Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/511ae5-2b40-48a4-93fb-cc14252c0fa1/1/S9rxV_M7X94hCJmpVINNxybTSms.mft
File: S9rxV_M7X94hCJmpVINNxybTSms.mft (raw, json)
Hash identifier: rEUYaL8ft73HIxBSrrzjyXcp/hO3HldFHnnVpJmfMEA=
Subject key identifier: 57:42:2A:87:9E:45:06:CF:AA:EE:97:D2:1C:33:E7:F9:83:CA:A3:40
Authority key identifier: 4B:DA:F1:57:F3:3B:5F:DE:21:08:99:A9:54:83:4D:C7:26:D3:4A:6B
Certificate issuer: /CN=4bdaf157f33b5fde210899a954834dc726d34a6b
Certificate serial: 0187BC7094282532FA97C86D4647BFD37C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9rxV_M7X94hCJmpVINNxybTSms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/511ae5-2b40-48a4-93fb-cc14252c0fa1/1/S9rxV_M7X94hCJmpVINNxybTSms.mft
Manifest number: 0CDD
Signing time: Wed 26 Apr 2023 07:21:47 +0000
Manifest this update: Wed 26 Apr 2023 07:21:47 +0000
Manifest next update: Thu 27 Apr 2023 07:21:47 +0000
Files and hashes: 1: S9rxV_M7X94hCJmpVINNxybTSms.crl (hash: FzoPmdD2a0Cj0HddSmYez+d3RxVivNz8u2HsIuza5tg=)
2: dAIjUwsO5zcCkb68Z-FcwrnWMCw.roa (hash: WVIg9CGVc62xwbSDrjQvQ3Utvw5OV1BU/9vm6kvTnyI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bc:70:94:28:25:32:fa:97:c8:6d:46:47:bf:d3:7c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdaf157f33b5fde210899a954834dc726d34a6b
Validity
Not Before: Apr 26 07:21:47 2023 GMT
Not After : Apr 27 07:21:47 2023 GMT
Subject: CN=57422a879e4506cfaaee97d21c33e7f983caa340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7a:75:9e:28:a7:f4:e6:93:c3:45:0a:f8:73:
94:81:9b:ea:2e:4a:15:bd:f1:80:38:56:75:8b:5e:
f0:9d:8e:89:4a:6d:18:b0:32:87:46:c6:e6:ca:af:
d9:88:db:3b:5d:8b:cf:fc:ff:96:a6:4d:65:ed:26:
58:01:cd:f2:43:cd:11:f6:ce:0f:77:3f:af:9c:99:
8c:d8:0f:c0:5b:7a:6a:ec:4a:85:4f:76:f2:d9:ee:
82:bc:79:66:06:1e:8c:37:ca:8e:5e:ce:be:94:dc:
be:61:d4:3f:2a:23:81:57:25:af:54:43:6f:0c:9d:
7a:ed:11:e2:a9:4b:5b:8d:99:8d:80:0c:04:fa:44:
1e:da:bc:eb:82:2c:a3:c3:ee:34:7f:ef:48:d4:01:
41:03:f7:a4:d0:e4:c1:62:b4:84:00:bb:92:41:f5:
9e:3d:1f:7f:c8:82:75:f9:df:89:90:21:96:6f:e1:
57:ce:ef:65:d1:24:c3:02:88:d2:e5:9e:3f:38:4f:
6b:34:9f:08:b9:36:a1:7b:12:4c:a5:87:38:3a:2e:
2b:10:de:75:7f:ec:a7:36:85:3c:92:20:20:6d:bd:
4e:cb:b4:af:01:1a:11:1c:b0:67:76:5d:97:b2:ec:
97:6e:3f:6d:1d:d3:b8:1c:17:7d:dc:0a:fb:d4:7a:
59:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:42:2A:87:9E:45:06:CF:AA:EE:97:D2:1C:33:E7:F9:83:CA:A3:40
X509v3 Authority Key Identifier:
