Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
File: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft (raw, json)
Hash identifier: 1PpOhMz3Qa8Uh6tyFaspCixfLtguKeNzpELBC7Di1Q4=
Subject key identifier: A7:C7:3E:22:E6:FE:6A:32:C5:45:ED:E9:F3:00:59:0C:C4:AE:01:54
Authority key identifier: F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
Certificate issuer: /CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Certificate serial: 0194BCE0E7CA71CBA2EDF2E6EBD5FB181E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
Manifest number: 0127
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl (hash: wwBFUhydi4dS18+gjJQbKgni0h/ZXTd12oZA4JCBAcE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e7:ca:71:cb:a2:ed:f2:e6:eb:d5:fb:18:1e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=a7c73e22e6fe6a32c545ede9f300590cc4ae0154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:60:67:8c:4c:80:ca:53:33:b1:62:27:bc:
83:fe:94:e2:a0:57:2f:c2:dd:dc:9c:e1:41:9c:c4:
f7:9c:93:73:96:04:e2:70:04:cf:b9:1c:39:f4:78:
94:ad:4a:a2:66:0d:cd:e4:9f:d9:09:ae:14:ea:d2:
56:f9:1e:0f:cd:8e:7a:c9:b4:d1:6e:58:43:b3:bf:
52:df:77:33:5f:a9:4d:0e:a4:9b:78:94:29:48:c9:
f1:9e:04:27:01:aa:e7:27:aa:58:9f:23:9f:b4:7a:
d5:ae:7c:aa:fc:0c:3f:6c:7d:b5:63:a9:89:25:e3:
59:0a:da:3d:10:32:7c:1c:07:39:fc:da:b1:81:36:
c4:fa:d2:51:6d:c7:01:3f:70:e3:55:a0:6c:39:64:
d0:af:ab:7e:0c:68:bc:9c:54:2b:0c:4d:d9:27:31:
59:a8:5e:02:c4:c0:9b:0d:3a:cd:e9:1a:39:82:da:
60:7c:f4:bb:43:9e:fa:c9:2d:a4:42:27:3c:98:42:
ae:c7:11:4f:2a:2a:94:f4:c8:e4:97:52:d4:79:e8:
f2:ba:bc:36:0c:2b:3d:8e:5d:7b:a8:b1:f6:06:46:
e5:0b:37:9f:e5:7d:01:34:3e:3b:e6:5a:fc:91:f6:
70:86:56:c9:38:99:a8:fe:0c:8f:37:90:29:9d:87:
4d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C7:3E:22:E6:FE:6A:32:C5:45:ED:E9:F3:00:59:0C:C4:AE:01:54
X509v3 Authority Key Identifier:
keyid:F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7a:0a:43:3f:11:0b:f0:44:e1:21:b2:9d:38:9d:df:4c:d7:
57:2d:92:f0:96:6c:db:92:fc:2b:c1:a6:c5:62:9c:8d:1f:e1:
54:0b:0c:46:9b:b3:44:ea:ed:08:e5:7f:0d:77:c1:99:d9:a0:
50:2c:53:8f:51:ef:4f:a2:9f:4e:cf:2d:89:2d:db:a0:3a:9f:
f0:b0:d3:65:15:02:d9:81:ce:70:b6:44:a1:0a:75:cc:5b:49:
37:8d:7d:b6:e4:78:ab:dc:44:1a:a9:ec:6c:8d:54:f0:dc:a9:
ec:9d:c4:5a:cd:24:36:bc:84:8d:f4:2f:ea:c2:c3:e3:fe:db:
8c:33:24:4a:14:42:f3:ba:d9:49:1a:fd:82:ca:b1:88:d8:50:
fc:49:5f:2f:05:de:02:e8:96:e3:71:4c:fb:7f:70:5a:79:bb:
d0:a4:82:66:a2:db:f7:04:aa:16:c3:92:b2:83:f9:7c:93:d0:
92:08:b5:18:13:d0:7e:90:90:a8:71:fc:c5:89:92:58:41:75:
6c:fe:b7:8f:aa:b7:5f:be:25:43:35:23:6d:8a:93:04:89:7a:
90:2b:dc:d9:54:39:10:07:6e:f3:1c:7a:b2:33:b6:ef:fd:06:
85:c4:b3:20:a9:b5:80:12:fd:dc:f8:8f:e8:6f:98:0b:7d:7e:
13:4d:92:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84OfKccui7fLm69X7GB4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MWM3ZDQ3NzE4YThhNGE5ZDhjNTBiMjYwODNlNzE4NTI1
YjZjMWIwHhcNMjUwMTMxMTUwMDQzWhcNMjUwMjAxMTUwMDQzWjAzMTEwLwYDVQQD
EyhhN2M3M2UyMmU2ZmU2YTMyYzU0NWVkZTlmMzAwNTkwY2M0YWUwMTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzENgZ4xMgMpTM7FiJ7yD/pTioFcv
wt3cnOFBnMT3nJNzlgTicATPuRw59HiUrUqiZg3N5J/ZCa4U6tJW+R4PzY56ybTR
blhDs79S33czX6lNDqSbeJQpSMnxngQnAarnJ6pYnyOftHrVrnyq/Aw/bH21Y6mJ
JeNZCto9EDJ8HAc5/NqxgTbE+tJRbccBP3DjVaBsOWTQr6t+DGi8nFQrDE3ZJzFZ
qF4CxMCbDTrN6Ro5gtpgfPS7Q576yS2kQic8mEKuxxFPKiqU9Mjkl1LUeejyurw2
DCs9jl17qLH2BkblCzef5X0BND475lr8kfZwhlbJOJmo/gyPN5ApnYdNTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfHPiLm/moyxUXt6fMAWQzErgFUMB8GA1UdIwQY
MBaAFPQcfUdxiopKnYxQsmCD5xhSW2wbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81MzZjYzQtYjc5MC00MWMyLWEzMmUt
NjBiMmM5ODIxMDc4LzEvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81MzZjYzQtYjc5MC00MWMyLWEzMmUtNjBiMmM5ODIxMDc4
LzEvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanoKQz8R
C/BE4SGynTid30zXVy2S8JZs25L8K8GmxWKcjR/hVAsMRpuzROrtCOV/DXfBmdmg
UCxTj1HvT6KfTs8tiS3boDqf8LDTZRUC2YHOcLZEoQp1zFtJN419tuR4q9xEGqns
bI1U8Nyp7J3EWs0kNryEjfQv6sLD4/7bjDMkShRC87rZSRr9gsqxiNhQ/ElfLwXe
AuiW43FM+39wWnm70KSCZqLb9wSqFsOSsoP5fJPQkgi1GBPQfpCQqHH8xYmSWEF1
bP63j6q3X74lQzUjbYqTBIl6kCvc2VQ5EAdu8xx6sjO27/0GhcSzIKm1gBL93PiP
6G+YC31+E02S8w==
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:35:18 2025 by rpki-client