Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
File: SZ9dK32_UkSbASU7D4J_QBqKfIE.mft (raw, json)
Hash identifier: 8FXUqbCWGjvenUkkBFQB9SMmbg1OIZYgGEMBFx2eC4c=
Subject key identifier: F4:30:CF:D6:D7:E3:45:0C:E1:C2:78:F8:0F:A8:41:47:7D:6E:6B:FE
Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
Certificate issuer: /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Certificate serial: 0194BBCE15C4CFCBBCEE2127724112919F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
Manifest number: 0768
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: SZ9dK32_UkSbASU7D4J_QBqKfIE.crl (hash: NVWb28pjDtSqgcs6zd/VwxWbuFtNb1unx9fFJbDWBJc=)
2: sTQX2j9_L-RKxKJ-gpSAUcHW26c.roa (hash: SMZ74eYXgCBYRpcaMVOmXChoRcbWwRauRrg3+g+Vya0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:15:c4:cf:cb:bc:ee:21:27:72:41:12:91:9f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=f430cfd6d7e3450ce1c278f80fa841477d6e6bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d8:81:46:bb:5c:63:b1:13:c4:44:e6:6c:a8:
83:05:eb:a2:cd:c1:7d:2c:e6:77:2c:20:7e:b2:83:
97:cb:26:38:16:f3:c7:40:4b:64:8f:d3:33:fb:6b:
6d:3c:bb:9e:08:79:65:d4:ad:66:68:c3:1b:97:36:
55:fa:a8:f9:d3:32:2f:45:97:bc:02:27:ee:ef:2d:
47:6e:c4:2e:6c:8b:87:50:19:28:30:6e:f2:b9:28:
ae:d0:09:0b:df:33:9f:41:cc:46:b7:84:a2:e4:a8:
01:74:cf:6a:91:da:30:27:96:66:94:0d:06:12:1e:
ab:43:1c:cc:73:3c:bd:03:72:aa:8b:ac:31:33:a3:
b2:94:06:02:1e:39:10:4f:43:de:53:02:ef:e6:14:
0d:5d:f6:26:67:d4:29:23:70:0b:6d:17:c5:f0:96:
95:08:66:be:a4:26:0e:3b:34:f4:22:74:39:7f:68:
35:ff:5c:c7:e0:09:f0:46:58:8b:1c:5b:05:0f:97:
84:0e:f2:d7:e7:40:22:59:e6:31:3d:f6:be:8a:04:
be:73:a3:dd:97:ee:b5:51:55:04:60:f2:ba:89:59:
54:5b:e5:29:dc:16:22:3f:00:d4:75:d8:a1:8e:7f:
13:22:cc:a0:e8:68:1e:e4:cd:f3:43:91:01:ba:ee:
7a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:30:CF:D6:D7:E3:45:0C:E1:C2:78:F8:0F:A8:41:47:7D:6E:6B:FE
X509v3 Authority Key Identifier:
keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f6:ef:84:ed:67:1a:58:6e:fb:dd:05:43:52:88:92:46:89:
75:fe:a1:58:06:18:e9:34:d6:81:28:bb:e3:b9:41:8f:c8:2d:
8d:9c:c9:d9:e9:af:9c:40:63:8f:81:0f:9c:72:42:39:9b:d7:
de:3f:a3:6b:d1:82:1b:41:95:62:f7:6e:9e:3d:df:f0:a9:32:
95:59:84:a3:80:b7:7c:7b:66:94:62:5e:d4:f2:30:a1:6b:74:
31:37:f1:7a:52:6b:20:e9:62:93:7d:f7:14:68:85:ed:61:82:
0f:b9:bf:ae:8e:68:e0:65:0b:b1:3f:00:ab:0e:14:cc:fb:d2:
a6:96:6a:86:15:7a:79:e1:6e:05:e7:1f:15:4c:8a:7a:73:29:
56:5a:a8:49:c7:f5:3c:6a:d1:7d:a5:85:55:c0:67:08:7d:44:
36:29:fd:02:b2:bd:03:cf:69:eb:89:df:a2:ce:70:57:5c:6a:
7c:80:bd:78:0a:e4:00:e6:2f:e9:0c:6c:38:90:ea:27:de:4d:
88:83:3c:df:b7:a1:05:cf:42:35:e0:b5:96:fd:5a:dc:e5:64:
b3:0b:d9:41:2b:6a:4a:a9:86:9b:61:e3:c3:d6:34:1e:f5:87:
a4:1e:5f:b7:a2:96:fc:46:9e:26:dd:6c:14:94:57:8a:f6:b4:
2a:b5:a1:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zhXEz8u87iEnckESkZ9TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OWY1ZDJiN2RiZjUyNDQ5YjAxMjUzYjBmODI3ZjQwMWE4
YTdjODEwHhcNMjUwMTMxMTAwMDMyWhcNMjUwMjAxMTAwMDMyWjAzMTEwLwYDVQQD
EyhmNDMwY2ZkNmQ3ZTM0NTBjZTFjMjc4ZjgwZmE4NDE0NzdkNmU2YmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9iBRrtcY7ETxETmbKiDBeuizcF9
LOZ3LCB+soOXyyY4FvPHQEtkj9Mz+2ttPLueCHll1K1maMMblzZV+qj50zIvRZe8
Aifu7y1HbsQubIuHUBkoMG7yuSiu0AkL3zOfQcxGt4Si5KgBdM9qkdowJ5ZmlA0G
Eh6rQxzMczy9A3Kqi6wxM6OylAYCHjkQT0PeUwLv5hQNXfYmZ9QpI3ALbRfF8JaV
CGa+pCYOOzT0InQ5f2g1/1zH4AnwRliLHFsFD5eEDvLX50AiWeYxPfa+igS+c6Pd
l+61UVUEYPK6iVlUW+Up3BYiPwDUddihjn8TIsyg6Gge5M3zQ5EBuu56pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQwz9bX40UM4cJ4+A+oQUd9bmv+MB8GA1UdIwQY
MBaAFEmfXSt9v1JEmwElOw+Cf0AainyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYt
YjlkY2NhYjZkZjJlLzEvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYtYjlkY2NhYjZkZjJl
LzEvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/bvhO1n
Glhu+90FQ1KIkkaJdf6hWAYY6TTWgSi747lBj8gtjZzJ2emvnEBjj4EPnHJCOZvX
3j+ja9GCG0GVYvdunj3f8KkylVmEo4C3fHtmlGJe1PIwoWt0MTfxelJrIOlik333
FGiF7WGCD7m/ro5o4GULsT8Aqw4UzPvSppZqhhV6eeFuBecfFUyKenMpVlqoScf1
PGrRfaWFVcBnCH1ENin9ArK9A89p64nfos5wV1xqfIC9eArkAOYv6QxsOJDqJ95N
iIM837ehBc9CNeC1lv1a3OVkswvZQStqSqmGm2Hjw9Y0HvWHpB5ft6KW/EaeJt1s
FJRXiva0KrWh3w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:17 2025 by rpki-client