cxjEB5amKVceaLZaTtKCGJO
Fx+kQVaEwxZx1S+aOou8jina4Q/+neoXqcQL86TknGprVUfiQjcTLqgATwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDT5nYV7ayOYisxkiUiXI2c4eblCMB8GA1UdIwQY
MBaAFEjeRjjJcsjOGcRmmrV9smavcoW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8wMzY4ODItYzgwMS00ZWY3LWJlMWYt
ZmNjNjYxNGRlMDM1LzEvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8wMzY4ODItYzgwMS00ZWY3LWJlMWYtZmNjNjYxNGRlMDM1
LzEvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjeD8TOKH
rePSzmfIpJGwr+x4a+ycuh6FlDpaGAMPozLzxeKsEFIxescomLx0OI+Ko/JjvoqK
xPDg+He4uW31JJwlRxXrMOP1LZhTBRn7rsW7PefixDSiViQTyE+5IQjiAkPkBcxl
muLU/JpxNZLAh+2QTX23OywAeg15jR8MTQUzxkSagOtDibpF1OOpumPp37+g5+h3
DS1eUeAbN24MlvAvToDa31zhzgCgfwVXAmYjm/CBYjIi0OCxIKTM1IzpKXjlwDey
/93QSRYe5DKrRgLIGrdnxyptSP01KQNd8yWIPi2jNyLzajkAbnMl/gQ+dWAHyLWj
RZNGb7cu7HC0aQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:10 2025 by rpki-client