Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
File: SDletMDuLapTks2Z_EXvvEp1TpA.mft (raw, json)
Hash identifier: wQh4CuATDXUyfKN+CWQezp+HfecfBRetZ7qV6ffOC3s=
Subject key identifier: 1B:A5:1A:05:1A:A1:0C:40:84:1A:9C:89:5F:A0:5B:CA:00:BF:E8:85
Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
Certificate issuer: /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Certificate serial: 0194BD8550B44BA5E9E3B6B310B4511AC00C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: SDletMDuLapTks2Z_EXvvEp1TpA.crl (hash: s5oqhPYiKyzcWkojvIechFNzAUkxJSeFx9En0CASX/I=)
2: TLZicJ-oF3y9XbymZF6MTAhyYvk.roa (hash: 4HeSyTBfKiFSQT/0BeZ4MVQL/epSIUIfB43B7ezWkA0=)
3: kB2vNLIHiz3zrtVPA7_yVuKTR5I.roa (hash: 9AzHx/X53rT3duIhqykEiCb52nN9gduGX1KbZI/pxcE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:50:b4:4b:a5:e9:e3:b6:b3:10:b4:51:1a:c0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=1ba51a051aa10c40841a9c895fa05bca00bfe885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5d:5a:90:8e:ed:73:5d:cf:a8:bc:99:65:89:
c0:ce:f9:d4:d4:75:fc:6c:e6:fb:14:1f:25:c1:fe:
d1:dc:94:cd:ab:7d:27:81:a7:b5:4a:44:4b:10:2f:
bb:1c:83:b6:56:64:7e:22:7f:79:83:0e:b9:d8:ff:
ee:59:73:8f:5b:9e:4c:b5:27:3e:1a:de:17:4d:09:
b1:9c:2c:fb:61:9b:3d:01:5d:6d:92:60:e9:5e:3e:
bd:8f:13:e1:3b:81:a1:d0:32:12:19:ed:27:03:eb:
fd:31:ee:a8:24:a3:d2:5c:25:24:7f:cb:47:7d:40:
83:ba:00:a4:79:d9:4e:01:8c:bf:97:07:ac:c2:28:
70:c8:e9:bd:b5:62:ac:0c:08:ef:30:00:ed:b4:54:
0f:ce:47:f9:c2:54:39:0a:22:c7:a9:bb:9c:02:ea:
64:7d:ec:e5:a6:75:a2:6a:d4:8b:d1:ab:05:63:b0:
d5:c2:76:23:88:e5:a4:50:59:ac:04:4d:c9:d3:5d:
58:f0:bc:ff:5f:23:98:fd:6d:9c:01:66:40:2b:31:
45:cb:ff:49:05:4b:83:09:79:72:14:b4:09:47:57:
3a:8c:88:c9:55:dc:15:5c:f2:02:6d:9e:e4:1d:e5:
7d:2e:2d:75:9d:10:70:40:26:8a:e8:d7:ed:dc:ab:
db:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A5:1A:05:1A:A1:0C:40:84:1A:9C:89:5F:A0:5B:CA:00:BF:E8:85
X509v3 Authority Key Identifier:
keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d0:7c:9e:38:b7:cb:f0:9d:1c:40:32:0c:e5:ec:f7:c5:d4:
19:7f:1f:f0:97:04:0c:f1:3f:d4:50:b4:25:41:ba:f4:56:af:
ed:93:f0:5f:4e:79:8b:68:79:d6:fe:0c:e6:5f:50:61:52:d9:
e0:eb:6f:21:56:49:22:c0:b1:51:be:fd:03:57:a6:eb:71:ed:
4f:bf:31:32:d0:86:90:66:44:b6:3a:de:9a:7b:9d:c0:bb:1e:
ed:35:33:79:40:b1:fa:59:64:dc:57:90:88:d0:38:b1:e1:a0:
b8:d6:78:a9:14:6a:89:36:d7:3f:f3:08:75:c9:bb:59:d6:a3:
55:cf:1a:94:85:e3:7a:30:db:1d:76:b5:99:28:f1:cc:89:2c:
93:a8:c0:22:73:51:2c:b5:74:75:d4:f5:06:f0:03:f7:7e:9b:
27:d7:aa:bf:d2:ae:05:10:ff:bd:2b:aa:5a:e8:b8:00:6e:98:
8c:49:30:8d:e5:c1:a3:ee:3c:71:aa:67:2b:57:65:41:0b:b4:
03:20:73:46:21:15:8b:68:25:b5:c6:a3:cb:c3:3c:50:2e:bb:
0c:55:ea:ff:29:6e:01:86:6e:f5:52:92:54:3f:37:9e:42:aa:
23:2e:2a:61:c7:4a:5b:93:84:ff:f9:6a:6e:29:77:55:d0:04:
b5:ac:10:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hVC0S6Xp47azELRRGsAMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4Mzk1ZWI0YzBlZTJkYWE1MzkyY2Q5OWZjNDVlZmJjNGE3
NTRlOTAwHhcNMjUwMTMxMTgwMDE4WhcNMjUwMjAxMTgwMDE4WjAzMTEwLwYDVQQD
EygxYmE1MWEwNTFhYTEwYzQwODQxYTljODk1ZmEwNWJjYTAwYmZlODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll1akI7tc13PqLyZZYnAzvnU1HX8
bOb7FB8lwf7R3JTNq30ngae1SkRLEC+7HIO2VmR+In95gw652P/uWXOPW55MtSc+
Gt4XTQmxnCz7YZs9AV1tkmDpXj69jxPhO4Gh0DISGe0nA+v9Me6oJKPSXCUkf8tH
fUCDugCkedlOAYy/lweswihwyOm9tWKsDAjvMADttFQPzkf5wlQ5CiLHqbucAupk
fezlpnWiatSL0asFY7DVwnYjiOWkUFmsBE3J011Y8Lz/XyOY/W2cAWZAKzFFy/9J
BUuDCXlyFLQJR1c6jIjJVdwVXPICbZ7kHeV9Li11nRBwQCaK6Nft3KvbJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBulGgUaoQxAhBqciV+gW8oAv+iFMB8GA1UdIwQY
MBaAFEg5XrTA7i2qU5LNmfxF77xKdU6QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0RsZXRNRHVMYXBUa3MyWl9FWHZ2RXAxVHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83YTk5NjEtMjEzZS00Y2M0LThmOTYt
N2Y1NzliYTA5OGJlLzEvU0RsZXRNRHVMYXBUa3MyWl9FWHZ2RXAxVHBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83YTk5NjEtMjEzZS00Y2M0LThmOTYtN2Y1NzliYTA5OGJl
LzEvU0RsZXRNRHVMYXBUa3MyWl9FWHZ2RXAxVHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdB8nji3
y/CdHEAyDOXs98XUGX8f8JcEDPE/1FC0JUG69Fav7ZPwX055i2h51v4M5l9QYVLZ
4OtvIVZJIsCxUb79A1em63HtT78xMtCGkGZEtjremnudwLse7TUzeUCx+llk3FeQ
iNA4seGguNZ4qRRqiTbXP/MIdcm7WdajVc8alIXjejDbHXa1mSjxzIksk6jAInNR
LLV0ddT1BvAD936bJ9eqv9KuBRD/vSuqWui4AG6YjEkwjeXBo+48capnK1dlQQu0
AyBzRiEVi2gltcajy8M8UC67DFXq/yluAYZu9VKSVD83nkKqIy4qYcdKW5OE//lq
bil3VdAEtawQyg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:17 2025 by rpki-client