Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
File: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft (raw, json)
Hash identifier: RR9lJhKjiRd2rQ0LMf9OwZh6Itt5u0MEyjF+N2VMGZ0=
Subject key identifier: AE:8B:64:96:8A:42:29:A3:36:8A:94:2A:8F:80:F3:B1:7E:CD:6D:90
Authority key identifier: F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
Certificate issuer: /CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Certificate serial: 0194BC050F11D729E527A805A0E5B6A7A51A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
Manifest number: 095E
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl (hash: 35YrpBqeLctFKqBiayahblmT6arBuArhKlRCYyxRlbc=)
2: BfiNOagjub-Q5UhmAEUO1BegvlM.roa (hash: z7UGbr4hGM96gAGkSVL5gy0uNjYzSjUeofOhu3xqo/k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0f:11:d7:29:e5:27:a8:05:a0:e5:b6:a7:a5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=ae8b64968a4229a3368a942a8f80f3b17ecd6d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:5c:3a:93:ba:d0:3c:fc:78:6f:ec:04:d1:
01:31:e3:28:79:0a:50:63:c5:ac:1e:1b:9b:70:94:
ba:8d:d0:5e:41:a2:6f:7f:0a:2f:0b:a1:35:4f:59:
67:e3:b2:ea:87:02:b6:d0:79:6a:bf:8b:df:eb:2c:
32:c9:9d:d1:d3:c2:6f:30:25:3a:9c:6f:80:22:6c:
f2:90:df:f3:f4:ff:cc:90:a9:b5:86:d8:77:26:77:
33:5d:f7:0a:18:7b:4b:30:1b:52:52:3f:52:66:57:
79:31:70:bd:85:82:0f:c2:98:2a:74:88:25:e8:ba:
10:05:28:a3:e7:bb:e4:0d:fc:5f:35:dd:81:f5:7c:
81:22:bb:e4:1f:a2:49:2f:dc:ce:73:df:f4:69:71:
56:72:db:59:52:36:de:0a:bc:a7:84:b0:77:86:e3:
9a:f4:83:90:c1:b7:c7:61:51:0c:9f:8b:c2:0c:36:
fd:a0:7c:8c:9e:af:88:26:69:a5:d0:db:f4:5f:57:
e3:d9:c0:6a:4c:cc:c1:3f:a1:04:ba:ed:42:5c:fe:
e9:46:c7:63:ab:ac:06:d9:a3:87:16:34:51:da:8a:
e2:90:6e:32:f1:a5:20:87:aa:bf:74:85:bc:1b:dc:
2c:d5:9f:8f:3e:2a:dd:dd:2e:d9:ff:b4:82:d1:b4:
a1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8B:64:96:8A:42:29:A3:36:8A:94:2A:8F:80:F3:B1:7E:CD:6D:90
X509v3 Authority Key Identifier:
keyid:F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b5:ae:a5:e3:f8:a8:c9:87:fb:c9:75:d4:e8:73:fb:67:0e:
95:5f:3e:7f:4e:6d:64:fe:ac:ba:03:80:a7:5b:00:ad:48:23:
76:8b:42:75:ae:05:fd:81:3b:e9:6d:3f:aa:84:4f:5e:db:2d:
8f:44:11:ed:af:7a:0a:29:73:ae:ec:26:9c:cd:8b:75:ac:d6:
7d:dc:be:ee:af:da:2c:36:de:43:43:2f:43:e6:ce:1e:36:e5:
c6:0e:7a:c9:82:8f:dd:59:88:bc:f0:dd:f7:b4:65:45:ad:d5:
29:b8:a4:7b:6d:1b:f0:3d:95:7a:2b:89:eb:a7:76:56:6e:c3:
b4:ce:87:e4:18:a8:48:f2:bf:a9:cd:78:ea:7d:c2:01:f0:e3:
33:c9:98:46:96:5f:6e:fe:12:80:60:2b:39:2f:e4:99:2d:c3:
cc:a2:dd:fa:c0:b3:f2:fb:d5:00:87:1d:06:97:94:b9:ea:0a:
b5:92:e7:56:36:10:97:87:2c:3c:06:19:2d:32:ad:43:7f:34:
d8:d5:aa:d6:fe:6c:50:fd:b2:f9:0e:2b:e8:af:31:11:64:11:
67:a7:9d:13:2a:7e:d8:a3:b9:cc:ae:d9:a7:01:5b:07:f5:6b:
2f:47:70:1a:3b:ac:25:46:29:a6:7d:fc:3b:cc:1a:21:d5:cf:
c7:62:20:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQ8R1ynlJ6gFoOW2p6UaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MmQwY2FkMGVhZWQxYTYxZjQ3OGZiMDkxOWM3YTQzMjI3
MjQ2OTUwHhcNMjUwMTMxMTEwMDM1WhcNMjUwMjAxMTEwMDM1WjAzMTEwLwYDVQQD
EyhhZThiNjQ5NjhhNDIyOWEzMzY4YTk0MmE4ZjgwZjNiMTdlY2Q2ZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5RcOpO60Dz8eG/sBNEBMeMoeQpQ
Y8WsHhubcJS6jdBeQaJvfwovC6E1T1ln47LqhwK20Hlqv4vf6ywyyZ3R08JvMCU6
nG+AImzykN/z9P/MkKm1hth3JnczXfcKGHtLMBtSUj9SZld5MXC9hYIPwpgqdIgl
6LoQBSij57vkDfxfNd2B9XyBIrvkH6JJL9zOc9/0aXFWcttZUjbeCrynhLB3huOa
9IOQwbfHYVEMn4vCDDb9oHyMnq+IJmml0Nv0X1fj2cBqTMzBP6EEuu1CXP7pRsdj
q6wG2aOHFjRR2orikG4y8aUgh6q/dIW8G9ws1Z+PPird3S7Z/7SC0bShGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6LZJaKQimjNoqUKo+A87F+zW2QMB8GA1UdIwQY
MBaAFPQtDK0OrtGmH0ePsJGcekMickaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUMwTXJRNnUwYVlmUjQtd2taeDZReUp5UnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kZmY0ZDAtMWQwYS00OTUxLThiMjct
N2Y3Mzk0YmU4Y2U0LzEvOUMwTXJRNnUwYVlmUjQtd2taeDZReUp5UnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9kZmY0ZDAtMWQwYS00OTUxLThiMjctN2Y3Mzk0YmU4Y2U0
LzEvOUMwTXJRNnUwYVlmUjQtd2taeDZReUp5UnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbWupeP4
qMmH+8l11Ohz+2cOlV8+f05tZP6sugOAp1sArUgjdotCda4F/YE76W0/qoRPXtst
j0QR7a96CilzruwmnM2LdazWfdy+7q/aLDbeQ0MvQ+bOHjblxg56yYKP3VmIvPDd
97RlRa3VKbike20b8D2VeiuJ66d2Vm7DtM6H5BioSPK/qc146n3CAfDjM8mYRpZf
bv4SgGArOS/kmS3DzKLd+sCz8vvVAIcdBpeUueoKtZLnVjYQl4csPAYZLTKtQ380
2NWq1v5sUP2y+Q4r6K8xEWQRZ6edEyp+2KO5zK7ZpwFbB/VrL0dwGjusJUYppn38
O8waIdXPx2IgBQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:05 2025 by rpki-client