Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
File: SyOwbWDsPna0kgsrZBQfo69uX7s.mft (raw, json)
Hash identifier: u2U+YL8j5b5XG13ry5Yr6U+96IoYJykzgcussGhFfT8=
Subject key identifier: 6C:F2:A0:47:C3:51:3C:B1:F5:C2:81:78:15:DF:52:6A:BF:02:11:AD
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: 0194BD17976AEB47EB9CFB14F0B3890B70C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
Manifest number: 0B9B
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: 2FAwhQu6ok9bOg22C73ws6AzeTA.roa (hash: NjIG5kr55nDYslaJlr/UrfkcBYGbRIfRwF+wfXlzJDo=)
2: 2JWsXELeyx7EyyyZ3YWZM719O70.roa (hash: FZod/ic6qTKIkUVMr3hWJLyceYOdcHo1fQ2FEaICWK0=)
3: SyOwbWDsPna0kgsrZBQfo69uX7s.crl (hash: OQQEAb3SGpL4a8qs9ZYSmfPPAthIw5+izHQs/C0x0vE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:97:6a:eb:47:eb:9c:fb:14:f0:b3:89:0b:70:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=6cf2a047c3513cb1f5c2817815df526abf0211ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:4b:ba:f3:72:12:3d:7a:f9:00:70:f6:d9:
1c:23:d2:a1:4a:db:5f:f2:8e:ee:0f:3a:40:d0:47:
b1:06:90:87:32:9c:6e:f7:39:36:18:00:30:cc:c9:
19:4d:56:90:27:af:e5:ef:2f:88:86:04:de:c0:9e:
7f:91:ed:d1:22:ad:58:13:53:17:54:41:b8:ba:fe:
cd:3d:1a:a6:fd:af:62:bd:17:ca:17:ab:54:46:6e:
ce:53:e9:0b:8c:38:e0:09:82:a8:2f:05:fd:54:ee:
16:57:ba:94:51:1d:26:6c:49:6b:ff:25:8b:9f:94:
e5:07:6e:43:17:48:f2:75:29:c4:5b:b7:d1:67:5b:
70:d4:56:40:db:17:1e:2a:6a:10:6a:cf:b2:d5:7b:
76:82:93:d1:c6:34:ec:d2:b4:3b:fa:d5:34:88:8f:
7e:42:c1:a0:09:da:3b:b4:0f:e6:ed:9b:9a:30:32:
1d:8d:c4:41:a1:71:b0:10:2e:3f:68:4a:79:5e:32:
e5:7a:7a:8b:06:5d:aa:0e:56:aa:e9:4b:a3:e1:12:
1a:9a:45:e3:b4:24:2d:d2:60:54:b7:7c:58:75:04:
c7:1c:0f:df:6e:0c:4e:a5:24:a1:c4:75:52:89:db:
9e:51:dc:9a:a2:91:ef:e3:79:9d:02:ed:05:d7:fe:
83:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F2:A0:47:C3:51:3C:B1:F5:C2:81:78:15:DF:52:6A:BF:02:11:AD
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e8:a4:5a:ef:c0:9a:46:b4:93:b7:71:87:ba:29:f7:3f:91:
4b:98:c8:ad:ed:50:31:db:55:b8:fc:81:13:e9:7a:70:bf:50:
b5:b5:06:cb:7a:27:a3:7c:da:cb:f1:aa:5e:a9:77:21:2a:16:
e0:f9:34:1a:61:83:ec:88:63:f0:a4:35:11:50:05:4e:88:5b:
95:59:10:a5:fa:2e:0a:bc:70:a8:27:40:79:c8:b5:d7:98:88:
f3:a3:ed:3b:c1:4b:bb:6c:99:61:54:3d:f0:b0:ec:33:c9:f5:
bf:3a:ed:75:d5:33:f0:17:86:a4:cb:cf:8b:e1:ec:ca:40:cc:
2a:b8:81:4f:ae:4f:e0:e7:94:f2:18:fa:31:cf:f3:29:49:7c:
cb:92:77:c1:33:36:2d:6c:85:63:d1:d9:58:61:01:84:57:df:
c1:51:17:fc:f2:2a:c6:16:08:50:28:fd:e0:86:ae:74:33:6f:
aa:c3:3a:1c:5c:26:76:39:29:81:81:c9:1a:f4:d3:c1:9a:ea:
0f:9b:85:8c:bd:15:15:24:64:d2:d3:05:24:b2:53:63:76:06:
fd:a6:3f:2a:6a:fd:7c:89:75:e2:8c:57:d6:c1:2e:9d:55:f4:
d0:9e:64:6e:62:d8:d8:dd:f4:c2:a5:ee:43:1e:5d:f4:a1:a0:
f0:cb:ba:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F5dq60frnPsU8LOJC3DFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMjNiMDZkNjBlYzNlNzZiNDkyMGIyYjY0MTQxZmEzYWY2
ZTVmYmIwHhcNMjUwMTMxMTYwMDI3WhcNMjUwMjAxMTYwMDI3WjAzMTEwLwYDVQQD
Eyg2Y2YyYTA0N2MzNTEzY2IxZjVjMjgxNzgxNWRmNTI2YWJmMDIxMWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssNLuvNyEj16+QBw9tkcI9KhSttf
8o7uDzpA0EexBpCHMpxu9zk2GAAwzMkZTVaQJ6/l7y+IhgTewJ5/ke3RIq1YE1MX
VEG4uv7NPRqm/a9ivRfKF6tURm7OU+kLjDjgCYKoLwX9VO4WV7qUUR0mbElr/yWL
n5TlB25DF0jydSnEW7fRZ1tw1FZA2xceKmoQas+y1Xt2gpPRxjTs0rQ7+tU0iI9+
QsGgCdo7tA/m7ZuaMDIdjcRBoXGwEC4/aEp5XjLlenqLBl2qDlaq6Uuj4RIamkXj
tCQt0mBUt3xYdQTHHA/fbgxOpSShxHVSidueUdyaopHv43mdAu0F1/6DjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzyoEfDUTyx9cKBeBXfUmq/AhGtMB8GA1UdIwQY
MBaAFEsjsG1g7D52tJILK2QUH6Ovbl+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS81YWFjZjMtYmJjOS00M2M0LTg2ZjAt
NTRmNmU1MmY1NDdiLzEvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS81YWFjZjMtYmJjOS00M2M0LTg2ZjAtNTRmNmU1MmY1NDdi
LzEvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOikWu/A
mka0k7dxh7op9z+RS5jIre1QMdtVuPyBE+l6cL9QtbUGy3ono3zay/GqXql3ISoW
4Pk0GmGD7Ihj8KQ1EVAFTohblVkQpfouCrxwqCdAeci115iI86PtO8FLu2yZYVQ9
8LDsM8n1vzrtddUz8BeGpMvPi+HsykDMKriBT65P4OeU8hj6Mc/zKUl8y5J3wTM2
LWyFY9HZWGEBhFffwVEX/PIqxhYIUCj94IaudDNvqsM6HFwmdjkpgYHJGvTTwZrq
D5uFjL0VFSRk0tMFJLJTY3YG/aY/Kmr9fIl14oxX1sEunVX00J5kbmLY2N30wqXu
Qx5d9KGg8Mu6hw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:40 2025 by rpki-client