Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.mft
File: SqtlhzyyeC8Tw3j1VDxpFEPRb3k.mft (raw, json)
Hash identifier: +nGbVcYOOL6BdM9LURV3TmHeY7PG7AWYJ55Y4t7MFr8=
Subject key identifier: 60:A8:7B:D0:FA:2F:EE:8C:60:5F:C5:CD:54:E0:28:EB:D0:CE:24:1F
Authority key identifier: 4A:AB:65:87:3C:B2:78:2F:13:C3:78:F5:54:3C:69:14:43:D1:6F:79
Certificate issuer: /CN=4aab65873cb2782f13c378f5543c691443d16f79
Certificate serial: 0193B33BE6667BF072ECF221EB9A3F830E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.mft
Manifest number: 0C11
Signing time: Wed 11 Dec 2024 01:01:07 +0000
Manifest this update: Wed 11 Dec 2024 01:01:07 +0000
Manifest next update: Thu 12 Dec 2024 01:01:07 +0000
Files and hashes: 1: SqtlhzyyeC8Tw3j1VDxpFEPRb3k.crl (hash: AQ47LOMU7X9mzvaRoA+IKmV+KFKwl95Sf1873GpkdHc=)
2: bN7oUkyOjKWf5IXm9vdRB_yLWtk.roa (hash: LjibpLjy3Mo93VJC0PxkHu1xI/PC2FCi9UXUSDbAUo0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b3:3b:e6:66:7b:f0:72:ec:f2:21:eb:9a:3f:83:0e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aab65873cb2782f13c378f5543c691443d16f79
Validity
Not Before: Dec 11 01:01:07 2024 GMT
Not After : Dec 12 01:01:07 2024 GMT
Subject: CN=60a87bd0fa2fee8c605fc5cd54e028ebd0ce241f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:88:af:2f:a0:72:7f:10:77:62:af:cc:7b:0e:
ad:e1:a9:c7:eb:c3:60:ac:d1:4c:ea:3f:8c:3c:c6:
e4:39:58:b6:7e:c2:22:0e:f9:a9:98:81:1a:5f:c1:
71:0a:b9:76:27:63:2b:de:7d:42:db:84:ea:7a:fb:
8d:aa:8c:8a:62:5a:25:b7:e1:8a:08:64:0d:3c:de:
af:89:ac:ac:c1:9a:83:e9:08:b2:96:4d:4a:d3:18:
61:00:10:9d:fb:c1:56:c9:20:5a:aa:43:e8:ab:e7:
54:d5:39:e2:6a:7b:5a:1c:3c:c9:bc:a2:98:a8:87:
30:00:d8:c0:2e:5c:a9:6e:a4:b6:3b:49:10:20:e7:
63:3d:e4:6e:92:be:18:82:24:42:e6:bf:ca:c1:11:
59:00:1d:aa:4d:43:1f:f6:fd:95:82:9c:86:bd:ea:
e3:2c:9f:94:0b:0b:86:00:f0:bf:9a:cf:29:7a:ab:
d7:04:0b:1a:fd:12:cd:b2:e4:8d:4e:8c:dc:13:31:
3c:b6:be:74:69:18:84:3c:84:7d:ce:0b:fc:53:54:
66:ac:cf:3e:fe:5a:71:d3:ce:99:a7:92:1b:f4:f9:
b0:d9:de:9e:2f:2c:90:e4:dc:3a:fb:12:51:61:5d:
5f:d6:93:d6:95:14:12:2b:d1:3f:1d:dc:c3:d2:5a:
f9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A8:7B:D0:FA:2F:EE:8C:60:5F:C5:CD:54:E0:28:EB:D0:CE:24:1F
X509v3 Authority Key Identifier:
keyid:4A:AB:65:87:3C:B2:78:2F:13:C3:78:F5:54:3C:69:14:43:D1:6F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:39:c2:6e:e8:ff:0b:68:d9:f0:53:92:89:45:52:20:32:5c:
