Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
File: 9LndnjT-ZtdROJA3CPjOH700LWQ.mft (raw, json)
Hash identifier: S1HT3k5B8iNYdnxsslr+w+z/7T21fwU6XKEsIyR0cX8=
Subject key identifier: DC:06:2C:4B:20:33:25:FC:9A:59:FE:F8:EA:89:E6:4B:56:0B:96:9E
Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Certificate serial: 0194BBCE1596C2E561078418A621E5B2F0AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: 9KjqbMoowr4zIwC0vIDCLJx3OPk.roa (hash: P/sEcAl8BwOGFXxtB8+HWMsFUjWpgx7ANde/4kLha4c=)
2: 9LndnjT-ZtdROJA3CPjOH700LWQ.crl (hash: rPryD7Zy374ZbpbiwrVGlor6Qan8/hE35IOLAsDLPys=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:15:96:c2:e5:61:07:84:18:a6:21:e5:b2:f0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=dc062c4b203325fc9a59fef8ea89e64b560b969e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:e3:b1:4d:29:1e:f8:3f:c1:ac:96:45:1f:
ce:17:7b:be:df:a1:dc:31:ef:f0:0b:7e:13:f5:04:
d9:77:cf:97:8a:04:c6:f5:7c:4b:f1:29:2a:d6:72:
0e:44:42:2f:30:14:5a:da:ff:2e:de:2d:50:25:5b:
ce:42:41:cd:d3:a3:98:40:5d:48:75:5c:4b:0e:22:
22:37:bb:f9:30:8c:e8:00:d9:2e:52:6d:78:58:b8:
8e:91:c7:49:c0:c4:c5:ec:3a:68:46:56:9d:3d:fc:
4b:e1:c2:80:51:cf:6d:97:50:ab:6a:8a:97:28:97:
32:04:48:6e:fb:3a:2b:bf:b1:a9:88:eb:1b:e3:c9:
93:b7:05:44:00:17:04:24:5b:84:b5:5a:66:b0:9c:
df:c6:e4:a4:70:07:b5:21:d9:e0:a4:7e:c5:b9:2d:
23:b5:d4:6a:1f:80:bd:d4:73:06:9f:02:d6:a3:95:
a0:0d:07:4e:86:66:d0:f0:05:99:72:eb:7b:41:25:
56:63:f5:ab:19:d8:22:7a:7e:cc:98:87:d3:7f:85:
0c:44:26:07:6f:fb:af:be:3d:41:b3:9a:c3:b2:f9:
ad:5b:23:8b:da:3a:40:4c:20:e3:44:21:0e:e3:18:
19:70:03:19:93:38:91:59:3d:9e:1b:29:06:04:e2:
8f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:06:2C:4B:20:33:25:FC:9A:59:FE:F8:EA:89:E6:4B:56:0B:96:9E
X509v3 Authority Key Identifier:
keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3c:78:5d:53:ba:4e:b3:73:8c:e9:2f:ac:a7:2e:d6:c1:cb:
01:ce:cd:7a:2b:7e:ac:e4:09:6e:cf:bd:ff:d5:3f:af:f7:1c:
16:5d:a9:a4:f8:76:21:a0:df:08:c2:8d:f0:ce:e0:ac:78:94:
d7:4f:1e:a0:d5:79:23:05:dd:8e:c2:33:06:2a:b9:d2:98:b2:
40:7e:46:a9:93:52:5c:a1:b9:af:22:98:76:19:50:fc:65:38:
ab:81:a1:51:fe:32:a2:78:f4:ff:35:d3:f7:0e:9d:d2:a1:e7:
ea:36:ec:80:1e:c8:11:5c:cf:bc:03:4a:36:06:75:f7:b4:5f:
65:e3:06:7b:ee:86:fb:17:08:74:ab:8d:9f:99:c3:a6:10:ae:
61:62:58:f6:ff:25:c5:20:30:93:c7:f4:6c:7e:1e:66:92:fe:
41:ad:9e:cd:41:42:0a:aa:02:b6:a3:dd:0e:f7:4b:5f:e3:36:
44:0f:94:30:62:18:79:f4:c6:1c:11:c8:01:06:7c:be:9a:6f:
29:4e:31:48:7a:fa:c7:6f:c4:df:4a:24:1b:e2:01:f7:94:3e:
aa:de:1c:b3:96:80:7a:9a:2e:9c:de:e5:93:8d:b8:e1:2f:3e:
11:84:5b:b4:7c:c9:6e:75:d9:d7:c7:e8:46:03:97:5c:9d:2c:
74:fc:88:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zhWWwuVhB4QYpiHlsvCqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YjlkZDllMzRmZTY2ZDc1MTM4OTAzNzA4ZjhjZTFmYmQz
NDJkNjQwHhcNMjUwMTMxMTAwMDMyWhcNMjUwMjAxMTAwMDMyWjAzMTEwLwYDVQQD
EyhkYzA2MmM0YjIwMzMyNWZjOWE1OWZlZjhlYTg5ZTY0YjU2MGI5NjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVHjsU0pHvg/wayWRR/OF3u+36Hc
Me/wC34T9QTZd8+XigTG9XxL8Skq1nIOREIvMBRa2v8u3i1QJVvOQkHN06OYQF1I
dVxLDiIiN7v5MIzoANkuUm14WLiOkcdJwMTF7DpoRladPfxL4cKAUc9tl1CraoqX
KJcyBEhu+zorv7GpiOsb48mTtwVEABcEJFuEtVpmsJzfxuSkcAe1IdngpH7FuS0j
tdRqH4C91HMGnwLWo5WgDQdOhmbQ8AWZcut7QSVWY/WrGdgien7MmIfTf4UMRCYH
b/uvvj1Bs5rDsvmtWyOL2jpATCDjRCEO4xgZcAMZkziRWT2eGykGBOKPQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwGLEsgMyX8mln++OqJ5ktWC5aeMB8GA1UdIwQY
MBaAFPS53Z40/mbXUTiQNwj4zh+9NC1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lY2FmNDQtMDhjYy00MWJiLTgxZDMt
MjYyYmVjNzE3YjE3LzEvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9lY2FmNDQtMDhjYy00MWJiLTgxZDMtMjYyYmVjNzE3YjE3
LzEvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjx4XVO6
TrNzjOkvrKcu1sHLAc7Neit+rOQJbs+9/9U/r/ccFl2ppPh2IaDfCMKN8M7grHiU
108eoNV5IwXdjsIzBiq50piyQH5GqZNSXKG5ryKYdhlQ/GU4q4GhUf4yonj0/zXT
9w6d0qHn6jbsgB7IEVzPvANKNgZ197RfZeMGe+6G+xcIdKuNn5nDphCuYWJY9v8l
xSAwk8f0bH4eZpL+Qa2ezUFCCqoCtqPdDvdLX+M2RA+UMGIYefTGHBHIAQZ8vppv
KU4xSHr6x2/E30okG+IB95Q+qt4cs5aAepounN7lk4244S8+EYRbtHzJbnXZ18fo
RgOXXJ0sdPyIAg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:39 2025 by rpki-client