Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
File: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft (raw, json)
Hash identifier: ZD3Fl8RJM4PVse9g7em2ZbLjHyqvEmc3xyfI4AUUwrQ=
Subject key identifier: C0:39:84:30:C0:85:66:BC:A6:EE:03:F5:8F:DA:83:D5:A2:81:73:0C
Authority key identifier: 4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
Certificate issuer: /CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Certificate serial: 0194BC050FBDBCEDB05D8C8C13356F3EF378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
Manifest number: 1277
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: 4HxC1YnWdGWm4g8pwWn_Hlow4Qo.roa (hash: qpMp8mE7oIuGxE7UiKhcFCXTbJmQfeSevFyEhmL5FpM=)
2: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl (hash: UdTqdst5wNiKLFEPt1PVtkSvJk3ZnnHm/jsgg4BLRdY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0f:bd:bc:ed:b0:5d:8c:8c:13:35:6f:3e:f3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=c0398430c08566bca6ee03f58fda83d5a281730c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:b1:4c:ed:52:53:2d:77:a0:95:be:cd:62:
d9:ce:fc:9e:83:24:dc:9c:92:69:e7:03:3a:a9:c0:
84:f1:85:f0:b7:3e:ad:dc:b8:c8:14:23:dd:16:1f:
79:fb:1a:fa:9f:1a:f2:67:33:aa:03:00:33:5f:cd:
59:99:81:94:f5:dd:f9:7e:66:2f:d0:3d:0f:d6:f1:
ef:41:d3:66:70:56:ad:b6:17:99:78:e2:6f:70:5b:
79:e1:26:c9:48:74:fe:47:cf:eb:92:c2:4f:d7:8d:
62:93:92:da:4d:5c:61:36:7d:40:61:eb:08:82:ea:
68:74:d9:ae:3f:f6:da:13:e1:6f:3a:bd:10:7b:05:
d5:72:a1:67:ba:99:69:8b:6b:0b:df:97:6d:16:cb:
39:ed:f5:e7:51:00:18:00:58:4e:07:99:3d:28:9e:
d0:3d:e2:6e:15:ec:2d:4c:0f:eb:f0:2e:87:ce:bf:
d3:55:22:f0:ab:ac:8f:d4:11:77:53:d2:99:fd:52:
22:34:9c:12:d3:dc:db:48:80:1d:d0:e8:78:fb:f7:
ef:bc:44:6f:a3:4a:76:cd:9d:f4:df:61:be:02:c2:
21:25:dc:e6:b7:38:29:dd:7a:9b:66:a4:66:36:05:
61:1e:b5:dc:58:47:67:8f:56:8d:6d:87:e4:91:68:
ba:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:39:84:30:C0:85:66:BC:A6:EE:03:F5:8F:DA:83:D5:A2:81:73:0C
X509v3 Authority Key Identifier:
keyid:4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0c:0a:38:b6:2d:ec:20:d4:90:1c:f6:e5:1d:10:f5:86:44:
ac:d7:55:09:c5:45:e7:16:5b:c6:58:3b:51:16:13:1a:22:78:
f3:b7:05:6f:c1:32:57:d8:ff:d9:63:99:b4:19:86:d9:87:ff:
38:7a:34:b7:3c:eb:0f:b8:4b:24:86:59:43:97:4d:a4:e9:0d:
6c:d5:12:e1:0e:5c:f8:09:09:02:b8:b1:3c:85:3d:6d:10:9f:
f6:60:62:07:b0:06:df:0b:c2:f1:29:f5:18:b5:61:0d:f8:00:
9d:fc:67:fa:44:37:af:67:f1:39:1d:ec:bf:85:b9:bc:50:10:
3d:0b:6d:35:7d:04:f5:97:f7:6d:e3:86:9f:eb:72:a2:e7:ae:
14:cd:ae:30:79:1e:b3:b5:c5:68:d3:a5:b3:8d:9f:fb:4d:dd:
bc:54:a5:04:38:1c:c6:9c:1f:31:10:37:c7:72:7f:e0:8a:a8:
e3:76:16:8b:da:be:b8:50:cc:14:dc:0e:3d:10:75:ba:30:d3:
6e:17:2f:91:01:0f:2d:36:20:5f:ee:c0:03:fd:b2:43:33:17:
94:81:91:c2:d5:56:fd:0e:e1:19:7e:ac:94:c5:fa:92:ff:22:
a1:e4:59:d8:3e:86:eb:39:e9:89:b7:86:ec:28:2d:e2:b6:3e:
11:bb:c3:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQ+9vO2wXYyMEzVvPvN4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhM2MzNjBjMzY0YmI2NmRjNjM1MTcxOTM1NjhmNWJhODUx
N2FjZTgwHhcNMjUwMTMxMTEwMDM1WhcNMjUwMjAxMTEwMDM1WjAzMTEwLwYDVQQD
EyhjMDM5ODQzMGMwODU2NmJjYTZlZTAzZjU4ZmRhODNkNWEyODE3MzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYyxTO1SUy13oJW+zWLZzvyegyTc
nJJp5wM6qcCE8YXwtz6t3LjIFCPdFh95+xr6nxryZzOqAwAzX81ZmYGU9d35fmYv
0D0P1vHvQdNmcFattheZeOJvcFt54SbJSHT+R8/rksJP141ik5LaTVxhNn1AYesI
gupodNmuP/baE+FvOr0QewXVcqFnuplpi2sL35dtFss57fXnUQAYAFhOB5k9KJ7Q
PeJuFewtTA/r8C6Hzr/TVSLwq6yP1BF3U9KZ/VIiNJwS09zbSIAd0Oh4+/fvvERv
o0p2zZ3032G+AsIhJdzmtzgp3XqbZqRmNgVhHrXcWEdnj1aNbYfkkWi6XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMA5hDDAhWa8pu4D9Y/ag9WigXMMMB8GA1UdIwQY
MBaAFEo8Ngw2S7ZtxjUXGTVo9bqFF6zoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi84YWQ0ZTUtZDljOS00M2U3LWJlMGYt
MWQ5Yzg2NDE2ZTliLzEvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi84YWQ0ZTUtZDljOS00M2U3LWJlMGYtMWQ5Yzg2NDE2ZTli
LzEvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwwKOLYt
7CDUkBz25R0Q9YZErNdVCcVF5xZbxlg7URYTGiJ487cFb8EyV9j/2WOZtBmG2Yf/
OHo0tzzrD7hLJIZZQ5dNpOkNbNUS4Q5c+AkJArixPIU9bRCf9mBiB7AG3wvC8Sn1
GLVhDfgAnfxn+kQ3r2fxOR3sv4W5vFAQPQttNX0E9Zf3beOGn+tyoueuFM2uMHke
s7XFaNOls42f+03dvFSlBDgcxpwfMRA3x3J/4Iqo43YWi9q+uFDMFNwOPRB1ujDT
bhcvkQEPLTYgX+7AA/2yQzMXlIGRwtVW/Q7hGX6slMX6kv8ioeRZ2D6G6znpibeG
7Cgt4rY+EbvDDA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:37 2025 by rpki-client