Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: 98krZzr9Zy4oF0PH4g8c+A1oB4m934yJQ6yXBgRgv6Y=
Subject key identifier: C9:D9:C3:47:AB:C1:22:29:D6:59:9C:73:40:5A:5C:5C:CC:AC:84:0C
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 0194BC3CC85DF0D6BC34FFDCBBFBF7907C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 0793
Signing time: Fri 31 Jan 2025 12:01:27 +0000
Manifest this update: Fri 31 Jan 2025 12:01:27 +0000
Manifest next update: Sat 01 Feb 2025 12:01:27 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: dGQM9/PZUhHP9o/J+Z4jr6CLIad2LEXZBZ6WBtydcV0=)
2: vnQYA6POl1a8tK2ZzQU1CNh2rSU.roa (hash: cwo0eDB9nxSSyKe/qdMpdoKv9t3e96TKN+bq+LM4mpY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:c8:5d:f0:d6:bc:34:ff:dc:bb:fb:f7:90:7c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: Jan 31 12:01:27 2025 GMT
Not After : Feb 1 12:01:27 2025 GMT
Subject: CN=c9d9c347abc12229d6599c73405a5c5cccac840c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:e3:30:d2:48:52:79:27:3f:98:d7:8a:2c:
08:9a:ce:f1:5b:31:39:bf:01:2f:d8:b4:a6:b4:c5:
13:51:84:70:90:b0:63:bf:63:7c:e5:4f:e0:bc:16:
88:8b:21:52:78:0e:b8:ee:76:0a:b4:c0:a2:cc:ac:
ff:98:00:10:93:e4:68:1b:9f:27:e6:36:7b:3e:05:
32:54:04:4a:f3:b7:ec:c9:86:1e:84:6f:b2:ba:70:
44:19:0e:ad:d8:4f:fe:af:b2:00:00:c0:e5:d5:46:
22:2a:21:ad:a2:f8:ff:45:4e:a8:97:f0:b4:5a:1a:
fa:7a:ea:8f:12:92:c7:55:df:d3:0b:45:a3:9b:99:
02:b6:13:b6:f0:fd:fd:35:7d:3e:2d:3d:63:48:05:
24:e5:c2:81:68:8d:40:8c:15:44:92:0c:80:31:63:
fc:1d:a9:77:ce:76:52:51:5c:31:da:25:7e:e6:ac:
30:56:f3:a5:89:5f:71:89:3d:4f:53:42:02:39:79:
5b:ec:f9:c6:bd:bb:63:26:a1:53:b0:d9:fd:8e:75:
47:49:d3:e9:5b:99:0d:79:60:23:b7:60:80:2e:91:
92:fc:2d:af:c2:56:b8:9b:4e:92:9b:c8:2a:02:9d:
cb:b0:18:b4:d4:e4:84:1b:bf:96:08:05:2c:7a:0a:
15:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D9:C3:47:AB:C1:22:29:D6:59:9C:73:40:5A:5C:5C:CC:AC:84:0C
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:bd:5e:3a:cf:e8:92:d2:63:d3:17:0f:80:c2:58:b7:1a:6e:
69:90:f5:bf:73:e1:e8:02:69:83:34:54:0c:cf:79:fc:94:dd:
98:97:62:f3:f8:c2:b7:78:14:18:ff:7f:7d:70:87:da:8b:6c:
83:e9:bc:74:ad:45:07:4c:db:bb:e6:32:5a:25:6e:52:bf:b0:
27:67:6e:d0:1e:cc:17:94:92:f2:f8:de:a1:04:af:5d:3b:6c:
4c:93:67:39:a1:94:21:ad:3c:0c:18:b2:73:e8:06:9d:a8:7e:
41:fd:f8:23:fb:4b:d2:d1:71:42:72:57:39:44:f9:fd:aa:e7:
93:d1:84:66:c7:81:03:bf:58:ab:08:fa:bf:ce:f9:80:37:bc:
6d:47:68:34:d9:c7:cd:22:d7:d0:9c:17:e4:bd:c1:76:3e:f0:
be:9c:e4:a2:b4:37:4c:43:47:af:94:6b:10:5e:41:57:36:33:
ea:95:7e:fd:63:dc:1c:55:38:61:db:6e:74:23:a3:6a:0d:c9:
31:1a:95:a0:d2:cc:1f:c1:2f:9a:39:cd:37:dd:fb:cc:d9:27:
00:94:7b:35:94:03:05:a6:24:24:82:17:c4:d1:2a:12:ff:b1:
42:68:1c:0a:e4:d0:a0:68:2c:c7:af:35:ac:45:d5:15:02:f7:
0e:60:a5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:50 2025 by rpki-client