Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
File: So4X_aopGHuOQNYwrd69n9JMAXY.mft (raw, json)
Hash identifier: 0mUaLdDkjPNJc0YTlga/g/cablay9ZLEwU7uD5rhoAc=
Subject key identifier: A7:6F:E9:93:B6:81:73:52:7F:40:B1:90:CB:0E:44:22:CF:03:EE:75
Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Certificate serial: 0194BC052249F41AC8F783ADF3BD4CA22E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: 0Wv8atHhhinqkL8Z_4yWBd1Kqg8.roa (hash: fILNYD3epuR8fxYq9hgXxD3GgQQCM01sw2YL4pd5Wks=)
2: So4X_aopGHuOQNYwrd69n9JMAXY.crl (hash: pVaVzHGAUbncwAqjDQ15Wx95JkwRPhV4szN1JnDD1s4=)
3: ndcYXik2c-8B-vqJArbqTb-_G3U.roa (hash: yy5P560QguXuhVFyLBs0BE4KQ8bMeN1jFaQHeK1c0oU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:22:49:f4:1a:c8:f7:83:ad:f3:bd:4c:a2:2e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=a76fe993b68173527f40b190cb0e4422cf03ee75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:5a:5b:31:df:dd:e8:55:96:eb:0b:81:7f:
83:91:0c:25:68:1c:f8:6f:2e:f8:98:75:0b:33:63:
9b:ec:f6:ca:f5:47:8d:4f:d9:91:69:be:a1:3b:ca:
e2:28:dd:6e:a9:9d:f0:f1:e9:57:2a:b3:c2:97:cb:
d5:8f:01:71:93:36:cb:6c:1a:05:c5:97:70:a0:ad:
d1:39:36:ad:1d:cf:b7:ef:07:88:07:7f:e2:1f:96:
24:8e:ef:ad:4a:d7:d5:e9:9d:be:66:a4:80:d4:8a:
84:0a:3e:80:38:68:1e:c7:48:90:58:d7:cb:11:d0:
59:52:8b:08:77:b7:0d:27:ea:b6:b4:58:46:3d:a3:
be:ac:da:19:09:fa:54:f7:12:fd:9f:77:14:af:55:
30:b8:5b:bf:85:42:9a:04:b2:5e:ef:a1:14:63:b2:
9f:da:56:82:ac:3c:28:21:ee:d7:dc:21:7f:6d:9e:
8b:b0:5d:0a:49:07:1e:de:f7:37:5a:16:3e:f2:77:
5e:07:22:f3:23:bf:69:16:fc:8e:91:42:6f:6e:b4:
b1:af:47:11:0e:e2:50:7d:63:72:1f:e7:b2:89:60:
d2:09:d6:21:7f:8f:1d:d0:e7:21:b1:56:88:d8:43:
8e:95:2a:fe:cd:29:33:bf:b5:e4:17:ae:45:4e:db:
3c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6F:E9:93:B6:81:73:52:7F:40:B1:90:CB:0E:44:22:CF:03:EE:75
X509v3 Authority Key Identifier:
keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ed:bb:6d:ab:80:40:2d:db:26:f1:2c:0b:c3:69:69:f0:55:
2a:b5:93:08:4c:34:8f:b0:d0:0f:d1:82:57:85:61:33:53:4d:
35:9c:3b:1e:c4:e1:40:30:b8:67:f4:ee:36:2e:e6:6d:af:2f:
78:6e:83:a4:a4:91:ce:75:79:37:29:ba:9f:6c:9f:05:13:33:
e2:f7:01:9d:f8:da:63:97:b7:67:5d:e9:30:9c:cf:7e:8c:a9:
30:25:52:88:32:d0:8b:f3:8b:76:f7:d2:6a:e3:98:8f:4b:ad:
68:dc:b1:e8:0f:06:ef:8f:74:3f:72:bf:a1:ec:a1:6e:4c:1a:
65:24:fd:d3:1c:5e:f7:f8:a9:c1:55:d6:cf:da:d6:4f:a3:96:
df:fd:ac:aa:f4:df:bf:bf:e4:bd:d0:af:67:96:89:fc:ae:33:
ba:a3:f2:89:3f:96:b5:88:90:b4:08:b6:54:21:31:69:aa:07:
58:03:5f:a6:c5:ae:7f:ef:0c:4f:6d:5e:34:13:26:aa:fe:5b:
9e:e7:b0:ab:ba:a1:d1:42:16:55:a8:89:30:44:72:ed:e5:2d:
11:9f:d9:f2:a3:c6:dc:54:5f:7b:06:59:3f:dd:1d:b0:aa:63:
e3:05:b2:f8:dc:46:b0:ed:65:78:a0:48:d1:68:98:c2:28:07:
6a:2d:2e:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BSJJ9BrI94Ot871Moi44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOGUxN2ZkYWEyOTE4N2I4ZTQwZDYzMGFkZGViZDlmZDI0
YzAxNzYwHhcNMjUwMTMxMTEwMDQwWhcNMjUwMjAxMTEwMDQwWjAzMTEwLwYDVQQD
EyhhNzZmZTk5M2I2ODE3MzUyN2Y0MGIxOTBjYjBlNDQyMmNmMDNlZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvpaWzHf3ehVlusLgX+DkQwlaBz4
by74mHULM2Ob7PbK9UeNT9mRab6hO8riKN1uqZ3w8elXKrPCl8vVjwFxkzbLbBoF
xZdwoK3ROTatHc+37weIB3/iH5Ykju+tStfV6Z2+ZqSA1IqECj6AOGgex0iQWNfL
EdBZUosId7cNJ+q2tFhGPaO+rNoZCfpU9xL9n3cUr1UwuFu/hUKaBLJe76EUY7Kf
2laCrDwoIe7X3CF/bZ6LsF0KSQce3vc3WhY+8ndeByLzI79pFvyOkUJvbrSxr0cR
DuJQfWNyH+eyiWDSCdYhf48d0OchsVaI2EOOlSr+zSkzv7XkF65FTts8kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdv6ZO2gXNSf0CxkMsORCLPA+51MB8GA1UdIwQY
MBaAFEqOF/2qKRh7jkDWMK3evZ/STAF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU280WF9hb3BHSHVPUU5Zd3JkNjluOUpNQVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jMjQzNDEtYTdjZi00Mjc1LWFjNGYt
NWM3NjVjNTM3M2EzLzEvU280WF9hb3BHSHVPUU5Zd3JkNjluOUpNQVhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9jMjQzNDEtYTdjZi00Mjc1LWFjNGYtNWM3NjVjNTM3M2Ez
LzEvU280WF9hb3BHSHVPUU5Zd3JkNjluOUpNQVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARe27bauA
QC3bJvEsC8NpafBVKrWTCEw0j7DQD9GCV4VhM1NNNZw7HsThQDC4Z/TuNi7mba8v
eG6DpKSRznV5Nym6n2yfBRMz4vcBnfjaY5e3Z13pMJzPfoypMCVSiDLQi/OLdvfS
auOYj0utaNyx6A8G7490P3K/oeyhbkwaZST90xxe9/ipwVXWz9rWT6OW3/2sqvTf
v7/kvdCvZ5aJ/K4zuqPyiT+WtYiQtAi2VCExaaoHWANfpsWuf+8MT21eNBMmqv5b
nuewq7qh0UIWVaiJMERy7eUtEZ/Z8qPG3FRfewZZP90dsKpj4wWy+NxGsO1leKBI
0WiYwigHai0uRQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:03:01 2025 by rpki-client