Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
File: SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft (raw, json)
Hash identifier: CkKeDy8xDV2wPBYO1V4hcp6Ays209EQt7CUz7JzD7tE=
Subject key identifier: 79:3E:2F:5E:17:8F:63:11:40:16:49:67:68:D0:D6:01:98:4B:8B:1C
Authority key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
Certificate issuer: /CN=49f2702d1a0726175e39af16974e5375dcaefc31
Certificate serial: 0194BCAA40533CD5EAE60F86A81EBCDBF687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
Manifest number: 136A
Signing time: Fri 31 Jan 2025 14:01:01 +0000
Manifest this update: Fri 31 Jan 2025 14:01:01 +0000
Manifest next update: Sat 01 Feb 2025 14:01:01 +0000
Files and hashes: 1: SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl (hash: 7p1d5NR100S6t5UWK57Kp0e08Mqx5LyHyUnd7sH9EAE=)
2: YrgeNV0Q3t4Xw5uBv1-S6YoZvb0.roa (hash: j80OYLZ1mn+7VVYJkW8xMNJr5ib6X+eHYr4UT4vddFM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:40:53:3c:d5:ea:e6:0f:86:a8:1e:bc:db:f6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f2702d1a0726175e39af16974e5375dcaefc31
Validity
Not Before: Jan 31 14:01:01 2025 GMT
Not After : Feb 1 14:01:01 2025 GMT
Subject: CN=793e2f5e178f63114016496768d0d601984b8b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:98:25:b1:8f:9b:98:9d:41:91:2c:5b:0e:
14:8a:ec:2d:1f:e5:2a:e8:d2:23:78:4e:32:72:a0:
ab:1b:5a:8e:a5:81:77:90:62:56:5e:05:7a:85:cb:
bc:7b:4c:4f:c7:4d:7b:40:db:8f:75:5b:b7:53:1d:
79:e3:da:a1:72:62:74:45:74:38:0b:79:a2:91:0c:
76:9b:9a:0e:54:02:70:3b:41:87:8a:1d:9b:a3:50:
7a:af:4f:40:e4:0a:ec:0c:b0:18:f3:44:67:26:10:
63:40:00:41:cc:33:92:fe:94:99:68:0e:34:15:82:
8a:15:bb:a3:17:13:e4:e1:9a:14:63:53:0d:1b:40:
83:c2:05:77:d7:bd:3f:41:ef:61:d1:5c:82:b7:73:
85:a7:1e:dd:15:92:e3:ba:6c:16:09:2d:a0:3b:db:
63:54:cb:3a:a7:8d:ff:cc:52:36:58:01:22:2a:56:
4e:91:b3:c5:d6:04:ba:17:c5:02:57:81:02:04:4d:
64:ae:ca:f4:1f:8b:be:e0:39:ed:02:13:2b:ad:78:
60:d1:3a:1f:92:39:96:c4:e3:db:6d:78:8d:4e:e0:
c8:73:e5:51:f9:28:9b:0d:0c:85:31:55:6e:3d:4c:
84:7f:73:5f:dc:1b:9e:63:74:74:43:21:05:b4:ee:
01:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3E:2F:5E:17:8F:63:11:40:16:49:67:68:D0:D6:01:98:4B:8B:1C
X509v3 Authority Key Identifier:
keyid:49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2f:2c:8c:1c:a8:5b:77:7c:e0:4f:db:55:10:a0:f7:04:83:
69:e0:f3:dd:e2:2e:84:de:15:5a:07:f1:2b:78:6e:96:c5:98:
