Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
File: siZANRqyGg3HqqFfq1sRCXdxSjw.mft (raw, json)
Hash identifier: qXH7q+4T36NRT1blqFRfqGTJQSdCsAv0/tJ4W06ZbUI=
Subject key identifier: 95:48:A6:93:27:54:0F:CB:B0:8A:93:8F:18:FC:7F:AD:A1:FC:D4:8F
Authority key identifier: B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
Certificate issuer: /CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Certificate serial: 0194BD858F406652D65C53F57BB7C1EC15FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
Manifest number: 0343
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: 1-j6fBxJdZjlJHBF2ibCNebRhqEM.roa (hash: uIMEk9ImImh0LKeroj/KniV/ALKfCS7zdFrx5Ghb2Ho=)
2: 4fc8oS9l6XipIztCEOKX5rStKEs.roa (hash: QJlqsQqRFXjTlCtGRezlM1Uj5b/+zIGZvP1ClcUSG6U=)
3: iC_8dMVxXZ00UyStzCwzLDNTo54.roa (hash: XW49T+GyZoj1zoB/seC/GjDOMUSaP8XJ+XDar1fKOFQ=)
4: siZANRqyGg3HqqFfq1sRCXdxSjw.crl (hash: 0NWGAEA9603AQ6kQf5G2seNgP08zJK8itEI0Uo3ZJ7I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8f:40:66:52:d6:5c:53:f5:7b:b7:c1:ec:15:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=9548a69327540fcbb08a938f18fc7fada1fcd48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:47:32:56:a0:f1:f8:68:86:cd:bd:8d:95:
a5:68:fd:ff:b3:53:27:f4:d4:14:74:29:6f:a1:36:
44:fe:63:5b:61:ce:d1:9c:eb:31:6a:fe:c9:68:ff:
05:e9:7c:67:cd:d2:40:ae:b2:44:b5:1e:f6:b3:99:
f9:7e:6c:97:8f:98:67:e9:d6:38:5c:4c:48:82:b7:
c3:d7:34:fa:95:3a:52:3f:e3:d3:01:77:be:02:76:
6c:53:94:64:c8:f9:77:e3:1f:e7:2c:bb:be:11:d8:
e2:51:00:17:ec:4f:86:bd:f3:63:85:9f:df:8e:79:
b6:20:ea:ac:1b:3a:23:d1:ab:3c:ed:24:89:0b:a3:
df:0e:0b:2e:e0:78:8d:d4:31:c0:b3:10:ba:bd:fc:
a4:e7:2f:cf:b2:45:3e:1c:c9:f1:b1:08:2b:d9:77:
1c:e5:2b:f4:94:70:cf:3d:c6:0c:7f:0b:04:e3:e4:
67:76:c8:b4:2a:ca:70:39:b6:fa:71:33:18:82:26:
e2:8a:e5:55:a3:39:75:d5:07:d5:c4:3a:28:17:61:
70:d7:b1:60:ab:9b:4f:59:43:09:83:23:4c:49:34:
4f:f6:89:cc:ba:ed:53:2f:3e:be:2b:e9:69:bf:ae:
ad:25:32:f9:d4:87:c7:33:ac:06:fd:57:56:a7:10:
b1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:48:A6:93:27:54:0F:CB:B0:8A:93:8F:18:FC:7F:AD:A1:FC:D4:8F
X509v3 Authority Key Identifier:
keyid:B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3a:06:19:55:56:2d:82:3b:9b:36:10:ba:50:df:16:ba:5d:
be:35:2d:47:2e:4b:3b:a0:c2:65:a0:ac:9d:5e:d1:17:05:4a:
