Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a71248-a465-40d4-a2cf-a41b50aa272d/1/SyXfhiA3QkPjxeqyVVCvJODv9Iw.mft
File: SyXfhiA3QkPjxeqyVVCvJODv9Iw.mft (raw, json)
Hash identifier: p8fIIHecUUenXkFuDWH3qx9EWxoXEou0ElZoq4CjjW8=
Subject key identifier: E2:F9:F0:2E:24:06:32:9E:19:6A:D3:DD:15:39:BF:93:14:CD:B2:60
Authority key identifier: 4B:25:DF:86:20:37:42:43:E3:C5:EA:B2:55:50:AF:24:E0:EF:F4:8C
Certificate issuer: /CN=4b25df8620374243e3c5eab25550af24e0eff48c
Certificate serial: 0194D47B1811B7DB7C42B85C127558498D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyXfhiA3QkPjxeqyVVCvJODv9Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a71248-a465-40d4-a2cf-a41b50aa272d/1/SyXfhiA3QkPjxeqyVVCvJODv9Iw.mft
Manifest number: 0B4E
Signing time: Wed 05 Feb 2025 05:00:24 +0000
Manifest this update: Wed 05 Feb 2025 05:00:24 +0000
Manifest next update: Thu 06 Feb 2025 05:00:24 +0000
Files and hashes: 1: 4fhMcxqZft6BZ9fRgxnz8D-3Rjg.roa (hash: x/UT9iVMrFXYt0bA6ZGg+tJGv54SMCnK8XbBkWjAHsk=)
2: SyXfhiA3QkPjxeqyVVCvJODv9Iw.crl (hash: 5Cyr15SJYhrVm/Uu69/RwtxAsl3WHXG3JxgZNqkvSLc=)
3: r6yE4xsEP2nk8bhnU6JLqIojHRE.roa (hash: wfYcyjtmeOZql+vdku9sv4NfFmu1SJxHS5aDVoKI+Kk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d4:7b:18:11:b7:db:7c:42:b8:5c:12:75:58:49:8d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b25df8620374243e3c5eab25550af24e0eff48c
Validity
Not Before: Feb 5 05:00:24 2025 GMT
Not After : Feb 6 05:00:24 2025 GMT
Subject: CN=e2f9f02e2406329e196ad3dd1539bf9314cdb260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:cf:cf:77:23:bc:19:f1:1b:95:48:39:03:
72:ab:00:41:e9:97:76:43:7b:37:41:93:41:e8:1e:
55:de:0b:7e:87:07:83:e4:05:0b:6a:34:07:72:70:
a9:59:e7:51:98:af:00:bc:bb:f0:fb:ba:54:73:a0:
16:4d:ed:f2:29:1c:38:06:4d:00:d9:2f:9f:de:b6:
8f:0e:89:ae:17:fe:26:6a:82:a5:83:bf:db:ea:bb:
b9:c2:22:c8:f8:61:a9:e3:f5:00:15:9c:35:c9:fe:
ca:90:a9:c7:f4:5c:75:e5:85:10:e4:b7:76:e7:20:
99:53:d8:28:a1:f8:87:7c:a3:39:8c:3d:50:1c:4c:
3e:cb:c3:c8:5d:35:c0:64:9d:bd:ff:32:fb:ce:8c:
f7:d3:b6:2d:eb:c2:c0:83:da:dd:88:93:f3:47:49:
ba:40:ab:9f:88:c1:3d:f5:ec:29:e5:a9:42:08:6b:
11:30:57:cb:9d:3e:73:de:a0:37:0c:0f:7b:d8:e6:
30:9d:b8:aa:b8:98:f3:c7:24:a9:19:23:1d:f5:fa:
a1:30:c9:f5:42:c0:ed:d3:23:e0:46:7b:10:61:85:
a8:75:d9:b9:ce:b4:f7:2f:fc:ed:1f:1d:83:76:86:
69:57:a1:9a:4c:93:f4:34:22:d8:5f:f7:21:bf:e5:
7b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F9:F0:2E:24:06:32:9E:19:6A:D3:DD:15:39:BF:93:14:CD:B2:60
X509v3 Authority Key Identifier:
keyid:4B:25:DF:86:20:37:42:43:E3:C5:EA:B2:55:50:AF:24:E0:EF:F4:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyXfhiA3QkPjxeqyVVCvJODv9Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a71248-a465-40d4-a2cf-a41b50aa272d/1/SyXfhiA3QkPjxeqyVVCvJODv9Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a71248-a465-40d4-a2cf-a41b50aa272d/1/SyXfhiA3QkPjxeqyVVCvJODv9Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d4:e0:c1:65:ef:1b:d0:b7:ba:d4:84:2f:50:b0:23:ab:8e:
58:38:03:7a:cd:b2:99:8b:51:a6:5f:81:8d:53:ed:d0:a7:ec:
26:86:f3:d6:34:c9:5c:ba:8c:f7:49:ff:4f:94:c8:1a:6b:c8:
b0:18:7e:04:84:6d:cc:41:9e:5e:93:ad:f4:6a:c4:84:67:1c:
4d:f8:67:42:45:a8:f8:0c:64:97:5c:96:b0:5d:b4:e5:44:da:
78:ca:79:a6:ca:70:a0:be:7c:b6:0e:74:f2:3a:80:b2:19:df:
48:21:c9:68:0f:fd:20:99:c7:09:6d:d1:ab:b3:fe:8e:26:10:
8f:2c:82:ca:8d:ea:1a:3d:07:82:f0:03:9a:b1:48:c5:bb:45:
5a:14:30:c7:7e:6f:bd:32:38:8c:d1:fb:05:1c:95:f8:69:fc:
e0:5f:66:24:f2:ba:e1:7e:df:1e:a7:84:76:72:22:89:af:41:
17:b8:39:8b:ea:4a:fb:2b:85:4c:3b:89:3d:c1:38:a1:d4:20:
9b:58:c2:17:b6:fd:fe:3a:60:26:5d:52:4c:2b:02:9d:df:12:
1d:8e:61:a1:20:26:af:51:d1:b5:ad:b6:c4:55:6e:28:27:62:
68:9d:6c:32:f3:4a:16:04:e7:7c:01:f8:8f:d2:e4:cb:ee:81:
34:31:a0:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTUexgRt9t8QrhcEnVYSY1FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMjVkZjg2MjAzNzQyNDNlM2M1ZWFiMjU1NTBhZjI0ZTBl
ZmY0OGMwHhcNMjUwMjA1MDUwMDI0WhcNMjUwMjA2MDUwMDI0WjAzMTEwLwYDVQQD
EyhlMmY5ZjAyZTI0MDYzMjllMTk2YWQzZGQxNTM5YmY5MzE0Y2RiMjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlLPz3cjvBnxG5VIOQNyqwBB6Zd2
Q3s3QZNB6B5V3gt+hweD5AULajQHcnCpWedRmK8AvLvw+7pUc6AWTe3yKRw4Bk0A
2S+f3raPDomuF/4maoKlg7/b6ru5wiLI+GGp4/UAFZw1yf7KkKnH9Fx15YUQ5Ld2
5yCZU9goofiHfKM5jD1QHEw+y8PIXTXAZJ29/zL7zoz307Yt68LAg9rdiJPzR0m6
QKufiME99ewp5alCCGsRMFfLnT5z3qA3DA972OYwnbiquJjzxySpGSMd9fqhMMn1
QsDt0yPgRnsQYYWoddm5zrT3L/ztHx2DdoZpV6GaTJP0NCLYX/chv+V73wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOL58C4kBjKeGWrT3RU5v5MUzbJgMB8GA1UdIwQY
MBaAFEsl34YgN0JD48XqslVQryTg7/SMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3lYZmhpQTNRa1BqeGVxeVZWQ3ZKT0R2OUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNzEyNDgtYTQ2NS00MGQ0LWEyY2Yt
YTQxYjUwYWEyNzJkLzEvU3lYZmhpQTNRa1BqeGVxeVZWQ3ZKT0R2OUl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hNzEyNDgtYTQ2NS00MGQ0LWEyY2YtYTQxYjUwYWEyNzJk
LzEvU3lYZmhpQTNRa1BqeGVxeVZWQ3ZKT0R2OUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtTgwWXv
G9C3utSEL1CwI6uOWDgDes2ymYtRpl+BjVPt0KfsJobz1jTJXLqM90n/T5TIGmvI
sBh+BIRtzEGeXpOt9GrEhGccTfhnQkWo+Axkl1yWsF205UTaeMp5pspwoL58tg50
8jqAshnfSCHJaA/9IJnHCW3Rq7P+jiYQjyyCyo3qGj0HgvADmrFIxbtFWhQwx35v
vTI4jNH7BRyV+Gn84F9mJPK64X7fHqeEdnIiia9BF7g5i+pK+yuFTDuJPcE4odQg
m1jCF7b9/jpgJl1STCsCnd8SHY5hoSAmr1HRta22xFVuKCdiaJ1sMvNKFgTnfAH4
j9Lky+6BNDGg7A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:06 2025 by rpki-client