Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
File: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft (raw, json)
Hash identifier: lt6R6ajomqMdvTKcQYmsC+o/uI2cBe30L5SfYQo324s=
Subject key identifier: A5:45:4E:72:59:E7:13:6E:18:C7:10:38:65:C6:69:8D:F3:A2:58:34
Authority key identifier: B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
Certificate issuer: /CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Certificate serial: 0194BD17F980E257150355061C476735BC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
Manifest number: 0E5D
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: snSOZMPfK49AItHHPweedqu08i4.roa (hash: pOp6DYxwdd50QS7EO4q/xTqIWe4F0C/r3RXRy+6+GXo=)
2: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl (hash: iO3SzSUcOowftXumUJo3j5frzKVjaVeAXCvGM+V/oMc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f9:80:e2:57:15:03:55:06:1c:47:67:35:bc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=a5454e7259e7136e18c7103865c6698df3a25834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:43:7d:c4:06:85:1f:ce:a7:08:9e:6c:f8:
cb:0b:35:08:f8:c8:d3:77:28:e9:df:f9:d2:a1:c7:
aa:6e:d8:f2:69:08:2a:2a:86:fc:d6:ad:aa:61:29:
77:81:e6:e4:e0:7a:eb:7e:33:d7:e4:58:98:1f:e9:
ad:15:f2:12:7a:1d:1c:ea:55:a5:8c:74:57:28:7b:
40:b4:69:a9:93:db:ed:02:58:5c:0a:79:2c:96:0d:
fe:bd:f1:98:06:52:17:77:ba:10:ab:3b:fc:1a:a4:
74:b0:87:0d:43:17:84:3a:ae:a0:10:6a:27:e9:ca:
e6:4d:ef:9c:ef:d9:46:5a:18:c1:e4:32:29:60:85:
79:7f:cd:80:ac:e1:25:92:d3:5a:c2:77:30:00:05:
32:c6:3e:ba:41:5e:b6:ce:98:29:97:aa:18:42:c3:
fd:12:7b:ca:83:ec:c8:01:04:7f:6e:9c:01:90:73:
9d:ae:bb:f1:0c:5d:eb:d9:cc:8a:fb:80:51:c2:d3:
b6:51:b8:78:82:95:ab:fe:4a:47:fe:b7:22:4a:98:
fb:6c:91:52:17:cd:38:98:8a:f5:85:92:e7:17:2a:
3a:fb:a0:1d:3b:f7:35:a1:3e:b7:05:74:84:d3:9a:
31:85:67:81:88:cd:c3:60:25:65:55:c7:1d:06:b1:
49:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:45:4E:72:59:E7:13:6E:18:C7:10:38:65:C6:69:8D:F3:A2:58:34
X509v3 Authority Key Identifier:
keyid:B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9a:8b:06:b6:51:54:a5:56:d4:3f:34:73:ed:e4:b7:a0:a1:
70:e3:c7:ee:d3:a3:4c:c1:58:1c:5d:c3:93:44:71:04:23:ee:
7d:9d:de:2b:74:02:ae:bb:ee:52:80:bf:f6:b7:ec:cc:37:49:
cd:b6:00:8d:96:70:89:2e:af:98:3b:4b:a5:30:d0:17:57:b8:
af:cc:3b:09:8b:bb:18:f0:bd:f7:85:94:68:be:ee:f7:4a:58:
f1:9f:4e:f4:25:37:63:81:b8:cf:58:d0:a2:32:af:c3:7a:7f:
0c:09:5f:22:76:36:9c:22:42:09:ab:77:29:e2:14:57:10:45:
53:f0:6d:c5:88:39:64:71:f6:fa:fd:48:00:20:a9:84:75:76:
e8:a3:19:5d:0f:ad:16:7f:d5:47:83:6b:4f:b4:32:ee:85:66:
cd:38:11:e5:0f:9e:97:bb:3c:c5:31:46:14:5d:a2:f5:60:df:
7f:f1:ce:bf:03:16:ad:6a:0d:77:ea:9e:e4:fe:75:a1:11:bf:
c1:0d:9f:7f:77:90:90:a3:b1:6b:da:56:09:e9:f6:95:0e:77:
0d:1c:03:7b:3a:e5:23:43:61:56:5c:bd:77:fc:18:d7:0a:32:
69:5f:23:1c:42:c0:ed:88:3b:12:0a:d0:23:92:2a:87:8a:ed:
44:d5:b0:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/mA4lcVA1UGHEdnNbx1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYTQ4YWYzZDk2OTMxYmQ5MGMzYmZkNTVmMWZhMzA0N2Iz
NTYwMTQwHhcNMjUwMTMxMTYwMDUyWhcNMjUwMjAxMTYwMDUyWjAzMTEwLwYDVQQD
EyhhNTQ1NGU3MjU5ZTcxMzZlMThjNzEwMzg2NWM2Njk4ZGYzYTI1ODM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4VDfcQGhR/OpwiebPjLCzUI+MjT
dyjp3/nSoceqbtjyaQgqKob81q2qYSl3gebk4HrrfjPX5FiYH+mtFfISeh0c6lWl
jHRXKHtAtGmpk9vtAlhcCnkslg3+vfGYBlIXd7oQqzv8GqR0sIcNQxeEOq6gEGon
6crmTe+c79lGWhjB5DIpYIV5f82ArOElktNawncwAAUyxj66QV62zpgpl6oYQsP9
EnvKg+zIAQR/bpwBkHOdrrvxDF3r2cyK+4BRwtO2Ubh4gpWr/kpH/rciSpj7bJFS
F804mIr1hZLnFyo6+6AdO/c1oT63BXSE05oxhWeBiM3DYCVlVccdBrFJ6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVFTnJZ5xNuGMcQOGXGaY3zolg0MB8GA1UdIwQY
MBaAFLKkivPZaTG9kMO/1V8fowR7NWAUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3FTSzg5bHBNYjJRdzdfVlh4LWpCSHMxWUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kNTFhZGYtMTQ5Mi00YzE0LTg4MjEt
YjliZDA2NTk0ODNhLzEvc3FTSzg5bHBNYjJRdzdfVlh4LWpCSHMxWUJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kNTFhZGYtMTQ5Mi00YzE0LTg4MjEtYjliZDA2NTk0ODNh
LzEvc3FTSzg5bHBNYjJRdzdfVlh4LWpCSHMxWUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJqLBrZR
VKVW1D80c+3kt6ChcOPH7tOjTMFYHF3Dk0RxBCPufZ3eK3QCrrvuUoC/9rfszDdJ
zbYAjZZwiS6vmDtLpTDQF1e4r8w7CYu7GPC994WUaL7u90pY8Z9O9CU3Y4G4z1jQ
ojKvw3p/DAlfInY2nCJCCat3KeIUVxBFU/BtxYg5ZHH2+v1IACCphHV26KMZXQ+t
Fn/VR4NrT7Qy7oVmzTgR5Q+el7s8xTFGFF2i9WDff/HOvwMWrWoNd+qe5P51oRG/
wQ2ff3eQkKOxa9pWCen2lQ53DRwDezrlI0NhVly9d/wY1woyaV8jHELA7Yg7EgrQ
I5Iqh4rtRNWwdg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:40 2025 by rpki-client