Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json)
Hash identifier: IBOqGWjAY89d5Bs+KWitMqPzzdnWJTz9gjd88OhT5Us=
Subject key identifier: 3E:80:C6:EE:B6:B7:66:1E:F6:3D:BE:F1:F8:03:40:D0:54:21:94:64
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 0194BD85AD8BE9B09C4F00904B63C1F9D915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: k/RPeMGSMXEh9ro1GG+oBzYaNTCxzB5Dt/DPjjgHkN4=)
2: OB1GsVdt7iCzhWhmgirUwJgGaak.roa (hash: HNRDkQU9zd4iAZZaAQcAxCYiJZDSBKH3pYjhla6LGLs=)
3: c2mL12kdRJv1WvTXeOWApZDJ2rQ.roa (hash: 5uCGNb2X+bHIJBlB2PHoFokoSfpPaJ0/8Q+fiw/Bjh4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ad:8b:e9:b0:9c:4f:00:90:4b:63:c1:f9:d9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=3e80c6eeb6b7661ef63dbef1f80340d054219464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7e:33:26:5d:89:79:ea:fc:a9:ae:f4:3e:4e:
d6:93:80:c0:6e:63:8a:97:b8:6d:a8:91:ba:9d:8f:
92:79:2a:14:2e:cf:37:a8:e1:05:b0:31:5e:39:45:
73:00:c8:88:cf:85:0b:10:25:8b:1d:8e:ed:12:3a:
f4:e1:34:d1:01:ba:4c:e5:4f:06:bf:4c:25:7d:a2:
31:02:0f:b6:33:59:9c:42:56:1f:3d:c3:cd:d4:6f:
32:15:94:7b:28:78:00:82:cc:d2:25:31:68:71:08:
ef:41:ad:c8:b1:9b:be:a9:be:02:d9:52:7e:a9:90:
4d:0e:d7:de:a1:8c:33:09:9f:74:a4:9e:63:e8:e4:
c5:4e:30:86:b5:50:13:17:15:5d:4c:ad:bd:d8:c7:
a0:28:5f:72:95:12:88:4c:47:38:e6:5b:29:43:b3:
55:73:4f:45:f8:b7:79:dd:2d:1e:47:c5:c9:6a:f3:
42:98:c5:b3:54:63:b8:cf:c1:dd:f2:95:29:c2:e7:
f9:de:41:95:cc:84:f2:fe:47:1e:86:76:1f:5a:fb:
16:58:d2:30:93:7a:f9:46:41:53:8c:e9:2d:30:f5:
35:de:b2:18:ec:b1:a8:a6:98:94:4b:1d:a1:1d:7d:
e9:76:eb:23:54:2b:08:70:44:c6:98:1a:f0:20:8b:
58:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:80:C6:EE:B6:B7:66:1E:F6:3D:BE:F1:F8:03:40:D0:54:21:94:64
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e2:7b:62:fc:6d:df:db:e2:57:e9:bc:cf:25:43:58:cb:36:
01:ae:25:4a:fe:66:e3:8e:0d:52:cb:e3:74:7e:9f:30:60:ed:
94:f9:6d:ba:9b:67:91:3f:72:ce:31:f1:f8:9d:1d:81:c2:9b:
6a:39:4f:81:39:a2:86:36:ed:0c:3f:ef:27:f6:1c:9f:bd:d9:
a3:98:5e:79:6e:1e:67:8d:7b:3c:53:19:08:73:60:e9:2f:8a:
78:07:0b:bd:a1:bb:14:d3:a3:9d:7a:9c:8b:32:9f:1b:cb:42:
e9:86:f0:30:5c:f9:00:59:f0:eb:63:cc:f8:bd:cd:55:ad:5a:
8f:37:fb:32:e6:13:a8:ac:d3:96:80:bf:d6:1c:93:a7:a3:ca:
41:ef:6a:c9:b3:39:76:dc:b9:f7:d5:5e:d1:ec:88:ac:c2:ab:
6f:70:23:81:0f:a4:e0:51:11:43:11:aa:6f:d3:21:d6:1b:c6:
ed:ab:a4:82:0f:91:63:57:5d:19:e1:34:fd:e9:2c:1d:3d:ef:
14:f0:42:50:ef:92:1e:9a:e0:64:2f:b7:9a:b5:c6:a9:bc:1c:
70:be:6f:81:6a:d7:a9:ab:a9:30:95:01:bc:2e:1a:2f:d9:33:
2a:56:9a:e3:20:3d:41:9b:76:95:93:22:33:e8:bb:37:00:27:
47:a6:86:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9ha2L6bCcTwCQS2PB+dkVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MmIwODRmOWI5Yzk4Y2ZkOTA0MTBiODMwNWNjNmNiNDZk
Y2NlZDgwHhcNMjUwMTMxMTgwMDQxWhcNMjUwMjAxMTgwMDQxWjAzMTEwLwYDVQQD
EygzZTgwYzZlZWI2Yjc2NjFlZjYzZGJlZjFmODAzNDBkMDU0MjE5NDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn4zJl2Jeer8qa70Pk7Wk4DAbmOK
l7htqJG6nY+SeSoULs83qOEFsDFeOUVzAMiIz4ULECWLHY7tEjr04TTRAbpM5U8G
v0wlfaIxAg+2M1mcQlYfPcPN1G8yFZR7KHgAgszSJTFocQjvQa3IsZu+qb4C2VJ+
qZBNDtfeoYwzCZ90pJ5j6OTFTjCGtVATFxVdTK292MegKF9ylRKITEc45lspQ7NV
c09F+Ld53S0eR8XJavNCmMWzVGO4z8Hd8pUpwuf53kGVzITy/kcehnYfWvsWWNIw
k3r5RkFTjOktMPU13rIY7LGoppiUSx2hHX3pdusjVCsIcETGmBrwIItYkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6Axu62t2Ye9j2+8fgDQNBUIZRkMB8GA1UdIwQY
MBaAFPQrCE+bnJjP2QQQuDBcxstG3M7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mOTQ5YTUtODRhYy00NTlkLWI5YTAt
NmE5Y2Q5NDIwMmZmLzEvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mOTQ5YTUtODRhYy00NTlkLWI5YTAtNmE5Y2Q5NDIwMmZm
LzEvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApOJ7Yvxt
39viV+m8zyVDWMs2Aa4lSv5m444NUsvjdH6fMGDtlPltuptnkT9yzjHx+J0dgcKb
ajlPgTmihjbtDD/vJ/Ycn73Zo5heeW4eZ417PFMZCHNg6S+KeAcLvaG7FNOjnXqc
izKfG8tC6YbwMFz5AFnw62PM+L3NVa1ajzf7MuYTqKzTloC/1hyTp6PKQe9qybM5
dty599Ve0eyIrMKrb3AjgQ+k4FERQxGqb9Mh1hvG7aukgg+RY1ddGeE0/eksHT3v
FPBCUO+SHprgZC+3mrXGqbwccL5vgWrXqaupMJUBvC4aL9kzKlaa4yA9QZt2lZMi
M+i7NwAnR6aGOQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:12:45 2025 by rpki-client