c4:3d:5c:de:fb:7c:68:98:98:dd:8c:70:a7:84:f3:65:d4:2f:
92:7b:bf:88:7f:91:af:a0:09:2f:0a:db:21:f2:dc:94:52:ec:
c3:6a:76:b8:d5:76:41:70:b9:bb:60:82:c1:a8:d9:a6:08:8e:
94:6f:97:55:7d:15:38:8d:2b:82:aa:d9:7b:57:ce:12:5f:24:
9c:7e:ef:22:1d:b8:46:0f:09:cd:6d:7d:06:a7:e4:95:10:e3:
5f:a7:1f:7d:06:ca:1c:13:c8:af:ae:6d:f1:26:1c:03:f0:b1:
f9:08:7e:b6:33:cb:87:e5:11:43:2e:c5:15:00:50:03:77:ca:
1c:56:ef:d1:fd:e4:fa:98:32:63:b0:68:4c:e7:db:48:97:dc:
9c:33:45:2d:3f:62:5f:d4:ce:30:3a:cf:49:e3:ab:f0:6d:8f:
61:be:b4:11:c7:bd:c8:f6:98:3b:21:da:3c:2a:c6:8c:21:06:
e9:92:bf:57:e8:c4:38:f1:75:8a:1e:a0:ee:5c:a5:3a:e8:e2:
56:86:ea:3a:53:dd:f0:41:ac:99:bc:1f:31:3d:c7:2f:66:17:
f1:b0:a3:4b:79:9e:c6:d0:0a:0b:fa:51:d0:3f:ed:f7:e0:e9:
0c:15:93:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZOzO+Zme/By7PIh65o/gw5nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYWI2NTg3M2NiMjc4MmYxM2MzNzhmNTU0M2M2OTE0NDNk
MTZmNzkwHhcNMjQxMjExMDEwMTA3WhcNMjQxMjEyMDEwMTA3WjAzMTEwLwYDVQQD
Eyg2MGE4N2JkMGZhMmZlZThjNjA1ZmM1Y2Q1NGUwMjhlYmQwY2UyNDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYivL6ByfxB3Yq/Mew6t4anH68Ng
rNFM6j+MPMbkOVi2fsIiDvmpmIEaX8FxCrl2J2Mr3n1C24TqevuNqoyKYlolt+GK
CGQNPN6viayswZqD6Qiylk1K0xhhABCd+8FWySBaqkPoq+dU1TniantaHDzJvKKY
qIcwANjALlypbqS2O0kQIOdjPeRukr4YgiRC5r/KwRFZAB2qTUMf9v2VgpyGverj
LJ+UCwuGAPC/ms8peqvXBAsa/RLNsuSNTozcEzE8tr50aRiEPIR9zgv8U1RmrM8+
/lpx086Zp5Ib9Pmw2d6eLyyQ5Nw6+xJRYV1f1pPWlRQSK9E/HdzD0lr5kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCoe9D6L+6MYF/FzVTgKOvQziQfMB8GA1UdIwQY
MBaAFEqrZYc8sngvE8N49VQ8aRRD0W95MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3F0bGh6eXllQzhUdzNqMVZEeHBGRVBSYjNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hYTE3OTctNDM3My00YTJmLWEwNzQt
YzczY2JlNzBhYmI5LzEvU3F0bGh6eXllQzhUdzNqMVZEeHBGRVBSYjNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hYTE3OTctNDM3My00YTJmLWEwNzQtYzczY2JlNzBhYmI5
LzEvU3F0bGh6eXllQzhUdzNqMVZEeHBGRVBSYjNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojnCbuj/
C2jZ8FOSiUVSIDJcxD1c3vt8aJiY3Yxwp4TzZdQvknu/iH+Rr6AJLwrbIfLclFLs
w2p2uNV2QXC5u2CCwajZpgiOlG+XVX0VOI0rgqrZe1fOEl8knH7vIh24Rg8JzW19
BqfklRDjX6cffQbKHBPIr65t8SYcA/Cx+Qh+tjPLh+URQy7FFQBQA3fKHFbv0f3k
+pgyY7BoTOfbSJfcnDNFLT9iX9TOMDrPSeOr8G2PYb60Ece9yPaYOyHaPCrGjCEG
6ZK/V+jEOPF1ih6g7lylOujiVobqOlPd8EGsmbwfMT3HL2YX8bCjS3mextAKC/pR
0D/t9+DpDBWTRw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:46:54 2025 by rpki-client