Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
File: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft (raw, json)
Hash identifier: bC+dgqPF5IndKPiYua4R/tPFjLoJHIsA+Z4fBzlvFY4=
Subject key identifier: 32:35:91:C3:5D:E7:65:21:62:95:68:C5:05:C1:0B:AE:C3:DE:6F:58
Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
Certificate issuer: /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Certificate serial: 0194BBCE4E3D731CAC5398E224ED8985D741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
Manifest number: 0332
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: 1YxjtUV0VxQ7FeeJoaX779GpS0I.roa (hash: m2jgH3Z5mBIhIUEsf+e/YJdKvhtB8ZzBEJ1TlZLrc88=)
2: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl (hash: GE3J9jF0tcZf86VNhVaCl30wU6iNIUADFrHkKSBTaJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4e:3d:73:1c:ac:53:98:e2:24:ed:89:85:d7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=323591c35de76521629568c505c10baec3de6f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:e3:36:7f:3e:e2:3c:5f:d5:40:ba:10:27:
1f:f2:fc:88:cb:de:75:20:12:73:f3:e5:2f:94:89:
f3:29:4d:ef:eb:1b:fc:95:04:3f:09:03:c7:11:67:
52:f2:bc:a2:ff:f6:c2:0c:7a:dd:0b:be:dd:a7:55:
e1:30:9d:d4:3d:3c:46:ef:44:f3:a0:e4:67:4e:01:
2d:61:2a:e6:43:65:5e:ef:44:36:19:2b:ed:2a:13:
74:29:79:78:48:f8:1b:9b:8f:dc:87:3d:b9:78:fd:
3b:72:b3:12:93:14:eb:d5:6e:a7:81:80:c6:d4:f1:
83:ac:2a:44:f1:dc:4f:16:56:55:24:7c:94:93:e8:
be:e3:a2:23:b7:43:48:6d:b4:39:d1:23:00:4f:d7:
89:6c:74:af:87:90:ff:2a:bd:f5:6a:70:47:a8:0f:
80:eb:07:f0:ee:42:b1:7e:97:79:c6:63:c3:bd:61:
a9:89:2f:ea:58:aa:4c:9c:7e:31:5e:5f:e7:7c:a6:
53:29:17:c5:a6:03:c9:b9:47:43:a2:14:6b:c6:9c:
ef:07:a2:f1:57:c1:ce:dc:51:79:7d:b5:8e:39:34:
5b:ee:4a:f7:10:4f:94:fc:0f:7f:e4:8f:ff:33:e7:
d4:d5:a2:dd:9d:16:77:4f:3d:a2:41:a5:4d:d9:44:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:35:91:C3:5D:E7:65:21:62:95:68:C5:05:C1:0B:AE:C3:DE:6F:58
X509v3 Authority Key Identifier:
keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6e:17:d5:1a:33:53:5c:e1:dc:6d:33:67:80:3b:75:b2:69:
db:c7:0b:a1:a9:94:e8:49:ce:4a:b9:9b:a0:68:10:3f:bb:4b:
2b:e7:ce:34:f2:ce:59:71:e1:6e:bd:b1:b6:79:f1:0c:a7:fa:
0c:7d:79:1d:8f:de:39:05:59:a6:74:18:c1:d2:99:25:a9:1b:
4f:38:5d:1f:26:9f:4e:85:93:87:59:7a:1d:41:10:03:b6:36:
89:4d:74:64:65:a5:bf:c9:17:32:f9:21:e7:8f:98:3b:42:62:
54:fc:0f:c0:fa:14:48:ff:0e:20:ef:99:e6:d5:c9:76:ec:1e:
05:10:3b:bd:1d:b3:43:bd:ef:ea:fc:3f:5f:7a:4e:92:de:30:
c6:b8:3e:c5:65:a2:a1:c8:d3:be:fb:8b:e8:68:4d:e3:36:84:
c8:f2:01:da:d3:57:b4:7e:71:ef:4e:12:5c:6a:a5:91:a0:d0:
77:56:ba:17:b7:8c:6f:88:75:69:d3:6f:17:68:65:79:88:ca:
46:2c:0d:4e:ab:fb:3b:39:56:4e:8d:aa:0b:22:c9:d6:03:5f:
7d:31:02:13:9a:68:f7:c1:fa:35:80:dd:31:24:e9:6b:5a:75:
3d:01:9d:19:ad:b1:28:87:e1:17:3f:12:58:ac:bd:5a:ce:ad:
3f:03:5c:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zk49cxysU5jiJO2JhddBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1M2ZkOWU2OWQ3ZDFmMmRkYzI2NzA5MTYyNjE5MGNlYWE4
NWNmYzIwHhcNMjUwMTMxMTAwMDQ3WhcNMjUwMjAxMTAwMDQ3WjAzMTEwLwYDVQQD
EygzMjM1OTFjMzVkZTc2NTIxNjI5NTY4YzUwNWMxMGJhZWMzZGU2ZjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMnjNn8+4jxf1UC6ECcf8vyIy951
IBJz8+UvlInzKU3v6xv8lQQ/CQPHEWdS8ryi//bCDHrdC77dp1XhMJ3UPTxG70Tz
oORnTgEtYSrmQ2Ve70Q2GSvtKhN0KXl4SPgbm4/chz25eP07crMSkxTr1W6ngYDG
1PGDrCpE8dxPFlZVJHyUk+i+46Ijt0NIbbQ50SMAT9eJbHSvh5D/Kr31anBHqA+A
6wfw7kKxfpd5xmPDvWGpiS/qWKpMnH4xXl/nfKZTKRfFpgPJuUdDohRrxpzvB6Lx
V8HO3FF5fbWOOTRb7kr3EE+U/A9/5I//M+fU1aLdnRZ3Tz2iQaVN2UTBIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDI1kcNd52UhYpVoxQXBC67D3m9YMB8GA1UdIwQY
MBaAFPU/2eadfR8t3CZwkWJhkM6qhc/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hN2RiNGMtYzlmNi00ZTBjLWFhOTct
NGM4OTgwYjU4MTI2LzEvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9hN2RiNGMtYzlmNi00ZTBjLWFhOTctNGM4OTgwYjU4MTI2
LzEvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIm4X1Roz
U1zh3G0zZ4A7dbJp28cLoamU6EnOSrmboGgQP7tLK+fONPLOWXHhbr2xtnnxDKf6
DH15HY/eOQVZpnQYwdKZJakbTzhdHyafToWTh1l6HUEQA7Y2iU10ZGWlv8kXMvkh
54+YO0JiVPwPwPoUSP8OIO+Z5tXJduweBRA7vR2zQ73v6vw/X3pOkt4wxrg+xWWi
ocjTvvuL6GhN4zaEyPIB2tNXtH5x704SXGqlkaDQd1a6F7eMb4h1adNvF2hleYjK
RiwNTqv7OzlWTo2qCyLJ1gNffTECE5po98H6NYDdMSTpa1p1PQGdGa2xKIfhFz8S
WKy9Ws6tPwNcSA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:23 2025 by rpki-client