
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
File: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json)
Hash identifier: TPpnBFQQDUcxVbdiCteAKTV60c68Pbt6+Fnng7066Fc=
Subject key identifier: 21:EA:43:0C:95:AC:92:1D:C8:7C:44:BE:C8:31:94:52:77:0C:21:A1
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Certificate issuer: /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial: 0194BD17CCC35E4D9CA3C0A412F0295BC1AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:41 +0000
Manifest this update: Fri 31 Jan 2025 16:00:41 +0000
Manifest next update: Sat 01 Feb 2025 16:00:41 +0000
Files and hashes: 1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: I8N6nmcGuWx551w5QnaAib5sveFSu4FpiteQp0Z1dM8=)
2: b_KVKwZRR9qO2rEyeUchnPlC6cQ.roa (hash: Z3eAI08cw5rJ7QTBMYh6EG5zwd9t+P85CFRu7MY7FrE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cc:c3:5e:4d:9c:a3:c0:a4:12:f0:29:5b:c1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Validity
Not Before: Jan 31 16:00:41 2025 GMT
Not After : Feb 1 16:00:41 2025 GMT
Subject: CN=21ea430c95ac921dc87c44bec8319452770c21a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:aa:19:52:8c:70:6f:cd:88:ca:8f:c9:82:
2a:5a:0f:16:4d:e1:3a:ce:3b:e2:f7:3a:3a:15:b5:
b7:84:ca:9f:18:99:bd:a5:a8:54:6c:00:80:fa:75:
0b:0c:cc:6f:65:45:98:d8:e5:d9:58:6d:d5:93:e9:
a9:06:61:2c:20:ec:e2:42:01:87:f0:7e:0c:85:98:
ef:b0:67:db:a0:6f:cc:54:1a:00:b9:c5:e1:a0:c1:
c3:8b:1a:60:c9:8d:06:18:3c:7e:c8:60:5a:d0:55:
57:0c:c5:06:72:d2:4f:7f:cf:57:2c:3c:1d:6c:5a:
46:c1:20:00:02:1a:24:91:41:52:7a:a5:18:9f:07:
84:c3:9f:8f:cf:71:e6:56:0c:44:70:45:37:9f:60:
85:f7:74:f3:1f:1e:0d:7d:05:45:ba:18:67:03:c4:
19:8e:d4:dd:a6:23:02:a7:65:c9:3c:8c:47:95:2b:
ed:6f:6d:ee:29:7a:22:72:b2:47:39:c9:9c:2d:6d:
19:6e:ee:3f:a1:5c:ac:7e:dd:33:81:43:b8:ba:71:
27:9c:fc:be:3a:6c:ea:ba:c2:18:1e:01:df:14:f1:
11:0d:a5:1b:77:9f:97:fe:b4:14:ce:e8:49:44:23:
16:57:e5:10:9b:fb:42:ad:36:15:b6:ee:d2:d7:18:
8b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EA:43:0C:95:AC:92:1D:C8:7C:44:BE:C8:31:94:52:77:0C:21:A1
X509v3 Authority Key Identifier:
keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6d:97:c8:fb:c3:cf:f2:16:be:28:2a:fd:41:3c:d7:75:a7:
8d:4d:35:d3:a7:6f:c5:26:01:fe:b1:ee:a6:72:37:13:38:79:
65:4f:66:40:00:13:dd:4c:8c:04:f2:c0:81:96:e1:b5:5e:15:
09:b9:f3:51:ff:2e:81:d3:79:29:74:3c:c8:97:ea:e0:95:b7:
fd:20:c9:a0:b6:90:a6:3d:4b:0f:5b:07:1d:2d:2a:70:f7:06:
20:6f:67:73:e0:d0:3d:f8:d9:e5:dc:53:c8:a9:d8:5e:c4:41:
d2:50:23:20:49:4d:15:13:6d:7d:78:f4:52:7c:6b:64:99:7a:
33:f4:7e:1a:39:cc:2b:1b:f9:41:99:56:a0:b5:36:7d:d9:40:
fc:79:f2:45:7e:c8:c4:69:04:59:0a:dd:06:e4:14:f1:84:55:
db:02:fe:12:f0:e7:dd:eb:ef:df:d8:5a:80:26:e7:63:dd:6b:
95:11:87:a9:81:0b:64:46:a1:b2:c4:de:20:93:31:be:57:91:
2a:05:db:76:7b:e6:d2:81:13:50:51:57:52:a7:63:ab:48:fd:
b9:c5:18:df:45:a2:6c:8a:f8:79:d7:de:eb:78:44:1b:8e:64:
37:a5:80:96:70:57:f0:da:83:fb:bf:a5:f4:d3:a6:84:03:93:
d5:0e:9a:79
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS9F8zDXk2co8CkEvApW8GvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5N2Y2OWVkMjZjMmU0Njg3ZGJhYjJlNmM2Y2NhODhkMTdj
NGMzMzIwHhcNMjUwMTMxMTYwMDQxWhcNMjUwMjAxMTYwMDQxWjAzMTEwLwYDVQQD
EygyMWVhNDMwYzk1YWM5MjFkYzg3YzQ0YmVjODMxOTQ1Mjc3MGMyMWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS+qGVKMcG/NiMqPyYIqWg8WTeE6
zjvi9zo6FbW3hMqfGJm9pahUbACA+nULDMxvZUWY2OXZWG3Vk+mpBmEsIOziQgGH
8H4MhZjvsGfboG/MVBoAucXhoMHDixpgyY0GGDx+yGBa0FVXDMUGctJPf89XLDwd
bFpGwSAAAhokkUFSeqUYnweEw5+Pz3HmVgxEcEU3n2CF93TzHx4NfQVFuhhnA8QZ
jtTdpiMCp2XJPIxHlSvtb23uKXoicrJHOcmcLW0Zbu4/oVysft0zgUO4unEnnPy+
OmzqusIYHgHfFPERDaUbd5+X/rQUzuhJRCMWV+UQm/tCrTYVtu7S1xiL/QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCHqQwyVrJIdyHxEvsgxlFJ3DCGhMB8GA1UdIwQY
MBaAFPl/ae0mwuRofbqy5sbMqI0XxMMyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YOXA3U2JDNUdoOXVyTG14c3lvalJmRXd6SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvMzI0NDFlLTVlOWItNGEzMi04Y2M0
LTFlYjc1YmI2ODIzMy8xLzEtWDlwN1NiQzVHaDl1ckxteHN5b2pSZkV3ekkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY2LzMyNDQxZS01ZTliLTRhMzItOGNjNC0xZWI3NWJiNjgy
MzMvMS8xLVg5cDdTYkM1R2g5dXJMbXhzeW9qUmZFd3pJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHG2X
yPvDz/IWvigq/UE813WnjU0106dvxSYB/rHupnI3Ezh5ZU9mQAAT3UyMBPLAgZbh
tV4VCbnzUf8ugdN5KXQ8yJfq4JW3/SDJoLaQpj1LD1sHHS0qcPcGIG9nc+DQPfjZ
5dxTyKnYXsRB0lAjIElNFRNtfXj0UnxrZJl6M/R+GjnMKxv5QZlWoLU2fdlA/Hny
RX7IxGkEWQrdBuQU8YRV2wL+EvDn3evv39hagCbnY91rlRGHqYELZEahssTeIJMx
vleRKgXbdnvm0oETUFFXUqdjq0j9ucUY30WibIr4edfe63hEG45kN6WAlnBX8NqD
+7+l9NOmhAOT1Q6aeQ==
-----END CERTIFICATE-----
Generated at Thu May 1 15:37:10 2025 by rpki-client