Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
File: sCqa8vxf6TxDFIqssTxRvpBMjkw.mft (raw, json)
Hash identifier: ryXN9gk8SG1UO0MzlyO//yQW/rkctLjKAg+rc9jLfO4=
Subject key identifier: 37:5E:03:36:20:AA:1D:88:6A:DA:C7:05:CB:73:E5:EB:10:48:D9:3C
Authority key identifier: B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C
Certificate issuer: /CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
Certificate serial: 0194BD17CFA25B93789245CD67830D7DCA5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
Manifest number: 0265
Signing time: Fri 31 Jan 2025 16:00:41 +0000
Manifest this update: Fri 31 Jan 2025 16:00:41 +0000
Manifest next update: Sat 01 Feb 2025 16:00:41 +0000
Files and hashes: 1: RLYBpjQJ_nWnvtQxzs5jpfZ53LI.roa (hash: WydSL9s2ghSAkXvNPUv+LZJE2s3aihvIV2UvrS6hIBw=)
2: sCqa8vxf6TxDFIqssTxRvpBMjkw.crl (hash: x1VfGuruITgJOI0dW6MT48I10vuBbTYUvGpoH/muIZg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cf:a2:5b:93:78:92:45:cd:67:83:0d:7d:ca:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
Validity
Not Before: Jan 31 16:00:41 2025 GMT
Not After : Feb 1 16:00:41 2025 GMT
Subject: CN=375e033620aa1d886adac705cb73e5eb1048d93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:63:3c:bb:58:be:47:6c:2a:32:a4:03:b3:
8e:65:cc:9a:b0:26:c4:ad:de:d6:40:d9:4b:09:e1:
61:17:fa:f0:4b:c7:5e:e9:50:fd:e4:ac:2c:49:a2:
25:8a:a0:11:f0:41:08:15:e1:ed:16:70:c3:76:78:
a6:50:ff:32:0e:33:31:06:11:b9:3e:16:02:88:63:
2b:17:fb:7f:f8:43:e0:5b:7b:ad:b7:ad:56:53:d5:
49:b7:e1:2e:b3:d3:0f:f8:1b:d7:bb:60:27:e0:72:
cc:05:78:d6:98:4b:84:b1:bb:9a:28:a2:df:8e:54:
f1:d2:4e:c3:57:68:a0:f6:a5:c8:ec:95:5a:a1:b1:
5a:b5:4f:b9:ec:31:0d:8a:88:8f:19:90:8c:c6:0e:
ef:9c:9e:90:20:4c:04:83:07:ca:48:4f:67:0d:e0:
97:71:05:b9:e2:a7:03:c3:00:8b:b0:d7:17:02:b4:
82:35:26:4b:7b:eb:bf:1b:dd:79:13:2e:17:c5:d6:
31:2f:f7:44:7a:b9:d7:b1:16:bd:90:c7:00:f5:f7:
d9:97:f7:68:d7:b5:98:0c:09:18:a3:3d:70:06:59:
82:32:e7:e3:89:4c:3b:9e:eb:f8:ca:05:58:b0:49:
55:14:c3:cd:cb:bf:6f:27:2d:e5:7f:a8:29:69:83:
dd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5E:03:36:20:AA:1D:88:6A:DA:C7:05:CB:73:E5:EB:10:48:D9:3C
X509v3 Authority Key Identifier:
keyid:B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:01:13:f1:06:59:1d:73:bc:47:4e:41:02:87:05:31:1f:45:
bf:1c:ec:b9:8a:0b:20:46:87:8f:18:7f:e7:2f:55:a8:4e:ec:
