Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
File: SEhV5wGTloY1rESSrXAqgkjgM-g.mft (raw, json)
Hash identifier: QjytQIim7jAgyno8a4JB3eAmarDryNIXfQWQw5joYE4=
Subject key identifier: 30:57:04:77:FF:C4:53:15:24:62:C1:B8:7E:0D:5C:44:EF:1D:FA:D3
Authority key identifier: 48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
Certificate issuer: /CN=484855e70193968635ac4492ad702a8248e033e8
Certificate serial: 0194BBCEEAE92A2712BB6E88FF6F6F7B328C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:01:27 +0000
Manifest this update: Fri 31 Jan 2025 10:01:27 +0000
Manifest next update: Sat 01 Feb 2025 10:01:27 +0000
Files and hashes: 1: QZ0qtYVoe9eTyxZ80lBv-di1FfE.roa (hash: 25XKDnhztQCemAlFiOHm1I7VVswm+flqcSO7FBEPKO4=)
2: SEhV5wGTloY1rESSrXAqgkjgM-g.crl (hash: pku+MjQzk1ZmEbLCMYQx5jutV/pRDtgvOA6p7WNTty0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ea:e9:2a:27:12:bb:6e:88:ff:6f:6f:7b:32:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484855e70193968635ac4492ad702a8248e033e8
Validity
Not Before: Jan 31 10:01:27 2025 GMT
Not After : Feb 1 10:01:27 2025 GMT
Subject: CN=30570477ffc453152462c1b87e0d5c44ef1dfad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:90:b8:13:da:06:e7:c9:74:a2:d3:67:34:
60:45:e6:7d:e5:fa:bb:04:46:20:ae:78:5d:55:60:
bd:1d:06:f1:b4:e9:d7:9c:07:9a:2f:3b:7c:85:7a:
27:10:0e:8b:25:09:65:18:08:98:51:7e:4b:f8:c0:
65:f7:d7:85:14:80:01:38:c5:87:d1:83:74:04:52:
40:04:d1:80:77:f5:02:ce:f6:f0:1c:52:73:4d:c1:
13:7d:da:9e:ef:31:ff:20:ca:fd:1f:70:07:82:17:
7a:e0:5e:0e:ef:9e:d8:1b:a7:88:18:9d:8c:2f:8e:
5c:cd:65:96:21:93:79:7e:1a:8f:3b:4c:00:b1:b7:
f6:e7:c6:db:af:db:22:e6:f4:25:16:6d:a4:2a:c2:
2e:73:64:e8:43:a4:9a:cc:47:1b:e0:94:44:1d:79:
aa:a0:42:99:1a:8f:6b:90:8e:9e:ef:13:fa:1a:65:
7c:e8:94:10:53:1a:f6:e7:5c:43:7e:c4:8c:84:96:
ef:c6:3c:80:56:f5:73:1e:35:06:9a:11:95:bf:c1:
a6:69:95:b8:96:12:41:35:e4:01:aa:71:31:2b:59:
8f:e9:e1:75:dd:22:1a:94:54:4e:38:87:2a:7b:e1:
3f:e9:56:c1:db:62:82:da:65:3b:00:da:68:61:ee:
37:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:57:04:77:FF:C4:53:15:24:62:C1:B8:7E:0D:5C:44:EF:1D:FA:D3
X509v3 Authority Key Identifier:
keyid:48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:79:4c:26:49:75:d7:05:52:17:fd:3c:fb:af:c2:43:6b:8e:
13:c1:cd:32:0d:67:df:9a:31:b5:9a:90:e2:8f:a7:4d:67:6d:
