Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
File: Srn5ALphi-jnySCWPN91e5BQ5Qk.mft (raw, json)
Hash identifier: mer136IqSbOc0nRETfBtrd0csaUvGAZRoz51MJiGmrs=
Subject key identifier: 4E:BC:D4:54:92:E1:E5:27:F6:65:3C:B8:0E:B2:C2:23:F4:3D:7C:61
Authority key identifier: 4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
Certificate issuer: /CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Certificate serial: 0194BD859268FCEA8149D7B5958619D34E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: M8uu5Q0gYtyHXgy-_HaJ3qJtLL8.roa (hash: 8T9tUH90Mj8IcimHEzzVqe1K5DRM0kq6VzTiqUA3vRs=)
2: Srn5ALphi-jnySCWPN91e5BQ5Qk.crl (hash: Jx6vhigR6ZJrKYawHbxJTsogidXtAVqpmCL8lwtAa08=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:92:68:fc:ea:81:49:d7:b5:95:86:19:d3:4e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=4ebcd45492e1e527f6653cb80eb2c223f43d7c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:25:eb:74:00:bd:71:59:99:f3:83:9b:e1:
de:a7:f0:c3:2c:0f:2a:58:55:5d:04:07:fb:ea:c6:
e2:91:22:23:05:ac:73:84:78:80:17:75:ab:c2:de:
7f:72:d4:50:12:5d:64:73:83:33:58:ca:5c:bd:5a:
61:e1:99:ed:ed:4f:e0:84:24:f6:6c:b6:7d:88:84:
95:91:b7:bb:14:75:c7:b6:d8:02:39:5d:4e:26:66:
77:27:c7:5d:61:b1:65:8b:9c:9a:35:a3:6b:82:58:
ff:97:9c:f4:89:08:cd:6b:fd:98:7a:8a:12:75:6a:
50:b9:c4:3c:93:e2:7f:51:eb:17:0a:bb:c8:98:ca:
ee:c2:b6:63:46:21:1c:ff:78:9c:3f:fc:ed:75:dd:
12:00:bb:dc:f2:81:6d:26:be:06:0e:6e:be:96:21:
7d:b1:80:b5:42:5e:c6:b6:d9:9a:e6:b1:9c:4c:23:
a5:27:36:ca:d1:d8:dd:06:a0:08:ca:9b:50:6a:0a:
e0:04:50:c8:ca:25:7d:ed:e9:b7:18:a5:45:72:62:
8c:92:6a:ed:85:8a:a3:82:b5:cf:29:1e:ca:f2:6c:
3f:db:6e:16:43:f9:ac:bf:1e:03:08:6a:57:2e:a0:
96:1f:a6:22:cf:32:9d:89:db:bd:93:28:9a:c6:0d:
22:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BC:D4:54:92:E1:E5:27:F6:65:3C:B8:0E:B2:C2:23:F4:3D:7C:61
X509v3 Authority Key Identifier:
keyid:4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b7:e9:3f:34:9b:a8:23:5d:76:d7:4f:05:ff:b6:da:ee:3e:
59:8b:31:cd:79:01:19:34:38:83:e2:05:50:be:78:51:93:12:
f5:20:62:df:fc:c4:3c:62:e0:0c:14:a6:6c:ab:9d:95:d6:9c:
e1:ef:61:e9:8c:68:ba:91:a3:2f:72:ac:14:28:52:24:3a:ca:
f7:00:a8:da:39:3c:30:e1:1b:13:59:d0:b0:ca:f0:f8:89:26:
93:e7:fe:73:17:63:db:f5:cf:c2:3b:99:11:2d:da:5e:88:dc:
85:bf:ff:86:95:f6:01:1f:7d:11:72:62:bc:ef:0b:da:9d:97:
fe:e7:25:fe:04:7e:8a:57:cf:9c:4a:1d:67:24:f0:b2:65:9c:
e9:3e:da:c8:fe:81:af:70:6a:a8:6a:15:70:fa:8c:e3:33:a2:
dd:0b:52:73:26:f2:04:fc:6b:73:ee:8e:76:51:70:14:1f:91:
e8:e6:5d:c4:4c:4d:48:f4:61:96:3d:77:bb:60:ad:66:d5:88:
da:07:c9:0b:9d:ac:98:26:65:43:6a:cf:54:5f:f6:cc:89:5b:
4b:fc:35:cb:2f:85:0b:05:60:85:07:5a:ff:29:c5:7a:3a:6a:
53:e2:50:b6:c6:e2:31:04:18:7d:55:93:66:45:9c:17:97:d5:
f7:b8:55:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZJo/OqBSde1lYYZ004mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYjlmOTAwYmE2MThiZThlN2M5MjA5NjNjZGY3NTdiOTA1
MGU1MDkwHhcNMjUwMTMxMTgwMDM1WhcNMjUwMjAxMTgwMDM1WjAzMTEwLwYDVQQD
Eyg0ZWJjZDQ1NDkyZTFlNTI3ZjY2NTNjYjgwZWIyYzIyM2Y0M2Q3YzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswQl63QAvXFZmfODm+Hep/DDLA8q
WFVdBAf76sbikSIjBaxzhHiAF3Wrwt5/ctRQEl1kc4MzWMpcvVph4Znt7U/ghCT2
bLZ9iISVkbe7FHXHttgCOV1OJmZ3J8ddYbFli5yaNaNrglj/l5z0iQjNa/2YeooS
dWpQucQ8k+J/UesXCrvImMruwrZjRiEc/3icP/ztdd0SALvc8oFtJr4GDm6+liF9
sYC1Ql7Gttma5rGcTCOlJzbK0djdBqAIyptQagrgBFDIyiV97em3GKVFcmKMkmrt
hYqjgrXPKR7K8mw/224WQ/msvx4DCGpXLqCWH6YizzKdidu9kyiaxg0iJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE681FSS4eUn9mU8uA6ywiP0PXxhMB8GA1UdIwQY
MBaAFEq5+QC6YYvo58kgljzfdXuQUOUJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3JuNUFMcGhpLWpueVNDV1BOOTFlNUJRNVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iNDIwMjctNjYzNy00OGU3LWEzNTQt
OWUwYjE5NmEwNDg3LzEvU3JuNUFMcGhpLWpueVNDV1BOOTFlNUJRNVFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9iNDIwMjctNjYzNy00OGU3LWEzNTQtOWUwYjE5NmEwNDg3
LzEvU3JuNUFMcGhpLWpueVNDV1BOOTFlNUJRNVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7fpPzSb
qCNddtdPBf+22u4+WYsxzXkBGTQ4g+IFUL54UZMS9SBi3/zEPGLgDBSmbKudldac
4e9h6YxoupGjL3KsFChSJDrK9wCo2jk8MOEbE1nQsMrw+Ikmk+f+cxdj2/XPwjuZ
ES3aXojchb//hpX2AR99EXJivO8L2p2X/ucl/gR+ilfPnEodZyTwsmWc6T7ayP6B
r3BqqGoVcPqM4zOi3QtScybyBPxrc+6OdlFwFB+R6OZdxExNSPRhlj13u2CtZtWI
2gfJC52smCZlQ2rPVF/2zIlbS/w1yy+FCwVghQda/ynFejpqU+JQtsbiMQQYfVWT
ZkWcF5fV97hVFw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:25 2025 by rpki-client