dd:4b:40:92:84:7e:c7:10:e5:87:67:bd:3e:2c:7b:0a:29:2c:
c4:85:cf:ea:2b:b0:d2:b2:07:4c:12:8b:e1:c9:d4:d6:b2:cb:
31:9d:56:27:be:c1:0a:48:0a:68:cd:15:2f:f6:04:e7:d4:55:
75:c8:d1:9d:97:d4:17:2b:48:24:da:b1:6e:70:3b:e0:56:c3:
60:a1:6e:d9:bd:a6:ad:ab:18:08:19:4d:91:c4:74:43:02:5f:
f8:f5:3f:73:9b:a5:cb:cf:6a:79:f7:e9:0d:f6:f3:df:ef:69:
d8:00:f7:60:54:96:0a:d0:d2:0a:0f:5a:ee:36:4a:96:59:3e:
e9:98:ea:0e:ab:57:0a:ee:65:78:90:12:ef:64:44:e1:e4:e8:
5b:ba:5e:c1:fb:75:62:d2:0b:7f:fe:37:9a:f8:78:39:50:a9:
60:32:d8:25:80:2d:15:66:d9:4e:f7:a3:eb:c3:74:09:72:5a:
a9:2a:e6:fb:d1:4e:57:e7:b5:ac:ea:70:d0:76:0a:27:27:27:
71:24:cb:d9:ca:cc:3d:31:8a:80:c4:d0:a2:a4:89:d3:d3:1e:
ed:3b:81:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qkBTPNXq5g+GqB682/aHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjI3MDJkMWEwNzI2MTc1ZTM5YWYxNjk3NGU1Mzc1ZGNh
ZWZjMzEwHhcNMjUwMTMxMTQwMTAxWhcNMjUwMjAxMTQwMTAxWjAzMTEwLwYDVQQD
Eyg3OTNlMmY1ZTE3OGY2MzExNDAxNjQ5Njc2OGQwZDYwMTk4NGI4YjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreKYJbGPm5idQZEsWw4UiuwtH+Uq
6NIjeE4ycqCrG1qOpYF3kGJWXgV6hcu8e0xPx017QNuPdVu3Ux1549qhcmJ0RXQ4
C3mikQx2m5oOVAJwO0GHih2bo1B6r09A5ArsDLAY80RnJhBjQABBzDOS/pSZaA40
FYKKFbujFxPk4ZoUY1MNG0CDwgV3170/Qe9h0VyCt3OFpx7dFZLjumwWCS2gO9tj
VMs6p43/zFI2WAEiKlZOkbPF1gS6F8UCV4ECBE1krsr0H4u+4DntAhMrrXhg0Tof
kjmWxOPbbXiNTuDIc+VR+SibDQyFMVVuPUyEf3Nf3BueY3R0QyEFtO4B7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHk+L14Xj2MRQBZJZ2jQ1gGYS4scMB8GA1UdIwQY
MBaAFEnycC0aByYXXjmvFpdOU3XcrvwxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2ZKd0xSb0hKaGRlT2E4V2wwNVRkZHl1X0RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jZjIzZTctNzNiZS00ZTMwLWE5ZTgt
M2QxYTBlYmQwZjU5LzEvU2ZKd0xSb0hKaGRlT2E4V2wwNVRkZHl1X0RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9jZjIzZTctNzNiZS00ZTMwLWE5ZTgtM2QxYTBlYmQwZjU5
LzEvU2ZKd0xSb0hKaGRlT2E4V2wwNVRkZHl1X0RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeC8sjByo
W3d84E/bVRCg9wSDaeDz3eIuhN4VWgfxK3hulsWY3UtAkoR+xxDlh2e9Pix7Ciks
xIXP6iuw0rIHTBKL4cnU1rLLMZ1WJ77BCkgKaM0VL/YE59RVdcjRnZfUFytIJNqx
bnA74FbDYKFu2b2mrasYCBlNkcR0QwJf+PU/c5uly89qeffpDfbz3+9p2AD3YFSW
CtDSCg9a7jZKllk+6ZjqDqtXCu5leJAS72RE4eToW7pewft1YtILf/43mvh4OVCp
YDLYJYAtFWbZTvej68N0CXJaqSrm+9FOV+e1rOpw0HYKJycncSTL2crMPTGKgMTQ
oqSJ09Me7TuBiA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:55 2025 by rpki-client