bd:78:55:31:fa:17:de:b9:61:b0:54:98:c4:b8:2e:bf:0c:57:
5c:3b:ef:4c:b4:5b:ee:31:6e:bc:d3:aa:6f:3a:76:39:70:6f:
b2:9c:fa:e9:1e:d3:85:61:81:84:c9:19:fa:53:93:35:c0:85:
da:72:e3:f1:5a:14:c9:3b:1e:14:a7:8e:2b:b5:07:8a:2e:2f:
9c:1b:2f:39:1b:e6:b5:5c:c8:4d:7e:eb:4e:b7:0e:e2:de:9c:
48:8a:ef:27:6a:6f:fa:04:f0:5e:04:59:5b:3d:16:8e:ca:54:
bb:f0:3f:90:38:22:1b:54:6e:d2:75:ea:ac:87:ad:61:6e:69:
33:c5:0a:01:69:de:2f:b7:f2:aa:ce:9f:68:e8:69:7d:79:2c:
0a:bb:6c:96:1a:56:ef:e8:95:c5:36:69:5c:59:61:fe:3a:11:
6b:2a:09:c9:36:a9:f8:53:76:59:8b:87:9b:76:1c:55:5f:cc:
a0:ea:8c:00:ac:ae:35:75:87:8c:09:41:88:78:f4:a5:f6:db:
2d:bb:cd:bc:39:fa:ef:f1:9b:49:a9:cd:25:d3:7f:3a:63:0a:
c5:e9:69:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8+iW5N4kkXNZ4MNfcpaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMmE5YWYyZmM1ZmU5M2M0MzE0OGFhY2IxM2M1MWJlOTA0
YzhlNGMwHhcNMjUwMTMxMTYwMDQxWhcNMjUwMjAxMTYwMDQxWjAzMTEwLwYDVQQD
EygzNzVlMDMzNjIwYWExZDg4NmFkYWM3MDVjYjczZTVlYjEwNDhkOTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLxjPLtYvkdsKjKkA7OOZcyasCbE
rd7WQNlLCeFhF/rwS8de6VD95KwsSaIliqAR8EEIFeHtFnDDdnimUP8yDjMxBhG5
PhYCiGMrF/t/+EPgW3utt61WU9VJt+Eus9MP+BvXu2An4HLMBXjWmEuEsbuaKKLf
jlTx0k7DV2ig9qXI7JVaobFatU+57DENioiPGZCMxg7vnJ6QIEwEgwfKSE9nDeCX
cQW54qcDwwCLsNcXArSCNSZLe+u/G915Ey4XxdYxL/dEernXsRa9kMcA9ffZl/do
17WYDAkYoz1wBlmCMufjiUw7nuv4ygVYsElVFMPNy79vJy3lf6gpaYPd5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdeAzYgqh2IatrHBctz5esQSNk8MB8GA1UdIwQY
MBaAFLAqmvL8X+k8QxSKrLE8Ub6QTI5MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NxYTh2eGY2VHhERklxc3NUeFJ2cEJNamt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wYTYwY2UtYmIzNy00MzM3LWJmNTAt
NWVjYTM2ZTE5ZjVkLzEvc0NxYTh2eGY2VHhERklxc3NUeFJ2cEJNamt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8wYTYwY2UtYmIzNy00MzM3LWJmNTAtNWVjYTM2ZTE5ZjVk
LzEvc0NxYTh2eGY2VHhERklxc3NUeFJ2cEJNamt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQET8QZZ
HXO8R05BAocFMR9FvxzsuYoLIEaHjxh/5y9VqE7svXhVMfoX3rlhsFSYxLguvwxX
XDvvTLRb7jFuvNOqbzp2OXBvspz66R7ThWGBhMkZ+lOTNcCF2nLj8VoUyTseFKeO
K7UHii4vnBsvORvmtVzITX7rTrcO4t6cSIrvJ2pv+gTwXgRZWz0WjspUu/A/kDgi
G1Ru0nXqrIetYW5pM8UKAWneL7fyqs6faOhpfXksCrtslhpW7+iVxTZpXFlh/joR
ayoJyTap+FN2WYuHm3YcVV/MoOqMAKyuNXWHjAlBiHj0pfbbLbvNvDn67/GbSanN
JdN/OmMKxelpFg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:07 2025 by rpki-client