
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
File: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft (raw, json)
Hash identifier: B8ofVRDMXY81gD4pdmZeKMAB2Jipu324eZhuKj7QmDA=
Subject key identifier: FF:9C:77:3A:74:A6:3D:22:CE:D4:35:55:A3:B1:4C:BA:E4:F6:62:AC
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Certificate issuer: /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial: 0194BBCE8C72779004876C17196A5D89DC5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
Manifest number: 1413
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl (hash: hCsQ+aOarcGw4kI2q32byEZXAGhkoM1aLEd25Vk1yoA=)
2: SJe0yiKrFFgre-LwlA373na16-M.roa (hash: W+lZ86QtGfH27JSeGBvOgaus0tZU6nh0IODmn6TYevo=)
3: rXYQihXZcHzDYDPfOCw2uf0QxOs.roa (hash: mgxpGPq3j8kcIVwK/lsmtpT+En8AA3E9GG8LueVY7g4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8c:72:77:90:04:87:6c:17:19:6a:5d:89:dc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=ff9c773a74a63d22ced43555a3b14cbae4f662ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:09:cc:cd:0b:e6:f8:07:87:bb:93:7d:33:30:
54:c5:b9:58:0c:45:2a:2f:1e:1a:a8:4f:5c:38:c2:
56:d8:f4:e6:cc:da:ee:29:09:ba:8f:e3:c6:c7:31:
6b:94:9b:22:43:80:81:4e:ae:4a:e0:41:da:18:58:
66:96:73:a0:85:b3:bd:9c:7d:52:ae:ae:44:f1:9f:
98:07:4c:8f:42:97:89:77:b2:74:08:cb:fe:86:bc:
72:88:bc:0c:a9:78:1b:fe:7b:dc:33:ee:fc:9a:be:
15:4b:3f:53:e3:bf:aa:d0:a6:01:a7:e1:49:cb:89:
98:29:cc:ae:64:67:c1:a0:7e:fd:23:ac:4e:6b:6a:
75:fa:55:3b:c7:8f:d5:11:d3:1f:2e:84:b1:75:31:
e8:48:4b:2d:4f:6c:42:2e:0e:0e:75:11:e7:51:a0:
f4:6c:e3:0c:e2:27:8c:24:97:91:fd:14:29:24:8c:
d0:ae:ee:11:a8:ca:7b:88:99:ae:74:48:b0:6e:59:
94:06:be:04:25:08:f7:ec:c7:c3:16:f9:8f:7a:70:
3c:bd:2c:f1:2d:96:db:ea:bd:92:c9:c8:18:11:c9:
58:aa:e4:46:2d:be:1a:71:01:ec:89:d5:b1:77:29:
6d:c2:c5:c7:6f:85:dd:f2:29:00:51:be:e7:be:2a:
b0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9C:77:3A:74:A6:3D:22:CE:D4:35:55:A3:B1:4C:BA:E4:F6:62:AC
X509v3 Authority Key Identifier:
keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:34:43:0b:19:59:2c:8a:8a:f6:19:95:be:76:60:69:34:b3:
51:b7:44:e2:36:5e:e7:14:c3:a4:33:62:25:9e:5c:92:57:e0:
b9:66:03:7b:39:63:bb:74:20:b0:3a:f9:91:6d:8b:6e:64:de:
10:7e:73:02:e4:68:78:fc:52:de:d4:61:9c:22:3d:87:da:ad:
c5:d3:d5:a1:bc:43:ba:b5:76:49:ac:ae:e5:87:65:c0:18:c7:
90:14:b9:20:e1:1d:56:3e:0d:7a:4d:a5:a3:2b:b2:56:79:c8:
97:5f:3c:0f:88:56:2e:77:f2:a5:01:86:27:19:2c:cb:8e:93:
7b:03:34:83:f8:e2:eb:5e:d4:90:ed:3d:0a:46:f0:3f:11:fc:
71:26:36:bc:09:7d:18:26:71:16:df:46:d0:02:eb:01:10:88:
63:9b:24:6a:5d:33:88:58:d2:3a:74:88:ea:b2:7e:f6:fb:77:
f3:6c:72:9f:dd:fd:cb:5f:c6:6b:fe:0d:b3:7c:64:68:2f:f6:
be:fc:ab:b7:cf:3a:a2:82:e6:da:ac:61:53:44:11:ac:31:74:
bb:2a:12:84:e2:0d:6b:6e:37:18:c5:36:a2:e8:c9:d8:a1:37:
e3:a0:17:3e:3b:b6:29:f8:f4:5c:0d:b2:a6:b8:58:9a:6e:1d:
3e:91:6c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:59 2025 by rpki-client