Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.mft
File: so7x9PiCePTfGec-M4HOzXjgacE.mft (raw, json)
Hash identifier: MMsUzhjMdqaipcQkbbvx1I86dvt87T8l4YMZ3IP4RaQ=
Subject key identifier: 4F:F4:0D:C8:23:D6:A1:36:17:CE:28:6A:86:01:35:C3:94:66:4D:E3
Authority key identifier: B2:8E:F1:F4:F8:82:78:F4:DF:19:E7:3E:33:81:CE:CD:78:E0:69:C1
Certificate issuer: /CN=b28ef1f4f88278f4df19e73e3381cecd78e069c1
Certificate serial: 01962F7479EA5AA0383321A1C1C132CE5C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/so7x9PiCePTfGec-M4HOzXjgacE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.mft
Manifest number: 0193
Signing time: Sun 13 Apr 2025 14:01:24 +0000
Manifest this update: Sun 13 Apr 2025 14:01:24 +0000
Manifest next update: Mon 14 Apr 2025 14:01:24 +0000
Files and hashes: 1: ZWC54UPrMHyZ6gth2IDDnRYsMDY.roa (hash: 4Yk1QA2QugshfW9geeysUTQ4Sub4Aja/bv1m3JJnrLU=)
2: so7x9PiCePTfGec-M4HOzXjgacE.crl (hash: zZnOt1ifKoM2hjBfilY2tHN2yef35TtuDXdxO8Bjveo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:79:ea:5a:a0:38:33:21:a1:c1:c1:32:ce:5c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b28ef1f4f88278f4df19e73e3381cecd78e069c1
Validity
Not Before: Apr 13 14:01:24 2025 GMT
Not After : Apr 14 14:01:24 2025 GMT
Subject: CN=4ff40dc823d6a13617ce286a860135c394664de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:ec:c5:ad:d2:78:e7:87:34:4f:43:53:dc:
5e:5d:82:dc:e2:03:ea:e6:f9:dc:02:53:2f:a7:c2:
bf:a0:cd:67:85:17:50:63:16:a7:7f:6a:e4:94:24:
5a:46:1c:a9:22:d9:e1:df:b4:c8:64:6e:18:88:92:
27:0f:34:f1:76:5b:58:f8:56:b7:bc:5a:d7:39:c5:
51:3f:4d:e9:5c:db:b8:59:d9:29:c9:87:3f:9c:91:
05:20:c6:af:52:a3:bc:ad:8e:aa:f3:1f:45:53:63:
03:71:c8:ed:52:96:3f:27:2b:7c:07:c7:6a:84:ac:
d3:90:30:90:8a:2b:f0:11:64:3a:5d:94:1b:53:7c:
b2:a2:2a:50:fb:f0:b2:7d:3e:20:74:ae:0b:ce:7b:
ae:62:22:28:3d:37:b6:b8:e7:46:c6:bd:ab:f1:5e:
27:ff:f8:22:5c:61:68:ad:9d:4e:84:fa:70:d3:b6:
a1:c0:fe:14:21:2e:94:e2:d9:79:fe:66:26:db:46:
da:34:b1:c9:d2:8b:b4:94:80:4e:bc:67:4a:25:0e:
e8:2f:6f:70:81:0f:ad:52:46:7e:b7:db:10:2e:8f:
d9:8a:8f:eb:88:03:8b:01:0b:00:56:7f:17:7c:6a:
1e:ea:08:e6:b1:b7:b7:c8:d4:6f:77:b1:a1:0f:ff:
6f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F4:0D:C8:23:D6:A1:36:17:CE:28:6A:86:01:35:C3:94:66:4D:E3
X509v3 Authority Key Identifier:
keyid:B2:8E:F1:F4:F8:82:78:F4:DF:19:E7:3E:33:81:CE:CD:78:E0:69:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/so7x9PiCePTfGec-M4HOzXjgacE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:fe:3e:83:d9:9b:a1:e5:45:6a:9b:9d:28:5a:95:a0:db:72:
