Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
File: 9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json)
Hash identifier: noeM7Lr0wgQwfXAvjXaVSqX/g1gKSrLZJTE9Z3dPeKk=
Subject key identifier: 80:D3:F5:0D:E5:0B:3D:F6:5C:D2:69:16:1F:CF:42:99:67:61:BA:D3
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial: 0194BD85514858718672CB06529756D084B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
Manifest number: 0B46
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: SR7wv3+n43733cYnYEakGXI6uLiTtj6C+vOzHPQFOH0=)
2: khAk69GaviX3ISVPskdgmXYxHg0.roa (hash: iZg+JNU8yAUj+GbVfYYrGDVbFREqgvj716gjoOSNlMU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:51:48:58:71:86:72:cb:06:52:97:56:d0:84:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=80d3f50de50b3df65cd269161fcf42996761bad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:08:fa:ed:35:84:ea:58:2c:ce:e7:8d:a5:
8e:e5:74:2e:15:3d:f1:3a:ba:f3:c0:26:48:e6:4c:
68:a6:4b:b6:1d:0d:c1:24:d2:85:64:ff:4b:de:d0:
d7:79:da:76:4f:ba:39:1b:62:fa:5b:5b:c9:bf:44:
f0:43:00:d9:6e:6d:ef:6c:f2:51:57:47:0e:6f:1a:
72:b3:55:54:9d:ac:15:20:d7:c6:05:d3:de:02:3a:
ec:94:85:fd:18:84:db:ba:4b:77:72:cd:9f:e3:c8:
3b:cf:49:d9:c2:f2:db:1d:70:c0:bb:06:3c:ca:2c:
18:97:2d:6f:9f:62:17:26:d2:d0:01:8b:5e:10:c5:
a0:28:76:55:f3:4b:f0:16:4b:e3:41:79:25:a0:e2:
4e:24:97:61:aa:ef:2e:1b:25:86:4d:a4:2a:e6:e6:
eb:cc:7a:7f:b1:a1:7e:33:5b:84:60:cc:03:7a:f8:
3c:bf:e7:ed:ec:13:3b:8f:0f:fa:10:43:cc:ca:02:
9e:ab:a4:5d:23:03:1f:06:ac:c2:35:c0:c3:cc:3e:
d1:ea:2e:06:0f:6e:a2:eb:49:67:c2:a1:8c:25:39:
1a:51:2e:98:1b:a0:e6:73:74:a8:5c:c3:e4:79:e2:
f2:a4:2c:fc:00:01:58:2b:e2:99:85:c8:af:b5:93:
ef:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D3:F5:0D:E5:0B:3D:F6:5C:D2:69:16:1F:CF:42:99:67:61:BA:D3
X509v3 Authority Key Identifier:
keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fd:39:8e:65:67:9b:3c:9e:de:ba:30:dd:64:36:22:d0:1a:
35:97:22:e0:01:ec:29:60:b7:f3:3d:d9:f6:73:26:fd:1b:c3:
80:01:92:13:4e:4d:ee:44:a9:69:f5:82:1a:a1:e8:68:59:ed:
92:7f:15:f3:7d:d7:ea:75:9a:f9:18:6d:a4:4d:3a:80:59:c7:
99:73:e5:b4:08:8d:62:0b:35:0c:3f:57:68:89:ba:d2:e4:1d:
e8:05:46:b0:d0:ea:59:89:d1:d8:2a:cb:2a:59:da:c6:2a:f2:
ad:f1:ad:a3:54:30:42:75:b8:5a:ec:c1:e3:cb:70:4f:4b:ed:
1e:ba:dc:f9:47:d0:a6:7b:50:54:f4:54:2f:86:61:39:24:c4:
ef:6c:fd:64:1a:91:e3:c3:e0:62:8e:65:3f:76:40:89:da:b5:
ee:0e:82:9e:8c:a6:f5:ca:e9:ef:81:66:c2:a9:98:0f:d9:1f:
94:8c:1b:9b:5c:a6:9e:15:5f:24:9e:93:57:a4:55:f4:d7:45:
9a:39:78:76:30:11:22:71:df:bc:f4:f2:23:90:b9:c5:26:2f:
aa:35:af:6a:36:7d:48:5a:28:96:5a:20:b1:cd:51:e6:66:27:
66:80:25:f0:6c:e5:8b:8e:8b:4b:c3:14:34:e6:bc:66:4e:86:
21:f7:5c:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hVFIWHGGcssGUpdW0IS2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTQxOWUzNzAwYTM2YmEyYjAzOTA2YzlmOGY0ZDJkZmQ4
NDgwNzAwHhcNMjUwMTMxMTgwMDE4WhcNMjUwMjAxMTgwMDE4WjAzMTEwLwYDVQQD
Eyg4MGQzZjUwZGU1MGIzZGY2NWNkMjY5MTYxZmNmNDI5OTY3NjFiYWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YcI+u01hOpYLM7njaWO5XQuFT3x
OrrzwCZI5kxopku2HQ3BJNKFZP9L3tDXedp2T7o5G2L6W1vJv0TwQwDZbm3vbPJR
V0cObxpys1VUnawVINfGBdPeAjrslIX9GITbukt3cs2f48g7z0nZwvLbHXDAuwY8
yiwYly1vn2IXJtLQAYteEMWgKHZV80vwFkvjQXkloOJOJJdhqu8uGyWGTaQq5ubr
zHp/saF+M1uEYMwDevg8v+ft7BM7jw/6EEPMygKeq6RdIwMfBqzCNcDDzD7R6i4G
D26i60lnwqGMJTkaUS6YG6Dmc3SoXMPkeeLypCz8AAFYK+KZhcivtZPvywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDT9Q3lCz32XNJpFh/PQplnYbrTMB8GA1UdIwQY
MBaAFPZUGeNwCja6KwOQbJ+PTS39hIBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYt
ZDRiNzIzZWQ3ODFjLzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYtZDRiNzIzZWQ3ODFj
LzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATP05jmVn
mzye3row3WQ2ItAaNZci4AHsKWC38z3Z9nMm/RvDgAGSE05N7kSpafWCGqHoaFnt
kn8V833X6nWa+RhtpE06gFnHmXPltAiNYgs1DD9XaIm60uQd6AVGsNDqWYnR2CrL
KlnaxiryrfGto1QwQnW4WuzB48twT0vtHrrc+UfQpntQVPRUL4ZhOSTE72z9ZBqR
48PgYo5lP3ZAidq17g6Cnoym9crp74FmwqmYD9kflIwbm1ymnhVfJJ6TV6RV9NdF
mjl4djARInHfvPTyI5C5xSYvqjWvajZ9SFoollogsc1R5mYnZoAl8Gzli46LS8MU
NOa8Zk6GIfdcsw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:23 2025 by rpki-client