Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File: sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier: jet+VC825toJ0lZ2ngfZz4oH2x0dBXhtQAcdppaIWzc=
Subject key identifier: FB:03:65:0F:F0:37:96:FE:1A:36:DC:BA:DB:ED:CA:9C:74:C1:00:AA
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 0194BCA999B0FDB88AFBB201A73D795E048A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number: 0F1C
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: Y9lkKqKsnQqZGmQo1Xo2fiLr5iU.roa (hash: 6A0trmFdZaEK+JW4D/IW96VMnZJTTVLOPMuYPUfapNM=)
2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: ++FCKco6mr95eyMF0d1gLJIFDhTdg1cvAxbbCYFOZ5g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:99:b0:fd:b8:8a:fb:b2:01:a7:3d:79:5e:04:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=fb03650ff03796fe1a36dcbadbedca9c74c100aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e0:9d:ae:d4:85:f1:db:39:4f:6d:ca:3d:66:
c3:eb:2a:de:0c:27:5c:cd:7d:cd:50:9d:dd:17:2a:
24:d8:6f:64:69:1b:f2:13:13:21:60:16:a8:62:4c:
86:8c:94:46:35:4f:95:4c:19:25:7c:7b:3b:eb:97:
92:68:18:f9:f9:4e:bd:d1:38:6a:f0:9d:08:ab:20:
70:a0:fe:d5:1f:ec:ea:6b:ae:f5:2a:2f:60:c1:a6:
4c:a4:70:76:bc:1a:44:6b:76:28:a4:50:ae:c3:a4:
ee:54:a1:d8:39:00:3d:f3:0c:d9:4a:6e:f8:47:d9:
9d:53:6c:a1:60:9c:2d:7f:09:6e:3d:3f:ab:0a:5b:
4d:c6:e2:7b:22:6a:9e:13:ba:73:64:5a:6f:ae:4f:
ea:4a:d0:2b:2f:12:92:4f:fd:d3:04:ad:ae:9e:2b:
f0:75:53:5d:b8:92:95:eb:46:08:f0:d4:a5:db:9e:
88:99:76:70:c2:c9:0d:59:9a:66:52:80:a3:6f:67:
9b:ef:89:55:bc:50:4b:37:50:c4:6c:cf:84:ff:9f:
2d:e6:b0:d5:99:5f:6e:af:1f:90:46:37:e7:f9:9e:
53:24:d4:70:57:e8:db:fb:d8:aa:76:f1:40:b9:b8:
cf:29:c4:6d:e2:ee:15:48:d7:15:6b:d8:ae:10:84:
60:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:03:65:0F:F0:37:96:FE:1A:36:DC:BA:DB:ED:CA:9C:74:C1:00:AA
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6c:f1:3e:4e:99:1f:f4:a2:35:b0:ad:fb:84:03:85:a9:cb:
26:e7:d3:24:76:01:89:2a:f4:02:2e:e0:1c:c0:52:f0:21:77:
90:a6:a0:6f:c8:c5:65:eb:99:d9:b6:f7:70:aa:62:e5:49:36:
67:fc:a4:0f:2a:97:7f:e7:de:a3:85:6d:67:59:bc:11:66:13:
e6:6b:b1:db:ab:cf:5d:3e:eb:f6:51:ba:a2:43:7e:e9:ac:a1:
f3:f1:bd:a6:f2:c3:db:36:f0:c1:7f:43:db:f6:97:94:28:54:
c0:97:c6:8b:36:a8:ba:a2:0f:13:d3:fc:53:b1:95:3a:a9:3e:
ab:f1:2d:5a:2a:2d:78:b3:49:a2:a8:8f:dd:61:2c:98:0c:0b:
84:99:7c:e4:8d:a5:36:f9:5f:8a:08:a4:bb:cc:cf:ca:d1:2c:
ff:09:9e:c7:91:0a:44:b6:7b:db:af:1c:3d:3a:0b:42:cd:97:
6a:4a:a5:f1:46:11:eb:c7:73:08:17:33:b9:fb:67:f9:a9:48:
a4:c4:b4:b3:42:65:c8:2f:45:ab:79:2b:bc:13:cc:65:f0:0a:
cd:c8:87:8b:2f:9f:fa:33:12:23:fa:28:90:7b:a4:59:62:5b:
9b:60:e3:65:32:22:9f:87:bd:5c:93:de:e6:29:73:c5:70:63:
43:40:d5:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZmw/biK+7IBpz15XgSKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZmEwYzdhYmMxMDc5NjkxNWUzMzViYTE5NzgwZTQ3M2Uw
Mjc5NjkwHhcNMjUwMTMxMTQwMDE5WhcNMjUwMjAxMTQwMDE5WjAzMTEwLwYDVQQD
EyhmYjAzNjUwZmYwMzc5NmZlMWEzNmRjYmFkYmVkY2E5Yzc0YzEwMGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuCdrtSF8ds5T23KPWbD6yreDCdc
zX3NUJ3dFyok2G9kaRvyExMhYBaoYkyGjJRGNU+VTBklfHs765eSaBj5+U690Thq
8J0IqyBwoP7VH+zqa671Ki9gwaZMpHB2vBpEa3YopFCuw6TuVKHYOQA98wzZSm74
R9mdU2yhYJwtfwluPT+rCltNxuJ7ImqeE7pzZFpvrk/qStArLxKST/3TBK2univw
dVNduJKV60YI8NSl256ImXZwwskNWZpmUoCjb2eb74lVvFBLN1DEbM+E/58t5rDV
mV9urx+QRjfn+Z5TJNRwV+jb+9iqdvFAubjPKcRt4u4VSNcVa9iuEIRg8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsDZQ/wN5b+Gjbcutvtypx0wQCqMB8GA1UdIwQY
MBaAFLD6DHq8EHlpFeM1uhl4Dkc+AnlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85NzQ3NDktNGQ3ZS00NDUwLTk3OTMt
ZGY4NTRmNDdiYWY0LzEvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85NzQ3NDktNGQ3ZS00NDUwLTk3OTMtZGY4NTRmNDdiYWY0
LzEvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2zxPk6Z
H/SiNbCt+4QDhanLJufTJHYBiSr0Ai7gHMBS8CF3kKagb8jFZeuZ2bb3cKpi5Uk2
Z/ykDyqXf+feo4VtZ1m8EWYT5mux26vPXT7r9lG6okN+6ayh8/G9pvLD2zbwwX9D
2/aXlChUwJfGizaouqIPE9P8U7GVOqk+q/EtWioteLNJoqiP3WEsmAwLhJl85I2l
Nvlfigiku8zPytEs/wmex5EKRLZ7268cPToLQs2Xakql8UYR68dzCBczuftn+alI
pMS0s0JlyC9Fq3krvBPMZfAKzciHiy+f+jMSI/ookHukWWJbm2DjZTIin4e9XJPe
5ilzxXBjQ0DVmA==
-----END CERTIFICATE-----
Generated at Sat May 3 11:47:43 2025 by rpki-client