Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
File: sMXmrlmHEAZksjA0zvxy1H-PS5s.mft (raw, json)
Hash identifier: LVCyKGylBOAsLQvcjr6NjZnJLVSYOxY6tCFIvtsO90Y=
Subject key identifier: 03:83:51:80:93:D4:CA:CF:98:56:16:68:7F:80:3E:7D:B0:4D:D7:AB
Authority key identifier: B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
Certificate issuer: /CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Certificate serial: 0194BBCE43198B8B816A1992BD23F34CF89F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: Xpu5z6C93G9BRUn-gmewTXpV4p4.roa (hash: HRJgPQbn7ofu1m7IlOj+BpfT6NzW9G/pwBr/coPVab0=)
2: sMXmrlmHEAZksjA0zvxy1H-PS5s.crl (hash: qDhnRxpym8zKNAvabkidF9WOGVIQI9wMlHUpVQUAcaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:43:19:8b:8b:81:6a:19:92:bd:23:f3:4c:f8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=0383518093d4cacf985616687f803e7db04dd7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:9c:81:06:11:23:58:e6:b7:1f:d5:2f:83:
ba:c3:bf:fb:92:4b:b4:bf:7f:ef:81:e2:cd:e1:8b:
a6:12:0f:68:81:a8:a8:ec:1b:9d:6e:0c:9e:48:97:
65:45:01:cc:5d:48:74:64:75:ab:8a:98:92:cd:ae:
40:c8:59:d8:e2:b8:dd:a5:b2:ef:4f:88:f7:35:c1:
00:db:96:13:30:20:83:4d:97:df:e0:99:d6:fc:67:
f0:82:dc:a3:ce:d1:7b:50:e8:45:e7:88:97:8c:2c:
3f:d1:2f:e2:5d:8d:d6:80:6b:dd:b9:ac:97:fe:2d:
a4:0a:48:a9:94:a2:85:51:e6:08:3b:b4:b4:70:b2:
4c:ce:29:3d:7b:e4:56:d3:ab:af:3f:4c:79:d8:d4:
93:22:d2:20:c1:19:e0:71:28:d1:28:b8:ef:ad:b2:
4a:2a:f8:af:b3:f6:36:56:4e:6e:32:28:1a:af:e0:
dc:98:32:99:9f:46:18:4b:a6:26:4b:f3:ef:aa:b1:
81:30:4f:71:3f:b2:6f:0a:c3:02:82:0f:d0:a1:5a:
f9:02:eb:9f:de:cd:80:80:77:84:17:88:38:74:ad:
6e:43:37:c5:99:c1:e4:4f:3e:8a:7a:6b:93:de:e9:
a9:b0:a8:f5:6f:dc:08:d8:ec:72:45:ec:8f:4e:bf:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:83:51:80:93:D4:CA:CF:98:56:16:68:7F:80:3E:7D:B0:4D:D7:AB
X509v3 Authority Key Identifier:
keyid:B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:17:01:7b:38:82:91:96:2c:9b:a1:0f:ae:2a:fe:37:88:ed:
71:a9:f9:6d:22:58:83:a0:a2:6d:6e:be:04:38:06:25:d6:3f:
e7:17:ef:eb:d5:8f:a9:3f:89:39:58:d6:8a:57:b8:d6:d6:ca:
68:92:1e:f4:43:e0:32:14:9b:3e:47:34:29:05:00:12:1e:07:
4c:6e:81:70:5a:46:49:80:70:8e:81:ef:a8:71:35:0e:20:5a:
46:f2:55:36:7d:96:8d:d4:2e:00:fe:f0:d0:8f:79:c8:f4:f7:
2f:c9:7b:ee:ff:52:35:a2:c6:bb:18:3a:a9:1b:f8:12:3f:5d:
94:a3:e6:13:85:52:62:9a:7c:61:b0:8b:c0:99:51:bd:e2:86:
e1:a1:92:af:cd:15:04:10:31:7b:65:46:2e:03:7a:e7:68:ab:
8b:f6:20:da:eb:8b:41:05:0f:b1:db:cc:76:4f:8d:ba:d6:99:
10:bf:93:05:f8:ab:98:11:05:17:97:66:31:c1:18:7d:fa:b0:
f7:d2:64:58:7c:d0:e1:58:44:14:82:55:17:b1:05:17:d1:c1:
72:dc:83:37:a1:e2:db:aa:9b:e9:26:b9:3b:2c:31:f7:06:7c:
40:44:27:0b:19:e8:1d:d2:42:cb:c4:eb:c3:b6:e0:a7:9a:d1:
01:02:f3:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zkMZi4uBahmSvSPzTPifMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYzVlNmFlNTk4NzEwMDY2NGIyMzAzNGNlZmM3MmQ0N2Y4
ZjRiOWIwHhcNMjUwMTMxMTAwMDQ0WhcNMjUwMjAxMTAwMDQ0WjAzMTEwLwYDVQQD
EygwMzgzNTE4MDkzZDRjYWNmOTg1NjE2Njg3ZjgwM2U3ZGIwNGRkN2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonGcgQYRI1jmtx/VL4O6w7/7kku0
v3/vgeLN4YumEg9ogaio7BudbgyeSJdlRQHMXUh0ZHWripiSza5AyFnY4rjdpbLv
T4j3NcEA25YTMCCDTZff4JnW/GfwgtyjztF7UOhF54iXjCw/0S/iXY3WgGvduayX
/i2kCkiplKKFUeYIO7S0cLJMzik9e+RW06uvP0x52NSTItIgwRngcSjRKLjvrbJK
Kvivs/Y2Vk5uMigar+DcmDKZn0YYS6YmS/PvqrGBME9xP7JvCsMCgg/QoVr5Auuf
3s2AgHeEF4g4dK1uQzfFmcHkTz6KemuT3umpsKj1b9wI2OxyReyPTr/hVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAODUYCT1MrPmFYWaH+APn2wTderMB8GA1UdIwQY
MBaAFLDF5q5ZhxAGZLIwNM78ctR/j0ubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc01YbXJsbUhFQVprc2pBMHp2eHkxSC1QUzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81N2VkNmEtMTE3Ny00YTlkLTk4YzUt
ZDU5ZTI2NGVlODNiLzEvc01YbXJsbUhFQVprc2pBMHp2eHkxSC1QUzVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC81N2VkNmEtMTE3Ny00YTlkLTk4YzUtZDU5ZTI2NGVlODNi
LzEvc01YbXJsbUhFQVprc2pBMHp2eHkxSC1QUzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARcBeziC
kZYsm6EPrir+N4jtcan5bSJYg6CibW6+BDgGJdY/5xfv69WPqT+JOVjWile41tbK
aJIe9EPgMhSbPkc0KQUAEh4HTG6BcFpGSYBwjoHvqHE1DiBaRvJVNn2WjdQuAP7w
0I95yPT3L8l77v9SNaLGuxg6qRv4Ej9dlKPmE4VSYpp8YbCLwJlRveKG4aGSr80V
BBAxe2VGLgN652iri/Yg2uuLQQUPsdvMdk+NutaZEL+TBfirmBEFF5dmMcEYffqw
99JkWHzQ4VhEFIJVF7EFF9HBctyDN6Hi26qb6Sa5Oywx9wZ8QEQnCxnoHdJCy8Tr
w7bgp5rRAQLztw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:24 2025 by rpki-client