Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
File: CH9Zw24i0fkDhPQdpgcFrHTXec4.mft (raw, json)
Hash identifier: c99j1+k6CiQhigSJLkBgWtFn0rKYbv5grNblCiGm9zw=
Subject key identifier: 52:0C:F9:8A:CB:E8:13:86:E8:57:25:97:6A:50:08:38:42:EB:98:C9
Authority key identifier: 08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
Certificate issuer: /CN=087f59c36e22d1f90384f41da60705ac74d779ce
Certificate serial: 0194BC3C9958936C6A62F6801464479C6B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
Manifest number: 0C29
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: CH9Zw24i0fkDhPQdpgcFrHTXec4.crl (hash: /P4l41KlvXI3xGo9W4+SLwTvdxiZJYuPQgpFLJv8Vns=)
2: giN_6FdawPpa4U_l8L6GI6SQrxU.roa (hash: RqHHQJIozmk50JvefJWS+0ODDB8lkETbKjm2gNuR+7o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:99:58:93:6c:6a:62:f6:80:14:64:47:9c:6b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087f59c36e22d1f90384f41da60705ac74d779ce
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=520cf98acbe81386e85725976a50083842eb98c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5b:3f:a5:1a:70:ed:af:e3:35:5f:3b:50:a8:
12:9f:9c:64:fd:79:0a:ba:47:38:58:1c:45:25:64:
ac:ec:6a:f9:76:d3:a6:a5:1c:65:29:12:ea:98:4f:
07:99:80:9f:37:e5:c5:70:f5:32:2b:42:a8:6b:50:
52:c0:7e:0d:e9:5b:28:67:1e:cb:b2:dd:93:dd:d4:
92:2d:b9:30:5a:2e:3a:1f:96:56:bc:e9:a3:2d:82:
08:87:2f:48:87:4a:7e:02:9c:f5:4d:4c:47:39:d5:
79:89:aa:ba:54:a1:0a:81:29:f8:1e:4a:6b:5f:16:
f6:a0:2c:cf:ae:e9:56:b2:5a:d7:44:a0:a5:e7:df:
49:c5:fe:cf:67:23:7b:2b:bf:bb:90:22:20:76:69:
95:c9:f4:d6:f7:fc:b2:8b:ae:c1:ea:c6:eb:f8:fd:
86:86:90:f3:d8:4c:5e:44:31:f8:4e:fc:cd:05:ac:
09:5a:88:a8:89:6e:c6:4d:20:5b:52:28:64:a5:8d:
ff:a5:fa:cc:60:4c:c2:38:84:17:1a:f9:58:19:f2:
8b:5b:86:38:eb:61:94:6e:34:2a:ac:63:40:23:9c:
e6:80:3e:20:df:00:6f:68:60:fd:e7:9b:95:99:b1:
f0:9a:cd:a6:80:ec:18:3a:31:1e:46:b5:56:ba:aa:
8b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0C:F9:8A:CB:E8:13:86:E8:57:25:97:6A:50:08:38:42:EB:98:C9
X509v3 Authority Key Identifier:
keyid:08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a2:3d:b8:0a:c8:cb:79:87:b0:7f:db:9d:e8:0d:4f:95:e7:
8b:3a:59:61:ca:2a:20:66:7d:2c:27:fb:7d:be:c3:58:de:5b:
f2:25:1c:43:f4:99:42:0c:6c:ec:e7:f6:80:3f:a8:82:5d:9e:
b1:c9:bd:a2:a6:05:2d:eb:b8:d4:2c:fc:c4:29:a2:28:3e:8b:
51:36:0f:aa:b8:18:c3:41:6e:10:4c:0d:5e:64:48:69:0c:34:
df:02:9c:ae:fc:f6:91:83:31:1f:bd:ca:43:e7:22:84:39:94:
e4:fa:bd:f0:d2:d7:28:9c:96:30:82:20:f5:09:91:5e:0e:50:
81:02:e1:4c:26:5f:a2:22:68:58:84:2a:9b:6e:56:79:8c:1e:
00:d9:71:3c:0b:d3:7c:61:6d:0a:a9:9d:27:91:b5:bd:89:a1:
35:af:9f:8b:c4:38:a4:78:4b:0b:6a:61:74:d8:a7:d5:b6:c1:
29:91:f3:b1:bc:1a:1a:ab:35:c2:33:7a:ec:07:6c:93:60:86:
6a:51:93:e7:1b:7a:d1:5b:9e:92:36:4f:8e:b3:97:85:8c:c2:
e8:fc:6e:f2:6c:09:15:7f:61:1c:3e:1c:f3:6b:de:80:05:9c:
8b:8e:a9:7e:fc:37:1f:5b:14:90:01:9f:25:ac:03:1f:ad:5a:
8b:dc:ba:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJlYk2xqYvaAFGRHnGuXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4N2Y1OWMzNmUyMmQxZjkwMzg0ZjQxZGE2MDcwNWFjNzRk
Nzc5Y2UwHhcNMjUwMTMxMTIwMTE1WhcNMjUwMjAxMTIwMTE1WjAzMTEwLwYDVQQD
Eyg1MjBjZjk4YWNiZTgxMzg2ZTg1NzI1OTc2YTUwMDgzODQyZWI5OGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Vs/pRpw7a/jNV87UKgSn5xk/XkK
ukc4WBxFJWSs7Gr5dtOmpRxlKRLqmE8HmYCfN+XFcPUyK0Koa1BSwH4N6VsoZx7L
st2T3dSSLbkwWi46H5ZWvOmjLYIIhy9Ih0p+Apz1TUxHOdV5iaq6VKEKgSn4Hkpr
Xxb2oCzPrulWslrXRKCl599Jxf7PZyN7K7+7kCIgdmmVyfTW9/yyi67B6sbr+P2G
hpDz2ExeRDH4TvzNBawJWoioiW7GTSBbUihkpY3/pfrMYEzCOIQXGvlYGfKLW4Y4
62GUbjQqrGNAI5zmgD4g3wBvaGD955uVmbHwms2mgOwYOjEeRrVWuqqLvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIM+YrL6BOG6Fcll2pQCDhC65jJMB8GA1UdIwQY
MBaAFAh/WcNuItH5A4T0HaYHBax013nOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNTkzMDItMTZjNy00OTI3LWJjYTgt
YzA0YmUwMjAzN2U4LzEvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNTkzMDItMTZjNy00OTI3LWJjYTgtYzA0YmUwMjAzN2U4
LzEvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKI9uArI
y3mHsH/bnegNT5XnizpZYcoqIGZ9LCf7fb7DWN5b8iUcQ/SZQgxs7Of2gD+ogl2e
scm9oqYFLeu41Cz8xCmiKD6LUTYPqrgYw0FuEEwNXmRIaQw03wKcrvz2kYMxH73K
Q+cihDmU5Pq98NLXKJyWMIIg9QmRXg5QgQLhTCZfoiJoWIQqm25WeYweANlxPAvT
fGFtCqmdJ5G1vYmhNa+fi8Q4pHhLC2phdNin1bbBKZHzsbwaGqs1wjN67Adsk2CG
alGT5xt60VuekjZPjrOXhYzC6Pxu8mwJFX9hHD4c82vegAWci46pfvw3H1sUkAGf
JawDH61ai9y6mA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:33 2025 by rpki-client