Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
File: SXioZBznhb40aFAwUncj5f3OVio.mft (raw, json)
Hash identifier: i2aBD7yTMtI81nVx25qUFlESPkaXM0D5ssD4jRydN9E=
Subject key identifier: 51:CE:1C:5B:59:BF:D0:F5:4F:59:71:18:5A:71:0C:DB:D7:62:02:D7
Authority key identifier: 49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
Certificate issuer: /CN=4978a8641ce785be34685030527723e5fdce562a
Certificate serial: 0194BC04B996E0FEAF4EF72E41B3B69994A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
Manifest number: 0466
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: BCD_tpHD4CbGfbV_PdrLa7vTpXk.roa (hash: 3ZjEUHk0H2GaQYj5jwvFZHg7bwJy5JXMVYVGmhkBhZA=)
2: SXioZBznhb40aFAwUncj5f3OVio.crl (hash: t2BTkI7VQw9MS6+Y37i4jB9y8P5wd71grmiBW4GCMZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b9:96:e0:fe:af:4e:f7:2e:41:b3:b6:99:94:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4978a8641ce785be34685030527723e5fdce562a
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=51ce1c5b59bfd0f54f5971185a710cdbd76202d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:af:83:22:b4:a5:20:81:fd:b9:0c:74:b1:
a9:52:ed:9e:d0:cd:83:1d:ab:50:d6:3e:8b:4c:d7:
c5:6f:1e:4b:9c:46:30:75:6b:bd:c2:08:5c:06:2d:
24:b5:1b:a7:3c:6b:de:68:a9:3d:e9:b9:89:58:5f:
e2:fa:c6:56:37:d4:10:02:5c:66:dc:6a:d2:38:2e:
4b:e2:87:11:9d:7f:8d:86:6b:3b:3a:e0:4b:f2:1e:
84:4e:32:e6:ea:26:18:dd:2a:42:dc:8a:c4:0d:35:
de:72:47:6b:96:a5:fc:83:7b:17:d6:78:0f:5a:e7:
22:5d:20:7a:3c:fa:bc:66:cd:26:41:c7:cf:7e:b5:
ed:19:d5:5a:bd:9a:ca:21:f0:15:b5:97:1d:55:a8:
be:da:1f:d0:77:c3:14:4e:78:5b:df:25:6a:a0:fa:
aa:ec:9e:0e:f4:88:4e:c5:0f:dc:4b:1c:a2:cc:c1:
1e:18:cb:c0:9c:d3:5d:52:59:70:a6:1d:9e:77:d0:
40:17:dc:25:30:37:f7:3b:a6:90:75:6b:76:45:a1:
ba:23:a8:96:7f:d9:d4:3b:c1:cd:5f:2f:3b:11:17:
3c:14:5a:7e:a4:cc:27:9a:8d:70:5d:12:40:4d:d0:
e5:df:67:44:66:cd:22:d8:7c:cd:a7:f0:b4:ff:d5:
ff:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CE:1C:5B:59:BF:D0:F5:4F:59:71:18:5A:71:0C:DB:D7:62:02:D7
X509v3 Authority Key Identifier:
keyid:49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:41:e5:8b:1b:d1:aa:26:a5:a4:ff:b6:39:7f:23:d8:7e:32:
1b:82:8a:57:42:0e:f6:08:82:78:03:0f:03:2e:df:bb:fd:c3:
90:7d:be:e3:30:ed:24:95:ef:a9:06:d4:c8:50:50:a8:57:07:
44:7d:51:66:4b:96:20:57:36:d7:af:fc:36:67:09:b8:57:37:
d6:e4:53:2b:f6:63:ed:b0:0f:a0:40:41:7f:27:9a:3d:ee:08:
25:56:26:06:46:61:7d:21:e0:19:7a:98:ee:0d:84:57:49:f0:
8d:d7:cf:8d:04:da:b0:a7:29:2b:13:cf:f2:b3:ba:66:9f:e8:
2c:72:29:bf:b0:ce:b3:c9:3e:c8:53:62:c1:37:53:35:ad:0e:
86:d8:99:01:7e:ef:9b:e5:6e:d1:fd:30:13:3d:9b:f0:2d:e1:
c3:f4:b7:f2:6f:cf:c5:b2:1c:e4:13:0e:ae:a1:09:18:6a:76:
a4:01:62:f8:ca:5f:66:96:7e:5c:74:1d:2c:d0:08:e2:c5:1b:
ca:0e:df:a9:28:8e:ef:c4:35:db:d9:27:54:b2:c2:85:17:46:
bd:62:33:cb:cc:38:1d:4b:f5:ff:97:8c:4a:a5:4c:51:35:bc:
d5:45:05:a7:e4:d6:ea:8b:6c:4c:67:d2:35:94:48:04:dc:50:
1f:8d:a8:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLmW4P6vTvcuQbO2mZSoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NzhhODY0MWNlNzg1YmUzNDY4NTAzMDUyNzcyM2U1ZmRj
ZTU2MmEwHhcNMjUwMTMxMTEwMDEzWhcNMjUwMjAxMTEwMDEzWjAzMTEwLwYDVQQD
Eyg1MWNlMWM1YjU5YmZkMGY1NGY1OTcxMTg1YTcxMGNkYmQ3NjIwMmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRuvgyK0pSCB/bkMdLGpUu2e0M2D
HatQ1j6LTNfFbx5LnEYwdWu9wghcBi0ktRunPGveaKk96bmJWF/i+sZWN9QQAlxm
3GrSOC5L4ocRnX+Nhms7OuBL8h6ETjLm6iYY3SpC3IrEDTXeckdrlqX8g3sX1ngP
WuciXSB6PPq8Zs0mQcfPfrXtGdVavZrKIfAVtZcdVai+2h/Qd8MUTnhb3yVqoPqq
7J4O9IhOxQ/cSxyizMEeGMvAnNNdUllwph2ed9BAF9wlMDf3O6aQdWt2RaG6I6iW
f9nUO8HNXy87ERc8FFp+pMwnmo1wXRJATdDl32dEZs0i2HzNp/C0/9X/XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHOHFtZv9D1T1lxGFpxDNvXYgLXMB8GA1UdIwQY
MBaAFEl4qGQc54W+NGhQMFJ3I+X9zlYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1hpb1pCem5oYjQwYUZBd1VuY2o1ZjNPVmlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wOTNmY2ItZmU3Ny00NDliLWExYWYt
MjFiYzQ4ZWYxNjYwLzEvU1hpb1pCem5oYjQwYUZBd1VuY2o1ZjNPVmlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wOTNmY2ItZmU3Ny00NDliLWExYWYtMjFiYzQ4ZWYxNjYw
LzEvU1hpb1pCem5oYjQwYUZBd1VuY2o1ZjNPVmlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0HlixvR
qialpP+2OX8j2H4yG4KKV0IO9giCeAMPAy7fu/3DkH2+4zDtJJXvqQbUyFBQqFcH
RH1RZkuWIFc216/8NmcJuFc31uRTK/Zj7bAPoEBBfyeaPe4IJVYmBkZhfSHgGXqY
7g2EV0nwjdfPjQTasKcpKxPP8rO6Zp/oLHIpv7DOs8k+yFNiwTdTNa0OhtiZAX7v
m+Vu0f0wEz2b8C3hw/S38m/PxbIc5BMOrqEJGGp2pAFi+MpfZpZ+XHQdLNAI4sUb
yg7fqSiO78Q129knVLLChRdGvWIzy8w4HUv1/5eMSqVMUTW81UUFp+TW6otsTGfS
NZRIBNxQH42onw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:27 2025 by rpki-client