Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
File: SScSTZgDp95UiDFko3bqcuPGPq8.mft (raw, json)
Hash identifier: 0o/AdgWPo0gVxBH9W3vK6C5SHufF0DFKCc4n3sSymzo=
Subject key identifier: 84:94:E6:69:47:2A:2C:94:20:86:52:19:20:78:91:A2:F1:0D:0A:4D
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Certificate issuer: /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial: 0195E07DA1DB827A790874B1A1E99F9167B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
Manifest number: 14C5
Signing time: Sat 29 Mar 2025 06:01:24 +0000
Manifest this update: Sat 29 Mar 2025 06:01:24 +0000
Manifest next update: Sun 30 Mar 2025 06:01:24 +0000
Files and hashes: 1: 6-IQUKyeOlnZ0n7k-mpTFfKu5nA.roa (hash: uwqOWT1eD0xXX0n+hN5F7B5Z9MhYA/dYHW/YSlQ6tT8=)
2: OJmLUcdGyKqyreRJA04sZVowZg0.roa (hash: ZPcGNQNPGXt7sqvYIqkF3ZoSuhuiF050QsXqHbGtgGo=)
3: SScSTZgDp95UiDFko3bqcuPGPq8.crl (hash: 2nTjZHbplJccTf/Wrgq9/IJ4/pzRW95AfNcbj5O2whc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:a1:db:82:7a:79:08:74:b1:a1:e9:9f:91:67:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
Validity
Not Before: Mar 29 06:01:24 2025 GMT
Not After : Mar 30 06:01:24 2025 GMT
Subject: CN=8494e669472a2c9420865219207891a2f10d0a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:c4:81:1f:ae:a6:2f:7e:a5:b9:a6:f4:9c:
ad:6b:21:63:82:71:bb:c9:c0:08:a1:90:42:42:38:
e6:b0:ed:e1:8d:56:2a:cb:49:ce:bf:23:aa:49:f1:
c4:99:e0:db:ab:94:91:00:49:41:66:f6:0f:63:ee:
78:53:2a:c0:7f:0a:db:cf:e3:67:60:d3:0d:52:28:
fb:2b:6c:b7:c3:87:08:e2:49:22:d3:07:34:b5:53:
56:3d:64:b8:d4:a3:74:25:41:e0:4b:9b:8b:25:b4:
d1:83:08:5a:78:f5:a6:a6:d6:31:4b:a5:4c:d2:6c:
9b:37:93:eb:93:2f:3c:9e:21:8c:91:a3:fa:dd:1c:
fc:d7:89:3a:bc:cb:3f:89:4d:b4:4b:bc:1a:27:64:
48:17:3b:ff:b4:41:de:d8:33:d1:68:52:94:b4:44:
61:5c:bd:e9:f4:3c:e9:da:70:29:1c:9e:31:09:89:
03:54:05:da:18:84:55:46:03:58:19:7f:90:46:be:
2d:d3:fa:eb:0c:db:98:c6:2f:dd:df:3f:56:c8:d7:
90:de:fd:27:38:96:c4:05:24:e4:34:49:da:63:be:
5d:11:7f:ac:aa:0e:1d:8b:4c:7e:60:da:b2:80:91:
e0:d1:7b:81:0b:ee:35:e6:6c:0e:95:11:1d:1c:70:
71:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:94:E6:69:47:2A:2C:94:20:86:52:19:20:78:91:A2:F1:0D:0A:4D
X509v3 Authority Key Identifier:
keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:80:b0:61:76:2b:c2:5a:52:1d:00:4c:76:db:09:07:ec:ac:
