Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
File: SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft (raw, json)
Hash identifier: vBChgHDNhnQYIA/iANhqea8G/hWRwq2W11aOfhs0Oo4=
Subject key identifier: FA:77:C2:8A:7D:EB:7A:23:E7:5A:76:2E:32:F0:61:52:95:63:4C:E7
Authority key identifier: 48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
Certificate issuer: /CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Certificate serial: 01962E99563D11742BF565FC34E811FB2A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
Manifest number: 019B
Signing time: Sun 13 Apr 2025 10:02:03 +0000
Manifest this update: Sun 13 Apr 2025 10:02:03 +0000
Manifest next update: Mon 14 Apr 2025 10:02:03 +0000
Files and hashes: 1: QFSVeDq1epR2B-cHpjlozBO3ocI.roa (hash: iTCal74oQdwW9uQJuhQCWg6av2cdFSN2Hzxn0oSQ9UI=)
2: SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl (hash: 80i0/8xcv7e5xkF0Qigtp774ujX6GtZjiysN5ivSboI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:56:3d:11:74:2b:f5:65:fc:34:e8:11:fb:2a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Validity
Not Before: Apr 13 10:02:03 2025 GMT
Not After : Apr 14 10:02:03 2025 GMT
Subject: CN=fa77c28a7deb7a23e75a762e32f0615295634ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:6c:37:f5:63:b3:fb:01:76:55:42:1a:20:
db:73:18:6d:7e:15:35:66:85:8f:28:f9:67:48:99:
cc:13:04:a1:4c:10:74:26:7f:37:d7:55:3c:04:3b:
b2:1f:41:fa:57:f3:12:a2:57:42:93:4e:23:ce:de:
18:7e:fd:bb:5e:0e:89:32:68:df:44:d2:ee:97:62:
4f:e0:03:c7:36:42:7d:1e:67:37:ba:73:af:45:db:
39:a6:d9:4a:7f:3f:a6:44:a1:ef:e2:35:1a:af:fc:
4e:f1:db:91:9f:78:17:77:66:11:6a:38:89:d3:27:
77:c5:1f:d3:ec:08:83:4d:9c:1e:47:29:3e:79:aa:
53:46:45:63:a8:b1:6e:ad:03:bc:1d:08:36:bc:8d:
4d:9c:27:df:c6:62:c1:09:11:17:d3:80:71:0e:54:
bd:cb:5d:37:65:eb:b1:f3:0b:44:78:68:5c:ca:7b:
ad:1e:9e:a9:90:90:4f:0d:ee:e8:8f:48:07:cd:ea:
e5:55:ed:30:73:ec:52:af:99:db:78:ce:57:6e:9b:
44:4d:68:24:b2:ef:15:7c:6a:ce:73:25:0b:cb:a3:
b0:43:99:ee:26:3b:2e:93:5d:e7:a3:a2:c9:62:1a:
97:4c:3e:07:e4:ef:fe:49:21:73:a0:6c:ad:9f:da:
66:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:77:C2:8A:7D:EB:7A:23:E7:5A:76:2E:32:F0:61:52:95:63:4C:E7
X509v3 Authority Key Identifier:
keyid:48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:7c:99:08:49:25:84:43:b2:52:7d:3a:9e:8a:7e:06:27:9f:
4c:c9:51:9d:15:16:4e:7d:e0:00:66:86:bd:d0:db:89:47:74:
ea:c9:41:4e:9f:6c:a1:90:c0:be:67:f2:7c:5d:c7:5d:df:58:
7c:14:7c:ba:3c:13:31:16:7a:47:15:d4:ba:08:3f:14:f5:4b:
68:87:ac:7d:3c:d9:4a:af:2e:7b:ab:94:02:da:cb:ae:78:71:
6d:fa:ed:a7:cc:a8:53:fe:66:73:20:57:2f:21:3a:b5:6b:49:
18:cc:fe:a5:a1:14:d8:85:20:5c:b7:32:84:e0:32:88:45:39:
86:84:d5:f4:93:d8:4e:dc:8b:ef:dc:d2:27:b6:5c:04:49:32:
71:92:4f:f2:9d:5c:a5:70:18:f1:c1:a8:e7:1b:c8:d5:1c:82:
95:1a:3f:ba:27:ac:8c:58:c7:78:9a:df:81:9f:4e:19:cd:e0:
44:7e:66:8c:c6:4e:d2:c4:53:f4:82:48:b7:29:19:28:b2:26:
5f:bc:d1:5c:c1:96:ea:c7:01:03:cd:84:7e:bc:2a:62:aa:eb:
c4:84:23:ba:4a:09:45:fd:64:b6:08:e4:64:c7:c8:ea:42:8d:
0b:25:84:8b:33:eb:d9:9a:76:c9:76:6a:23:53:37:eb:c0:34:
e4:35:4d:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumVY9EXQr9WX8NOgR+yoMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4M2ZiMzdkMWZiMGNjZDIxNmRhZGVjNDAwMDk1NjFhODQ0
YWE4M2IwHhcNMjUwNDEzMTAwMjAzWhcNMjUwNDE0MTAwMjAzWjAzMTEwLwYDVQQD
EyhmYTc3YzI4YTdkZWI3YTIzZTc1YTc2MmUzMmYwNjE1Mjk1NjM0Y2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLFsN/Vjs/sBdlVCGiDbcxhtfhU1
ZoWPKPlnSJnMEwShTBB0Jn8311U8BDuyH0H6V/MSoldCk04jzt4Yfv27Xg6JMmjf
RNLul2JP4APHNkJ9Hmc3unOvRds5ptlKfz+mRKHv4jUar/xO8duRn3gXd2YRajiJ
0yd3xR/T7AiDTZweRyk+eapTRkVjqLFurQO8HQg2vI1NnCffxmLBCREX04BxDlS9
y103Zeux8wtEeGhcynutHp6pkJBPDe7oj0gHzerlVe0wc+xSr5nbeM5XbptETWgk
su8VfGrOcyULy6OwQ5nuJjsuk13no6LJYhqXTD4H5O/+SSFzoGytn9pmMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPp3wop963oj51p2LjLwYVKVY0znMB8GA1UdIwQY
MBaAFEg/s30fsMzSFtrexAAJVhqESqg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0QtemZSLXd6TklXMnQ3RUFBbFdHb1JLcURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hMWViNjYtY2M4Ny00YTkwLTljNWQt
ZWUzY2E3NGJiYjc5LzEvU0QtemZSLXd6TklXMnQ3RUFBbFdHb1JLcURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hMWViNjYtY2M4Ny00YTkwLTljNWQtZWUzY2E3NGJiYjc5
LzEvU0QtemZSLXd6TklXMnQ3RUFBbFdHb1JLcURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknyZCEkl
hEOyUn06nop+BiefTMlRnRUWTn3gAGaGvdDbiUd06slBTp9soZDAvmfyfF3HXd9Y
fBR8ujwTMRZ6RxXUugg/FPVLaIesfTzZSq8ue6uUAtrLrnhxbfrtp8yoU/5mcyBX
LyE6tWtJGMz+paEU2IUgXLcyhOAyiEU5hoTV9JPYTtyL79zSJ7ZcBEkycZJP8p1c
pXAY8cGo5xvI1RyClRo/uiesjFjHeJrfgZ9OGc3gRH5mjMZO0sRT9IJItykZKLIm
X7zRXMGW6scBA82EfrwqYqrrxIQjukoJRf1ktgjkZMfI6kKNCyWEizPr2Zp2yXZq
I1M368A05DVN0Q==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net