Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft
File: sUJ73NR8eEMfZioIWJAFrLULk0E.mft (raw, json)
Hash identifier: frVYoYqcujXfx62UI9ZjX3eKcIVB/AxgGT0GXCDWrUo=
Subject key identifier: 70:04:BE:1C:BA:CC:27:04:04:13:0D:C5:86:3C:C8:E5:D9:66:CD:72
Authority key identifier: B1:42:7B:DC:D4:7C:78:43:1F:66:2A:08:58:90:05:AC:B5:0B:93:41
Certificate issuer: /CN=b1427bdcd47c78431f662a08589005acb50b9341
Certificate serial: 0194DFA3C616B9D414646308AEB007DC231A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUJ73NR8eEMfZioIWJAFrLULk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft
Manifest number: 0A03
Signing time: Fri 07 Feb 2025 09:00:39 +0000
Manifest this update: Fri 07 Feb 2025 09:00:39 +0000
Manifest next update: Sat 08 Feb 2025 09:00:39 +0000
Files and hashes: 1: iqbUC3RkeGwfkGzLdhu1vTKXGrY.roa (hash: RaEnfZTaOx7WzFEEDktbraYPhjg7MFND4IvOcK58KYI=)
2: sUJ73NR8eEMfZioIWJAFrLULk0E.crl (hash: Ngl4Dcnuuig6AQyH/ManVJezU57c8zxmcvIJDicTr0E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:a3:c6:16:b9:d4:14:64:63:08:ae:b0:07:dc:23:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1427bdcd47c78431f662a08589005acb50b9341
Validity
Not Before: Feb 7 09:00:39 2025 GMT
Not After : Feb 8 09:00:39 2025 GMT
Subject: CN=7004be1cbacc270404130dc5863cc8e5d966cd72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d6:64:ab:a1:4f:2f:00:16:2a:49:73:5e:c3:
65:a4:c9:7d:60:f1:9e:69:80:0d:30:4b:d5:97:18:
8b:de:33:21:3c:93:b7:9c:99:14:27:bc:3d:74:45:
cc:7d:18:98:c7:36:61:f2:62:3f:1e:8a:97:51:ce:
e1:dd:94:ee:cf:ee:a0:b9:ea:c0:9b:e9:08:78:ad:
86:87:97:ab:ac:e4:f4:af:f4:56:df:86:68:51:30:
e7:4a:66:8e:02:cf:04:8a:4f:40:e6:45:0b:f7:49:
bf:bb:3a:01:05:e1:1c:74:c6:ec:3a:74:0a:70:e6:
68:5e:aa:a2:ae:2f:54:21:16:0d:bf:72:85:f7:b3:
5e:51:20:5c:00:d8:4c:d0:ad:91:44:70:42:76:69:
60:e4:fc:1f:1a:cb:86:ce:89:1f:1e:dd:e9:76:ae:
f2:bb:8e:7c:b7:e1:3f:5b:62:92:c4:c9:d1:51:42:
15:9e:55:39:ae:20:69:24:b0:af:45:85:a1:4e:92:
bc:d3:6c:cb:90:60:ca:c8:04:8b:e4:eb:ad:96:8f:
dd:a5:75:90:0d:4a:42:b1:22:e7:4b:9c:55:77:f8:
9e:62:bc:eb:8e:06:65:78:d8:d7:7c:64:3c:28:8f:
0a:2b:0e:77:46:59:0e:48:6f:34:ac:ab:48:49:80:
28:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:04:BE:1C:BA:CC:27:04:04:13:0D:C5:86:3C:C8:E5:D9:66:CD:72
X509v3 Authority Key Identifier:
keyid:B1:42:7B:DC:D4:7C:78:43:1F:66:2A:08:58:90:05:AC:B5:0B:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUJ73NR8eEMfZioIWJAFrLULk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5d:c3:1a:0c:a0:76:ef:d0:3e:d7:0c:9f:da:88:73:7f:0d:
ef:29:d4:e8:47:b4:94:3e:80:fd:52:d2:24:4b:61:c7:85:a5:
db:01:b1:1d:47:86:51:bc:c5:f3:2f:f8:06:3c:61:12:ae:34:
ec:3b:19:a4:d9:1a:45:0c:9c:c2:85:db:dd:ac:a2:c3:7d:06:
d0:77:08:69:2c:e9:3a:9d:41:27:73:ba:7a:ff:ae:f5:62:8c:
7a:53:80:e1:6f:05:3f:3a:f9:8b:ac:ad:a4:82:fb:c7:eb:1f:
2a:0f:6b:41:8e:a8:72:3c:1f:e3:87:8d:63:41:ec:c0:ea:88:
1c:6e:1b:3a:ec:e3:65:f2:51:c6:f1:b0:35:2e:31:d6:f0:33:
6f:d9:0e:15:1a:98:a1:f0:d2:10:30:54:c3:d2:38:c9:85:66:
81:25:35:7a:4f:90:4b:f8:74:77:e9:30:19:e7:0a:10:25:e3:
2c:aa:fa:c3:7c:03:be:31:6c:e5:55:49:96:3c:70:d0:21:a3:
7d:7a:eb:37:42:be:0f:39:bc:36:d4:54:12:06:c4:fb:6e:14:
f2:81:2d:75:eb:e2:a8:1c:3c:f9:58:4a:5c:74:f3:f0:9b:91:
3e:51:c4:2b:1c:89:d7:cd:91:74:cb:d7:25:7c:e5:51:1a:5a:
c0:ce:8e:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTfo8YWudQUZGMIrrAH3CMaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDI3YmRjZDQ3Yzc4NDMxZjY2MmEwODU4OTAwNWFjYjUw
YjkzNDEwHhcNMjUwMjA3MDkwMDM5WhcNMjUwMjA4MDkwMDM5WjAzMTEwLwYDVQQD
Eyg3MDA0YmUxY2JhY2MyNzA0MDQxMzBkYzU4NjNjYzhlNWQ5NjZjZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NZkq6FPLwAWKklzXsNlpMl9YPGe
aYANMEvVlxiL3jMhPJO3nJkUJ7w9dEXMfRiYxzZh8mI/HoqXUc7h3ZTuz+6guerA
m+kIeK2Gh5errOT0r/RW34ZoUTDnSmaOAs8Eik9A5kUL90m/uzoBBeEcdMbsOnQK
cOZoXqqiri9UIRYNv3KF97NeUSBcANhM0K2RRHBCdmlg5PwfGsuGzokfHt3pdq7y
u458t+E/W2KSxMnRUUIVnlU5riBpJLCvRYWhTpK802zLkGDKyASL5Outlo/dpXWQ
DUpCsSLnS5xVd/ieYrzrjgZleNjXfGQ8KI8KKw53RlkOSG80rKtISYAo6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAEvhy6zCcEBBMNxYY8yOXZZs1yMB8GA1UdIwQY
MBaAFLFCe9zUfHhDH2YqCFiQBay1C5NBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VKNzNOUjhlRU1mWmlvSVdKQUZyTFVMazBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMGE3NjctN2I0MS00NjNiLWE2Yzkt
NWZjOGU2MzI3ODg5LzEvc1VKNzNOUjhlRU1mWmlvSVdKQUZyTFVMazBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yMGE3NjctN2I0MS00NjNiLWE2YzktNWZjOGU2MzI3ODg5
LzEvc1VKNzNOUjhlRU1mWmlvSVdKQUZyTFVMazBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANl3DGgyg
du/QPtcMn9qIc38N7ynU6Ee0lD6A/VLSJEthx4Wl2wGxHUeGUbzF8y/4BjxhEq40
7DsZpNkaRQycwoXb3ayiw30G0HcIaSzpOp1BJ3O6ev+u9WKMelOA4W8FPzr5i6yt
pIL7x+sfKg9rQY6ocjwf44eNY0HswOqIHG4bOuzjZfJRxvGwNS4x1vAzb9kOFRqY
ofDSEDBUw9I4yYVmgSU1ek+QS/h0d+kwGecKECXjLKr6w3wDvjFs5VVJljxw0CGj
fXrrN0K+Dzm8NtRUEgbE+24U8oEtdeviqBw8+VhKXHTz8JuRPlHEKxyJ182RdMvX
JXzlURpawM6ORQ==
-----END CERTIFICATE-----
Generated at Sun May 11 06:18:42 2025 by rpki-client