keyid:4B:DA:F1:57:F3:3B:5F:DE:21:08:99:A9:54:83:4D:C7:26:D3:4A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9rxV_M7X94hCJmpVINNxybTSms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/511ae5-2b40-48a4-93fb-cc14252c0fa1/1/S9rxV_M7X94hCJmpVINNxybTSms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/511ae5-2b40-48a4-93fb-cc14252c0fa1/1/S9rxV_M7X94hCJmpVINNxybTSms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0f:22:af:3f:65:29:53:a1:6f:86:f9:9e:d5:f8:3c:6e:b4:
18:bb:33:74:ee:4f:71:e5:b7:25:21:66:1b:cc:59:85:33:4a:
c7:05:88:58:ed:b2:a8:eb:34:e8:1a:a9:9e:eb:d5:01:a1:25:
e2:52:b1:38:95:a2:e7:2c:ec:7f:41:60:6d:ba:b4:93:f5:98:
33:b8:bf:4c:33:36:6c:8a:a5:3e:cd:5b:25:b9:8a:1e:1d:6d:
d6:75:f8:ae:f3:b9:2f:12:8f:f5:11:de:86:88:c6:b9:cd:c6:
ff:fe:00:f3:1c:01:be:0f:fe:e7:a9:cc:bf:73:3c:91:03:cf:
3c:82:78:90:b7:31:ef:1b:65:3f:d2:bb:af:ac:72:ac:94:ba:
30:7c:e1:8f:b1:28:7a:29:cd:93:be:a6:07:76:38:a7:74:da:
39:8f:f1:cd:b0:f4:f0:f8:14:78:71:4c:8c:78:d6:c5:d0:21:
b5:39:c5:e3:7d:1e:04:db:0e:90:c0:78:65:ab:7a:c3:43:a2:
8b:f8:67:45:58:e2:cf:1a:3c:c6:64:3a:d3:9a:bd:16:65:cb:
fe:54:c1:b9:ee:a8:f0:6f:70:87:ef:eb:03:54:fa:8f:c8:30:
8f:87:36:8a:ea:3f:45:9c:02:e6:dd:a0:23:9a:2c:eb:c9:13:
be:6e:4a:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYe8cJQoJTL6l8htRke/03x9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZGFmMTU3ZjMzYjVmZGUyMTA4OTlhOTU0ODM0ZGM3MjZk
MzRhNmIwHhcNMjMwNDI2MDcyMTQ3WhcNMjMwNDI3MDcyMTQ3WjAzMTEwLwYDVQQD
Eyg1NzQyMmE4NzllNDUwNmNmYWFlZTk3ZDIxYzMzZTdmOTgzY2FhMzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknp1niin9OaTw0UK+HOUgZvqLkoV
vfGAOFZ1i17wnY6JSm0YsDKHRsbmyq/ZiNs7XYvP/P+Wpk1l7SZYAc3yQ80R9s4P
dz+vnJmM2A/AW3pq7EqFT3by2e6CvHlmBh6MN8qOXs6+lNy+YdQ/KiOBVyWvVENv
DJ167RHiqUtbjZmNgAwE+kQe2rzrgiyjw+40f+9I1AFBA/ek0OTBYrSEALuSQfWe
PR9/yIJ1+d+JkCGWb+FXzu9l0STDAojS5Z4/OE9rNJ8IuTahexJMpYc4Oi4rEN51
f+ynNoU8kiAgbb1Oy7SvARoRHLBndl2XsuyXbj9tHdO4HBd93Ar71HpZrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdCKoeeRQbPqu6X0hwz5/mDyqNAMB8GA1UdIwQY
MBaAFEva8VfzO1/eIQiZqVSDTccm00prMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzlyeFZfTTdYOTRoQ0ptcFZJTk54eWJUU21zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC81MTFhZTUtMmI0MC00OGE0LTkzZmIt
Y2MxNDI1MmMwZmExLzEvUzlyeFZfTTdYOTRoQ0ptcFZJTk54eWJUU21zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC81MTFhZTUtMmI0MC00OGE0LTkzZmItY2MxNDI1MmMwZmEx
LzEvUzlyeFZfTTdYOTRoQ0ptcFZJTk54eWJUU21zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALg8irz9l
KVOhb4b5ntX4PG60GLszdO5PceW3JSFmG8xZhTNKxwWIWO2yqOs06BqpnuvVAaEl
4lKxOJWi5yzsf0Fgbbq0k/WYM7i/TDM2bIqlPs1bJbmKHh1t1nX4rvO5LxKP9RHe
hojGuc3G//4A8xwBvg/+56nMv3M8kQPPPIJ4kLcx7xtlP9K7r6xyrJS6MHzhj7Eo
einNk76mB3Y4p3TaOY/xzbD08PgUeHFMjHjWxdAhtTnF430eBNsOkMB4Zat6w0Oi
i/hnRVjizxo8xmQ605q9FmXL/lTBue6o8G9wh+/rA1T6j8gwj4c2iuo/RZwC5t2g
I5os68kTvm5KeQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:44 2025 by rpki-client