13:1b:8d:6f:df:25:d4:f0:a4:3d:dc:35:20:c6:b0:fc:02:b5:
c3:09:41:d7:11:a9:0e:25:e2:a9:7a:fe:ee:b7:6f:dc:ee:5a:
e1:68:f1:cb:de:a5:c5:c8:db:1d:92:60:cc:4c:cf:6b:c8:a8:
a7:b7:89:1a:63:83:a1:e4:d3:14:e8:d7:4c:82:e7:5a:5b:34:
84:b4:bc:6e:32:23:74:cf:c9:4f:ed:6e:ab:32:62:d3:2a:6d:
1c:76:12:2e:84:a9:1f:f8:f1:26:f8:65:60:96:c7:06:37:68:
93:46:e0:4a:ec:c9:ec:3d:04:13:a3:ac:91:74:9f:1a:79:4c:
cd:cf:a8:ee:bb:17:59:fe:e7:a8:20:2d:24:bc:08:77:97:2a:
f0:13:a1:35:ab:16:d6:10:9d:30:c9:f2:44:ed:95:de:31:05:
14:20:e9:0a:e5:46:06:f5:22:10:69:36:72:25:e8:c1:6e:10:
3a:be:04:50:6e:dc:f0:ec:47:a4:70:5c:d8:69:b5:c8:a6:1e:
1a:11:e4:e4:8e:3f:90:27:b8:80:52:b9:9a:a7:c9:7a:e2:f2:
a0:b1:40:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hY9AZlLWXFP1e7fB7BX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMjY0MDM1MWFiMjFhMGRjN2FhYTE1ZmFiNWIxMTA5Nzc3
MTRhM2MwHhcNMjUwMTMxMTgwMDM0WhcNMjUwMjAxMTgwMDM0WjAzMTEwLwYDVQQD
Eyg5NTQ4YTY5MzI3NTQwZmNiYjA4YTkzOGYxOGZjN2ZhZGExZmNkNDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4dHMlag8fhohs29jZWlaP3/s1Mn
9NQUdClvoTZE/mNbYc7RnOsxav7JaP8F6XxnzdJArrJEtR72s5n5fmyXj5hn6dY4
XExIgrfD1zT6lTpSP+PTAXe+AnZsU5RkyPl34x/nLLu+EdjiUQAX7E+GvfNjhZ/f
jnm2IOqsGzoj0as87SSJC6PfDgsu4HiN1DHAsxC6vfyk5y/PskU+HMnxsQgr2Xcc
5Sv0lHDPPcYMfwsE4+Rndsi0KspwObb6cTMYgibiiuVVozl11QfVxDooF2Fw17Fg
q5tPWUMJgyNMSTRP9onMuu1TLz6+K+lpv66tJTL51IfHM6wG/VdWpxCxbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVIppMnVA/LsIqTjxj8f62h/NSPMB8GA1UdIwQY
MBaAFLImQDUashoNx6qhX6tbEQl3cUo8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2laQU5ScXlHZzNIcXFGZnExc1JDWGR4U2p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lMzhmZjAtNDY5Yi00MWU1LWJiZWQt
MTc5ZTZlNDI5MGMwLzEvc2laQU5ScXlHZzNIcXFGZnExc1JDWGR4U2p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9lMzhmZjAtNDY5Yi00MWU1LWJiZWQtMTc5ZTZlNDI5MGMw
LzEvc2laQU5ScXlHZzNIcXFGZnExc1JDWGR4U2p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzoGGVVW
LYI7mzYQulDfFrpdvjUtRy5LO6DCZaCsnV7RFwVKExuNb98l1PCkPdw1IMaw/AK1
wwlB1xGpDiXiqXr+7rdv3O5a4Wjxy96lxcjbHZJgzEzPa8iop7eJGmODoeTTFOjX
TILnWls0hLS8bjIjdM/JT+1uqzJi0yptHHYSLoSpH/jxJvhlYJbHBjdok0bgSuzJ
7D0EE6OskXSfGnlMzc+o7rsXWf7nqCAtJLwId5cq8BOhNasW1hCdMMnyRO2V3jEF
FCDpCuVGBvUiEGk2ciXowW4QOr4EUG7c8OxHpHBc2Gm1yKYeGhHk5I4/kCe4gFK5
mqfJeuLyoLFA5Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:52 2025 by rpki-client