43:c7:22:12:aa:a1:c4:01:12:81:72:33:0f:88:2a:ab:fe:4a:
1b:6e:98:c3:e1:a2:1c:ec:2b:b8:49:23:83:6f:30:48:50:c6:
c1:3a:95:3e:f3:62:0c:62:c5:f7:8d:71:27:94:b1:03:3a:5c:
2c:eb:cb:c9:a4:dd:76:07:4f:68:80:b1:dc:66:1e:dd:fc:f2:
b5:29:54:c4:5a:c1:2d:12:f1:18:1d:55:27:f3:9a:d7:01:af:
e6:ab:37:82:b2:c6:ee:80:b7:ce:d9:e9:d0:b1:4b:92:c4:0a:
a3:65:35:30:8b:0f:66:10:b2:3f:33:9f:79:c6:0e:69:8c:96:
2c:25:e6:f8:b2:6f:07:ff:c6:c4:cf:b8:0a:1f:af:0c:68:a3:
f9:e4:a8:75:0e:ed:5b:be:97:cb:74:b0:a9:29:57:8b:b8:df:
47:97:55:59:a5:e5:d9:df:e0:eb:15:3d:92:19:e1:80:9f:80:
e7:b6:f7:ef:18:70:ea:84:de:56:b2:d3:6a:12:73:ba:30:de:
fa:20:ad:69:13:cb:b2:a1:80:bf:24:e3:9b:6c:2f:e9:77:c7:
42:a8:b1:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zurpKicSu26I/29vezKMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NDg1NWU3MDE5Mzk2ODYzNWFjNDQ5MmFkNzAyYTgyNDhl
MDMzZTgwHhcNMjUwMTMxMTAwMTI3WhcNMjUwMjAxMTAwMTI3WjAzMTEwLwYDVQQD
EygzMDU3MDQ3N2ZmYzQ1MzE1MjQ2MmMxYjg3ZTBkNWM0NGVmMWRmYWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJyQuBPaBufJdKLTZzRgReZ95fq7
BEYgrnhdVWC9HQbxtOnXnAeaLzt8hXonEA6LJQllGAiYUX5L+MBl99eFFIABOMWH
0YN0BFJABNGAd/UCzvbwHFJzTcETfdqe7zH/IMr9H3AHghd64F4O757YG6eIGJ2M
L45czWWWIZN5fhqPO0wAsbf258bbr9si5vQlFm2kKsIuc2ToQ6SazEcb4JREHXmq
oEKZGo9rkI6e7xP6GmV86JQQUxr251xDfsSMhJbvxjyAVvVzHjUGmhGVv8GmaZW4
lhJBNeQBqnExK1mP6eF13SIalFROOIcqe+E/6VbB22KC2mU7ANpoYe43EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBXBHf/xFMVJGLBuH4NXETvHfrTMB8GA1UdIwQY
MBaAFEhIVecBk5aGNaxEkq1wKoJI4DPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0VoVjV3R1Rsb1kxckVTU3JYQXFna2pnTS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9hNzYyMzQtNjdkMy00ODMxLWE4YzIt
ZTJjM2QzMjAzNGM0LzEvU0VoVjV3R1Rsb1kxckVTU3JYQXFna2pnTS1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9hNzYyMzQtNjdkMy00ODMxLWE4YzItZTJjM2QzMjAzNGM0
LzEvU0VoVjV3R1Rsb1kxckVTU3JYQXFna2pnTS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHlMJkl1
1wVSF/08+6/CQ2uOE8HNMg1n35oxtZqQ4o+nTWdtQ8ciEqqhxAESgXIzD4gqq/5K
G26Yw+GiHOwruEkjg28wSFDGwTqVPvNiDGLF941xJ5SxAzpcLOvLyaTddgdPaICx
3GYe3fzytSlUxFrBLRLxGB1VJ/Oa1wGv5qs3grLG7oC3ztnp0LFLksQKo2U1MIsP
ZhCyPzOfecYOaYyWLCXm+LJvB//GxM+4Ch+vDGij+eSodQ7tW76Xy3SwqSlXi7jf
R5dVWaXl2d/g6xU9khnhgJ+A57b37xhw6oTeVrLTahJzujDe+iCtaRPLsqGAvyTj
m2wv6XfHQqixVg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:45:43 2025 by rpki-client