Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
File: 9-VkfNC39yK-1FafN7i_j5JTjPU.mft (raw, json)
Hash identifier: zJPCQub+eWZUzK57QUcP5phuKEOifislp1XtAJdmF84=
Subject key identifier: D0:B8:7C:18:83:9B:B0:3A:35:FB:8D:BB:8B:A6:0D:C0:55:E1:16:4E
Authority key identifier: F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
Certificate issuer: /CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Certificate serial: 0194BCA977A457801E91BDCE61A7E74BF3A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
Manifest number: 104C
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: 9-VkfNC39yK-1FafN7i_j5JTjPU.crl (hash: IhrxS/VKfDZd774lgYYi53Gj4NMX7/e85Eq73THYrr0=)
2: DBhdVQnWbQeKdQzgQiCpHErXzhE.roa (hash: ke+PE6qJEQ9z2GmlNhQtn8qkPU8ewvFXiEh0aYxuqOo=)
3: q1OrwBnOgNGg_tS0zZoAzPBHw1c.roa (hash: aaFqVy4+hGHKy39rpTWrEUIWgkLIuK6ZgSAREjkESF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:77:a4:57:80:1e:91:bd:ce:61:a7:e7:4b:f3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=d0b87c18839bb03a35fb8dbb8ba60dc055e1164e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4d:30:71:17:d2:47:1d:1f:e3:30:c4:0a:3b:
a4:0a:c7:90:2a:a6:e2:6f:9c:71:5a:13:bb:b7:49:
93:d6:cb:01:5c:c1:c3:c8:0f:d1:de:aa:bf:43:0d:
8e:ca:b3:2d:8a:df:40:4a:85:e5:e5:c7:2d:7e:e4:
2a:fe:d2:18:35:24:18:93:cc:18:19:dc:bf:11:b7:
a5:e8:52:2a:44:47:b1:28:66:5e:0a:4e:69:e1:11:
86:23:79:d1:c4:97:99:9a:a4:4b:76:cb:d1:4e:2f:
a3:44:c5:a6:b0:f2:3e:16:97:10:1d:2e:03:33:c5:
59:f7:a7:28:a1:08:2d:ed:b7:be:22:49:b0:ff:60:
52:61:99:e6:ff:91:d4:e4:f1:e7:cd:08:fb:1e:21:
f8:06:3e:e2:46:5b:be:83:26:62:e3:aa:6f:1e:d9:
59:b8:0b:e0:2f:dd:9c:84:c0:45:1d:09:95:21:15:
bf:28:66:63:e1:6d:ab:18:41:ba:95:b0:0b:02:7c:
13:0a:57:e6:16:af:89:c4:f1:7e:10:e5:69:e2:f3:
fe:3a:e7:de:84:77:97:b4:18:6b:4b:45:0a:f7:13:
41:a5:86:c0:c5:d3:6d:e1:54:09:65:83:9a:ff:16:
eb:07:33:04:3a:71:00:e4:25:fa:63:59:d7:b5:a4:
bc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B8:7C:18:83:9B:B0:3A:35:FB:8D:BB:8B:A6:0D:C0:55:E1:16:4E
X509v3 Authority Key Identifier:
keyid:F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:20:dc:25:95:92:2e:f5:25:ff:c3:62:ad:a9:ef:a8:ab:9d:
7c:03:f0:7d:35:f7:59:37:1e:53:19:cf:95:49:cf:5b:b2:52:
46:37:d9:43:49:9f:d5:66:df:af:66:77:ee:2d:c3:0f:1e:d8:
eb:47:67:d4:d9:33:84:58:a3:fc:27:22:ac:a5:39:27:02:49:
20:da:12:b7:b6:7a:3e:e6:15:27:eb:cd:5a:25:5f:e8:d3:77:
56:bd:86:be:11:ae:d6:a3:2a:77:09:49:22:24:5e:7b:1b:db:
7b:8c:cd:ea:cf:3f:9e:1a:8e:ad:34:55:6a:b9:27:0a:50:f8:
3d:c8:40:2b:a5:04:de:00:66:36:41:5e:4d:41:d4:52:26:4a:
d4:89:ab:10:ab:eb:ca:10:4b:46:65:65:57:dc:55:3a:20:6b:
e0:73:1c:d6:bb:5d:be:c1:d6:89:2d:8b:61:a7:72:a8:b1:c3:
b2:88:f0:5c:f8:dd:d9:08:2d:c2:a0:34:64:2a:d8:5f:af:61:
45:7b:f0:a1:2d:57:07:a4:99:11:85:42:88:4a:53:a2:a7:7a:
5b:86:1f:0c:07:f2:8f:03:f7:70:c7:3a:59:7c:ca:ab:09:c8:
5b:17:62:c8:11:ad:d8:3c:bd:7e:06:30:9c:40:48:dd:66:79:
e3:69:87:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:12:26 2025 by rpki-client