bf:b2:a1:8b:45:4f:02:b1:8e:c6:8c:c1:d6:47:dd:14:62:66:
92:c1:28:98:8a:ba:3e:a1:5b:30:e2:8a:8d:77:88:db:86:03:
a9:b3:82:62:2e:fa:63:94:9e:d6:b0:08:a7:6b:eb:42:89:cd:
fe:35:9f:61:aa:03:69:6c:ad:dc:9f:79:8d:30:b7:f0:30:2b:
a8:d8:7c:eb:98:1a:64:db:ce:3c:25:ca:8c:31:09:fc:8f:6a:
2c:bc:45:c6:23:99:5a:bb:8c:cd:72:67:4d:13:41:f6:1f:e8:
67:0c:01:19:7d:1c:5b:93:96:ec:5e:ce:f2:29:aa:6e:de:91:
2e:51:63:e2:3c:2b:bd:92:b7:55:7d:84:61:e1:17:c6:7c:a6:
3f:e1:54:50:28:58:80:54:00:b6:4c:ae:fd:b4:d6:e9:2f:40:
54:28:3d:25:4a:61:a5:71:49:32:23:4b:91:eb:69:f9:8e:a3:
65:fc:d5:bd:4a:15:93:c3:98:2f:ec:9b:0f:8b:65:d5:f9:62:
4c:a7:b5:f7:37:53:8c:29:e9:74:68:e3:31:37:7d:ef:33:dd:
0f:84:2d:0d:0b:98:1d:1d:a2:08:30:eb:5d:13:44:8f:e1:19:
cc:0a:0f:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgfaHbgnp5CHSxoemfkWeyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MjcxMjRkOTgwM2E3ZGU1NDg4MzE2NGEzNzZlYTcyZTNj
NjNlYWYwHhcNMjUwMzI5MDYwMTI0WhcNMjUwMzMwMDYwMTI0WjAzMTEwLwYDVQQD
Eyg4NDk0ZTY2OTQ3MmEyYzk0MjA4NjUyMTkyMDc4OTFhMmYxMGQwYTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNbEgR+upi9+pbmm9JytayFjgnG7
ycAIoZBCQjjmsO3hjVYqy0nOvyOqSfHEmeDbq5SRAElBZvYPY+54UyrAfwrbz+Nn
YNMNUij7K2y3w4cI4kki0wc0tVNWPWS41KN0JUHgS5uLJbTRgwhaePWmptYxS6VM
0mybN5Prky88niGMkaP63Rz814k6vMs/iU20S7waJ2RIFzv/tEHe2DPRaFKUtERh
XL3p9Dzp2nApHJ4xCYkDVAXaGIRVRgNYGX+QRr4t0/rrDNuYxi/d3z9WyNeQ3v0n
OJbEBSTkNEnaY75dEX+sqg4di0x+YNqygJHg0XuBC+415mwOlREdHHBx4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISU5mlHKiyUIIZSGSB4kaLxDQpNMB8GA1UdIwQY
MBaAFEknEk2YA6feVIgxZKN26nLjxj6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zZTJjMzgtZjk2Zi00MGRmLWFlYWMt
ZjAxNTBjODFhY2Y1LzEvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8zZTJjMzgtZjk2Zi00MGRmLWFlYWMtZjAxNTBjODFhY2Y1
LzEvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYCwYXYr
wlpSHQBMdtsJB+ysv7Khi0VPArGOxozB1kfdFGJmksEomIq6PqFbMOKKjXeI24YD
qbOCYi76Y5Se1rAIp2vrQonN/jWfYaoDaWyt3J95jTC38DArqNh865gaZNvOPCXK
jDEJ/I9qLLxFxiOZWruMzXJnTRNB9h/oZwwBGX0cW5OW7F7O8imqbt6RLlFj4jwr
vZK3VX2EYeEXxnymP+FUUChYgFQAtkyu/bTW6S9AVCg9JUphpXFJMiNLketp+Y6j
ZfzVvUoVk8OYL+ybD4tl1fliTKe19zdTjCnpdGjjMTd97zPdD4QtDQuYHR2iCDDr
XRNEj+EZzAoPMg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:12:50 2025 by rpki-client