Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
File: SReefPYEiMPvW3cNIa6xR9pMfO4.mft (raw, json)
Hash identifier: oJHg5DbRfr0l7K1Q9T1u43X4RF6DAn892KgIqCJATmo=
Subject key identifier: 45:4F:39:97:D5:70:36:82:78:21:EB:98:C3:7D:86:B7:18:20:31:77
Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
Certificate issuer: /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Certificate serial: 0194BD85B0C64C46EE6936FD5B138DF7BC28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
Manifest number: 1111
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: 1PfCogsrcmO4yMFx3i7dWcicxiM.roa (hash: QSA42PQDSQu+Rjvywm1NdoufERvHtIOdqRGsBA5DYb0=)
2: SReefPYEiMPvW3cNIa6xR9pMfO4.crl (hash: jqstLgx5iYD7HcfPHtjgtZRnReHTaa3DXbpdR1T2tko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b0:c6:4c:46:ee:69:36:fd:5b:13:8d:f7:bc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=454f3997d57036827821eb98c37d86b718203177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:31:75:4d:16:b1:ac:67:c7:00:43:76:20:96:
75:01:08:77:6a:e4:3c:35:63:fa:aa:fa:ab:d5:f4:
dc:70:83:a5:b7:d1:52:18:f9:be:94:85:74:25:2a:
13:29:16:fe:13:a5:77:1a:51:28:c7:ca:5e:28:a2:
65:ed:5b:81:22:31:3d:16:75:3c:3e:7e:75:12:ac:
03:27:6b:a5:ac:4e:7c:8a:6a:d1:f2:00:5e:e1:0e:
f3:2a:fa:d9:dc:3d:77:ca:16:1a:6f:51:3a:a2:8d:
d5:91:d0:36:9e:84:43:db:77:63:4c:80:af:7a:cf:
7b:f9:ad:76:db:85:76:15:a7:ce:59:80:ca:d5:b5:
4a:6b:69:28:1a:4a:ac:47:ad:ee:4e:7f:a1:98:2c:
48:10:ed:99:46:54:90:54:45:4f:29:7a:cf:1d:7c:
26:75:eb:a8:21:90:1e:8d:9b:fc:9a:64:87:b2:66:
2f:eb:f2:05:2a:02:e8:0f:31:61:28:33:ab:8f:82:
c3:af:fc:a7:be:ee:ec:25:c9:96:b3:9d:b0:bc:87:
eb:f5:4b:2b:6c:20:9d:b9:50:3c:51:ac:56:cc:bb:
eb:eb:9b:fb:28:59:5d:62:c8:a4:b9:0c:58:b1:3a:
c3:ea:97:5d:2e:74:66:2c:32:75:7b:ee:69:9e:99:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4F:39:97:D5:70:36:82:78:21:EB:98:C3:7D:86:B7:18:20:31:77
X509v3 Authority Key Identifier:
keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ed:55:60:92:0e:73:ca:93:08:e9:7e:03:f9:25:e0:e6:7b:
91:9c:90:3a:b7:4b:ee:fe:ae:43:9c:27:cd:5b:bb:25:9c:87:
79:1a:19:99:39:79:ab:b7:fc:3b:4f:77:eb:c0:74:df:0f:69:
c4:81:74:35:81:58:c0:8e:8a:d5:85:46:68:05:d6:ce:d8:77:
9e:ec:a6:23:71:40:48:e0:c3:64:56:98:c9:2e:7d:18:d4:8c:
8c:81:40:64:b0:94:15:f5:f6:84:92:ae:80:19:ec:06:9a:65:
39:1b:bd:7f:a5:8f:e1:27:df:ac:af:18:52:c7:29:54:63:8f:
f5:19:e2:d2:d0:85:7a:cb:4e:20:f3:78:6c:aa:30:f5:38:58:
14:f6:46:1b:d2:46:e1:e3:d7:13:c7:b9:53:8d:c0:ef:8d:5e:
8f:c4:37:66:cc:b2:a1:14:23:34:c3:2d:ac:81:61:b9:bb:c7:
71:65:35:9d:81:81:62:6d:2c:31:58:a3:39:63:ba:62:38:d3:
eb:f7:bb:d6:51:55:e8:f1:3a:2f:d2:36:40:76:28:2b:6c:a5:
17:60:77:78:46:3e:60:df:10:90:4e:43:bc:81:6a:14:be:1c:
a2:58:ed:96:e1:be:10:41:d3:17:46:9e:87:1b:71:07:8d:b4:
09:01:ed:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hbDGTEbuaTb9WxON97woMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MTc5ZTdjZjYwNDg4YzNlZjViNzcwZDIxYWViMTQ3ZGE0
YzdjZWUwHhcNMjUwMTMxMTgwMDQyWhcNMjUwMjAxMTgwMDQyWjAzMTEwLwYDVQQD
Eyg0NTRmMzk5N2Q1NzAzNjgyNzgyMWViOThjMzdkODZiNzE4MjAzMTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzF1TRaxrGfHAEN2IJZ1AQh3auQ8
NWP6qvqr1fTccIOlt9FSGPm+lIV0JSoTKRb+E6V3GlEox8peKKJl7VuBIjE9FnU8
Pn51EqwDJ2ulrE58imrR8gBe4Q7zKvrZ3D13yhYab1E6oo3VkdA2noRD23djTICv
es97+a1224V2FafOWYDK1bVKa2koGkqsR63uTn+hmCxIEO2ZRlSQVEVPKXrPHXwm
deuoIZAejZv8mmSHsmYv6/IFKgLoDzFhKDOrj4LDr/ynvu7sJcmWs52wvIfr9Usr
bCCduVA8UaxWzLvr65v7KFldYsikuQxYsTrD6pddLnRmLDJ1e+5pnpmnrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVPOZfVcDaCeCHrmMN9hrcYIDF3MB8GA1UdIwQY
MBaAFEkXnnz2BIjD71t3DSGusUfaTHzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNTJlYWMtYzdlMi00ODgxLTg4ZTMt
NDcxZDQyYzJkODA2LzEvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kNTJlYWMtYzdlMi00ODgxLTg4ZTMtNDcxZDQyYzJkODA2
LzEvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACu1VYJIO
c8qTCOl+A/kl4OZ7kZyQOrdL7v6uQ5wnzVu7JZyHeRoZmTl5q7f8O09368B03w9p
xIF0NYFYwI6K1YVGaAXWzth3nuymI3FASODDZFaYyS59GNSMjIFAZLCUFfX2hJKu
gBnsBpplORu9f6WP4SffrK8YUscpVGOP9Rni0tCFestOIPN4bKow9ThYFPZGG9JG
4ePXE8e5U43A741ej8Q3ZsyyoRQjNMMtrIFhubvHcWU1nYGBYm0sMVijOWO6YjjT
6/e71lFV6PE6L9I2QHYoK2ylF2B3eEY+YN8QkE5DvIFqFL4coljtluG+EEHTF0ae
hxtxB420CQHt8Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:56 2025 by rpki-client