Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
File: 9-CSr_r5tUhOAJmap_HO8ax7QJM.mft (raw, json)
Hash identifier: 60qwtFH2wOymKNalPkjvTzrFYhL9JJJf9rAA3XeqOQ8=
Subject key identifier: E5:88:F6:CC:53:4F:CE:30:29:7A:50:AE:D6:DC:CE:75:75:88:4C:C0
Authority key identifier: F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
Certificate issuer: /CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Certificate serial: 0194BC04D54A8230E90244002458BB19BB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: 9-CSr_r5tUhOAJmap_HO8ax7QJM.crl (hash: HUpQW/IvclVhZAo1Sy9cWOieX8u1NKw6ZFecXxFXf18=)
2: heOGsEgwvnx0rV_PQ-KerQ9C-CY.roa (hash: sP+8nNNKaPD0x4Bknlm6WIvlRad2W4u8N2Xxii0xN0U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d5:4a:82:30:e9:02:44:00:24:58:bb:19:bb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=e588f6cc534fce30297a50aed6dcce7575884cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:76:6b:75:8d:16:f9:91:1e:34:c5:74:cf:
e1:b0:98:4c:6f:e3:9b:db:3c:0d:bb:b8:21:0c:d9:
b3:07:18:7b:51:be:8f:5b:7e:ee:d4:c6:50:3b:51:
c9:9c:3c:bb:99:3f:c5:51:c4:19:fe:95:00:95:4c:
f6:61:c3:91:7e:7d:3c:96:8e:19:16:a2:29:ad:9e:
b6:71:1b:bd:9b:c2:9e:2f:9b:06:89:f0:15:41:a3:
90:43:63:81:18:5a:aa:f9:c8:61:02:5f:a6:4d:02:
8e:7e:57:00:34:ad:79:ec:0a:10:01:77:52:49:3b:
64:02:7c:f4:61:f4:31:27:0d:d7:ac:98:69:45:48:
34:95:49:e5:5a:da:5c:3a:67:c2:ed:68:44:c1:08:
58:21:6a:24:5c:2f:da:40:c9:9b:5a:f7:d4:f4:9e:
28:a2:df:1e:e0:55:33:54:95:01:14:25:86:27:7f:
13:67:9f:2a:b1:47:c4:4a:4e:6c:5d:92:30:fb:15:
99:bb:da:d0:d7:e6:a1:dd:a1:c2:05:64:e7:d8:05:
d6:3c:76:42:f1:11:c7:95:42:de:94:ef:22:12:ed:
45:2b:13:46:dd:f6:8e:96:ec:03:53:25:8d:5c:02:
10:8c:64:b0:a2:95:4b:c2:7b:ea:02:14:18:cf:82:
51:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:88:F6:CC:53:4F:CE:30:29:7A:50:AE:D6:DC:CE:75:75:88:4C:C0
X509v3 Authority Key Identifier:
keyid:F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:90:2e:90:bb:b3:b5:7d:e4:f2:88:b2:7e:96:fa:45:16:b6:
95:87:37:c4:76:5f:41:b3:92:25:31:4c:6b:f7:e4:0b:28:33:
c6:c5:71:a4:f4:af:46:71:33:3e:d7:c7:f7:78:fc:2b:5a:71:
81:7d:38:32:84:d1:71:0c:84:f1:68:19:91:f6:f0:f5:7e:dc:
46:f4:95:11:e2:e0:ff:85:0e:c1:7d:a9:4e:76:f0:e7:e4:56:
d4:fa:fa:71:bd:04:dc:22:c0:13:0c:76:ef:eb:9a:be:95:ea:
05:a0:78:b5:42:5c:b7:9b:ac:84:35:b8:28:35:c0:6a:55:88:
77:c1:ca:c4:47:59:66:b8:65:7f:4b:70:ff:9d:64:f7:8b:82:
0c:3a:e6:12:b4:39:40:40:b0:6b:73:b3:2c:35:9d:5c:25:fb:
59:f5:01:42:e1:13:66:f2:59:a8:1c:5d:d1:b0:ef:3b:74:58:
82:89:72:f3:22:25:50:02:92:2f:58:5e:32:2f:65:27:36:f7:
89:e9:0c:59:67:71:79:87:ce:bb:d1:a5:51:1d:7c:ba:af:5d:
d9:0a:71:a0:84:94:c7:a8:a2:52:76:0a:6c:85:47:06:9a:48:
75:4b:cf:09:da:2e:b0:f6:ce:65:8f:14:56:a9:76:04:51:f1:
0c:4c:4f:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BNVKgjDpAkQAJFi7GbtOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZTA5MmFmZmFmOWI1NDg0ZTAwOTk5YWE3ZjFjZWYxYWM3
YjQwOTMwHhcNMjUwMTMxMTEwMDIwWhcNMjUwMjAxMTEwMDIwWjAzMTEwLwYDVQQD
EyhlNTg4ZjZjYzUzNGZjZTMwMjk3YTUwYWVkNmRjY2U3NTc1ODg0Y2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKJ2a3WNFvmRHjTFdM/hsJhMb+Ob
2zwNu7ghDNmzBxh7Ub6PW37u1MZQO1HJnDy7mT/FUcQZ/pUAlUz2YcORfn08lo4Z
FqIprZ62cRu9m8KeL5sGifAVQaOQQ2OBGFqq+chhAl+mTQKOflcANK157AoQAXdS
STtkAnz0YfQxJw3XrJhpRUg0lUnlWtpcOmfC7WhEwQhYIWokXC/aQMmbWvfU9J4o
ot8e4FUzVJUBFCWGJ38TZ58qsUfESk5sXZIw+xWZu9rQ1+ah3aHCBWTn2AXWPHZC
8RHHlULelO8iEu1FKxNG3faOluwDUyWNXAIQjGSwopVLwnvqAhQYz4JRGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWI9sxTT84wKXpQrtbcznV1iEzAMB8GA1UdIwQY
MBaAFPfgkq/6+bVITgCZmqfxzvGse0CTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOS1DU3JfcjV0VWhPQUptYXBfSE84YXg3UUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lYzkwOTItMWJjMi00YWFkLWFkM2Et
MTBmZjllZTJhOGMyLzEvOS1DU3JfcjV0VWhPQUptYXBfSE84YXg3UUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lYzkwOTItMWJjMi00YWFkLWFkM2EtMTBmZjllZTJhOGMy
LzEvOS1DU3JfcjV0VWhPQUptYXBfSE84YXg3UUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJAukLuz
tX3k8oiyfpb6RRa2lYc3xHZfQbOSJTFMa/fkCygzxsVxpPSvRnEzPtfH93j8K1px
gX04MoTRcQyE8WgZkfbw9X7cRvSVEeLg/4UOwX2pTnbw5+RW1Pr6cb0E3CLAEwx2
7+uavpXqBaB4tUJct5ushDW4KDXAalWId8HKxEdZZrhlf0tw/51k94uCDDrmErQ5
QECwa3OzLDWdXCX7WfUBQuETZvJZqBxd0bDvO3RYgoly8yIlUAKSL1heMi9lJzb3
iekMWWdxeYfOu9GlUR18uq9d2QpxoISUx6iiUnYKbIVHBppIdUvPCdousPbOZY8U
Vql2BFHxDExPyw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:29 2025 by rpki-client