34:c4:59:d1:25:c3:4f:ca:9b:fb:d1:09:68:9e:5e:fe:b4:f7:
04:34:7a:68:68:52:3e:eb:e4:7b:d7:30:38:62:52:7e:0d:c4:
2e:5a:8b:72:4c:5b:c3:c8:a3:bc:86:4c:cf:e2:31:04:93:9a:
05:e4:04:54:65:a1:d5:1c:a9:87:6a:8a:9e:35:cb:ad:8a:4a:
50:6c:2f:54:05:69:23:e4:2b:cd:cf:44:2e:ad:c4:95:f7:66:
08:bf:7a:67:9a:d3:15:b6:e1:a3:ab:88:ae:77:76:a7:e8:ab:
e0:fc:bd:47:22:86:f5:94:92:c5:36:d5:67:16:8b:55:26:dd:
06:b7:cb:e7:47:ba:3e:5f:a6:81:d8:ed:f4:d9:87:c0:4e:2f:
d0:63:d5:57:94:06:bb:f1:ad:3f:b1:05:66:80:1e:82:5a:5f:
58:e7:29:30:10:d7:f9:b2:bf:22:63:22:1f:2b:1d:49:61:77:
35:aa:8b:6d:5f:33:70:58:7b:07:36:ed:85:27:c8:7f:ec:33:
c4:13:a8:11:a2:71:6c:e4:4d:14:13:92:4f:d5:4d:e1:d3:90:
bb:eb:2c:1f:29:67:61:57:4c:3c:13:67:aa:eb:35:e2:18:c5:
5c:77:a3:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdHnqWqA4MyGhwcEyzlwdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyOGVmMWY0Zjg4Mjc4ZjRkZjE5ZTczZTMzODFjZWNkNzhl
MDY5YzEwHhcNMjUwNDEzMTQwMTI0WhcNMjUwNDE0MTQwMTI0WjAzMTEwLwYDVQQD
Eyg0ZmY0MGRjODIzZDZhMTM2MTdjZTI4NmE4NjAxMzVjMzk0NjY0ZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9Hsxa3SeOeHNE9DU9xeXYLc4gPq
5vncAlMvp8K/oM1nhRdQYxanf2rklCRaRhypItnh37TIZG4YiJInDzTxdltY+Fa3
vFrXOcVRP03pXNu4WdkpyYc/nJEFIMavUqO8rY6q8x9FU2MDccjtUpY/Jyt8B8dq
hKzTkDCQiivwEWQ6XZQbU3yyoipQ+/CyfT4gdK4LznuuYiIoPTe2uOdGxr2r8V4n
//giXGForZ1OhPpw07ahwP4UIS6U4tl5/mYm20baNLHJ0ou0lIBOvGdKJQ7oL29w
gQ+tUkZ+t9sQLo/Zio/riAOLAQsAVn8XfGoe6gjmsbe3yNRvd7GhD/9v5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/0Dcgj1qE2F84oaoYBNcOUZk3jMB8GA1UdIwQY
MBaAFLKO8fT4gnj03xnnPjOBzs144GnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc283eDlQaUNlUFRmR2VjLU00SE96WGpnYWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8xZjA1MWItZTczNS00OWI4LWJjNmQt
OWVmMGE1OTkyN2IxLzEvc283eDlQaUNlUFRmR2VjLU00SE96WGpnYWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8xZjA1MWItZTczNS00OWI4LWJjNmQtOWVmMGE1OTkyN2Ix
LzEvc283eDlQaUNlUFRmR2VjLU00SE96WGpnYWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv/4+g9mb
oeVFapudKFqVoNtyNMRZ0SXDT8qb+9EJaJ5e/rT3BDR6aGhSPuvke9cwOGJSfg3E
LlqLckxbw8ijvIZMz+IxBJOaBeQEVGWh1Ryph2qKnjXLrYpKUGwvVAVpI+Qrzc9E
Lq3ElfdmCL96Z5rTFbbho6uIrnd2p+ir4Py9RyKG9ZSSxTbVZxaLVSbdBrfL50e6
Pl+mgdjt9NmHwE4v0GPVV5QGu/GtP7EFZoAeglpfWOcpMBDX+bK/ImMiHysdSWF3
NaqLbV8zcFh7BzbthSfIf+wzxBOoEaJxbORNFBOST9VN4dOQu+ssHylnYVdMPBNn
qus14hjFXHejng==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net