Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
File: mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft (raw, json)
Hash identifier: kI3ZPACCokeDfiBcSecalm0d+0CFK4VbDZRKD+9xF4I=
Subject key identifier: A7:B6:7C:39:75:1B:79:26:A8:F8:B8:C6:B2:46:45:DD:1A:A5:36:46
Authority key identifier: 99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
Certificate issuer: /CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Certificate serial: 0194BD4EB3A3A489579C2253250E61BCE3F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
Manifest number: 03FA
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: KKAdJZwlPOuvUmhtsSSfP_XfQ9w.roa (hash: Fim6YZSnH30vV92L/gdG+AOAxW50mQ7FyxjlaSpVQfU=)
2: mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl (hash: Lo2m5DypcuzizWPit7XMYxfvATeqQ+hm07Hv0K377o0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b3:a3:a4:89:57:9c:22:53:25:0e:61:bc:e3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=a7b67c39751b7926a8f8b8c6b24645dd1aa53646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:5a:40:31:7d:b2:b9:89:0e:a2:98:da:ff:
ff:46:65:cb:74:f0:e4:72:75:b7:b7:6d:96:27:c0:
cf:c4:eb:ff:9f:f6:e4:bb:2c:26:40:5c:b1:9e:10:
7c:6f:c4:18:0f:87:ba:57:d1:40:87:a4:d3:27:08:
4e:53:c2:ef:bd:ab:36:53:23:f2:79:d1:cb:32:57:
49:34:40:db:2f:3e:a9:c2:67:55:1c:4f:7d:a5:4b:
eb:6d:db:0b:52:0b:cf:59:21:cc:9e:d5:ba:de:9b:
56:71:55:0c:7a:b1:03:83:e8:d7:fa:9d:b2:77:16:
e3:c3:d7:65:cf:e6:5c:37:f5:68:cc:c4:45:50:75:
d3:15:41:df:ef:ba:13:14:7f:17:c7:90:3a:20:72:
22:05:dd:32:7d:9a:d4:b7:dc:36:46:77:04:86:1f:
1c:bd:72:ef:d5:a9:e3:f9:77:7b:aa:75:4b:da:4c:
b7:57:db:11:87:1e:7c:26:1f:02:a3:cd:cb:fa:14:
41:9f:29:ec:7f:91:fc:f6:f3:ad:d0:57:41:7b:f7:
63:f4:3f:10:07:b0:c9:c6:f4:13:c3:84:b0:ba:88:
8c:4b:f6:39:81:98:d5:9a:72:90:2f:43:37:3f:0a:
01:3c:95:a9:48:97:16:b2:d4:1a:06:bc:f6:99:d5:
34:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B6:7C:39:75:1B:79:26:A8:F8:B8:C6:B2:46:45:DD:1A:A5:36:46
X509v3 Authority Key Identifier:
keyid:99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:53:a5:db:32:11:da:91:46:21:03:f2:0f:14:d7:3b:b8:f2:
a4:f8:c6:9f:ce:1a:9e:13:81:81:71:fe:94:8b:1d:23:6f:ee:
00:3a:3e:e8:1b:43:37:0c:32:a8:f2:9e:ca:74:29:cd:8a:1d:
15:0d:e1:7e:b9:03:29:6c:58:5c:3f:99:5b:ef:8a:44:6d:30:
13:08:5c:e6:c4:bd:7d:cd:ab:84:bc:c5:d7:17:5e:3b:d0:5b:
25:f3:40:c9:bd:0f:8b:aa:97:04:75:d7:e1:a4:1e:63:ea:8d:
f3:71:73:74:fb:9a:81:c0:b7:35:db:ca:ef:84:04:1a:46:04:
8b:56:62:ff:a9:f0:a7:86:d1:19:47:c1:46:c4:ba:70:7e:16:
f8:a1:81:ed:37:14:1d:5a:69:3f:aa:2b:49:bc:29:a3:c2:a7:
85:fe:c1:66:ae:c3:64:84:51:7b:0f:07:da:23:d5:bd:17:ce:
72:66:f3:e0:2d:ac:83:f1:b4:ad:dd:09:0c:05:d6:fa:06:36:
70:8e:ee:ac:7a:ed:5c:5e:b9:7f:25:0a:f0:95:25:38:54:bb:
24:66:d7:ed:75:f3:5e:e1:88:e0:cd:1d:e0:c2:29:b9:1c:82:
07:d7:12:10:02:bc:25:54:f0:dd:a2:41:44:dd:6d:d3:4d:18:
36:a0:69:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TrOjpIlXnCJTJQ5hvOPxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZmY5N2Y1MTViMDgzZTMwYmM1MmQ4MWUxOTNkOGM4YmI3
ZmRmOGMwHhcNMjUwMTMxMTcwMDM4WhcNMjUwMjAxMTcwMDM4WjAzMTEwLwYDVQQD
EyhhN2I2N2MzOTc1MWI3OTI2YThmOGI4YzZiMjQ2NDVkZDFhYTUzNjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTdaQDF9srmJDqKY2v//RmXLdPDk
cnW3t22WJ8DPxOv/n/bkuywmQFyxnhB8b8QYD4e6V9FAh6TTJwhOU8Lvvas2UyPy
edHLMldJNEDbLz6pwmdVHE99pUvrbdsLUgvPWSHMntW63ptWcVUMerEDg+jX+p2y
dxbjw9dlz+ZcN/VozMRFUHXTFUHf77oTFH8Xx5A6IHIiBd0yfZrUt9w2RncEhh8c
vXLv1anj+Xd7qnVL2ky3V9sRhx58Jh8Co83L+hRBnynsf5H89vOt0FdBe/dj9D8Q
B7DJxvQTw4SwuoiMS/Y5gZjVmnKQL0M3PwoBPJWpSJcWstQaBrz2mdU0fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKe2fDl1G3kmqPi4xrJGRd0apTZGMB8GA1UdIwQY
MBaAFJn/l/UVsIPjC8UtgeGT2Mi7f9+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWYtWDlSV3dnLU1MeFMyQjRaUFl5THRfMzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNjMwNDQtYzc0Zi00YjY3LWIyNGIt
ZTEzNTJkNWFmYTBhLzEvbWYtWDlSV3dnLU1MeFMyQjRaUFl5THRfMzR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yNjMwNDQtYzc0Zi00YjY3LWIyNGItZTEzNTJkNWFmYTBh
LzEvbWYtWDlSV3dnLU1MeFMyQjRaUFl5THRfMzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFOl2zIR
2pFGIQPyDxTXO7jypPjGn84anhOBgXH+lIsdI2/uADo+6BtDNwwyqPKeynQpzYod
FQ3hfrkDKWxYXD+ZW++KRG0wEwhc5sS9fc2rhLzF1xdeO9BbJfNAyb0Pi6qXBHXX
4aQeY+qN83FzdPuagcC3NdvK74QEGkYEi1Zi/6nwp4bRGUfBRsS6cH4W+KGB7TcU
HVppP6orSbwpo8Knhf7BZq7DZIRRew8H2iPVvRfOcmbz4C2sg/G0rd0JDAXW+gY2
cI7urHrtXF65fyUK8JUlOFS7JGbX7XXzXuGI4M0d4MIpuRyCB9cSEAK8JVTw3aJB
RN1t000YNqBpCw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:52 2025 by rpki-client