Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
File: pH9wjDSl5x2vPS5UuZq3Twae-As.mft (raw, json)
Hash identifier: RcrCELFVLblbuGOoNznSCHBzTlrL+Z3z3i6U+M0Ru7s=
Subject key identifier: 45:B4:F9:BF:91:6F:9F:30:13:D0:4C:BA:96:9C:5C:E7:20:D7:BB:F9
Authority key identifier: A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
Certificate issuer: /CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Certificate serial: 0194BC73224221A6A90A73C5953D585D52F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
Manifest number: 09C4
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: 6y2PxXoNf17k752-h-Vh6181ybg.roa (hash: /D4LWQIJRMeiTsLLzqJFb6QygqeaBkt1FMx26cAAcmk=)
2: Uxq2zaQ3C0F2KaVo_-rxCUMMpzU.roa (hash: VbEHRBQ6CnI3V57/ypd9YP2tAsM8cgW+F1+a7XG3s5Q=)
3: pH9wjDSl5x2vPS5UuZq3Twae-As.crl (hash: R24r/0QVlQkGNk7XAHERJlvlkN2+j1jDG9U1Q2WfdmY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:22:42:21:a6:a9:0a:73:c5:95:3d:58:5d:52:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=45b4f9bf916f9f3013d04cba969c5ce720d7bbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bb:77:32:da:24:fb:98:38:2c:aa:15:4b:25:
be:0f:66:39:2c:db:29:71:67:24:03:30:96:6b:79:
da:c0:b3:a7:57:66:05:dd:59:49:15:0d:ce:04:89:
26:80:f4:56:ff:4f:46:97:2e:0e:77:40:9a:7f:ee:
32:fe:9a:d2:85:b7:4a:b6:58:71:c7:ff:1c:5a:0f:
3b:e3:22:fe:9b:be:41:9e:a8:1b:d5:aa:d5:57:8d:
c6:7c:5c:bf:8b:a2:28:fa:1e:f2:a0:7b:01:ba:b2:
68:f1:8c:2a:93:da:95:91:4c:3d:c5:98:d5:e4:ae:
63:c3:ba:61:71:4d:0c:67:63:38:4a:25:dc:d3:ab:
f7:d1:a5:6a:27:39:3f:af:fd:2f:a6:9f:85:3a:0e:
4e:3c:ad:46:99:0f:85:49:be:50:c3:fd:6e:83:62:
6d:02:5a:e7:d9:b9:ce:68:a0:07:de:c3:ed:48:54:
9c:dd:28:4a:81:e3:79:e4:67:03:88:55:9f:8f:28:
d0:3a:68:f0:96:67:d1:8c:22:e5:85:61:d8:53:f2:
0b:cc:6f:0d:da:7c:21:01:78:91:4c:1b:07:69:5f:
6d:2b:bc:76:e5:8c:c5:fc:c3:b3:d9:33:58:ea:85:
cb:15:65:88:be:42:85:ae:b8:b3:1d:ce:39:da:4a:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B4:F9:BF:91:6F:9F:30:13:D0:4C:BA:96:9C:5C:E7:20:D7:BB:F9
X509v3 Authority Key Identifier:
keyid:A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e9:80:42:d5:61:8d:98:d2:bb:9f:a3:10:b1:ca:61:0f:f5:
fe:85:e1:54:67:41:f1:05:f6:80:6f:2b:03:98:9a:74:c3:0e:
dd:a2:e9:a5:b9:95:99:55:55:77:13:da:96:f6:f4:30:cd:54:
54:54:ea:46:49:20:40:bc:f9:40:42:67:af:5f:ca:d1:a0:ca:
f6:8b:fb:25:63:c3:d0:d4:6e:35:03:bb:db:d0:3a:7f:7e:39:
5a:a6:4a:3e:90:09:90:b8:fd:f4:dc:35:a2:3b:23:82:16:b2:
89:96:49:a0:06:03:d6:07:5f:57:42:01:e8:88:b6:43:84:d2:
1a:c2:15:e5:bf:7e:f5:64:a6:c6:f9:38:ee:de:62:90:85:66:
26:f5:a8:ef:d8:49:6a:bb:5a:2f:84:0f:46:3b:30:f3:a0:f6:
50:6b:6d:a6:08:82:4c:fd:8c:aa:20:f8:8e:9c:bc:96:f7:aa:
26:e5:35:0c:c4:05:d4:0f:4f:6c:d2:fa:b9:48:51:70:00:7a:
1d:f7:09:40:d1:ae:2b:63:6c:55:07:df:2c:51:3e:0f:8f:bd:
9d:d8:3f:7f:61:15:8b:d9:03:1c:9b:89:ce:19:ae:d9:24:39:
0d:4d:97:2b:bd:21:ff:54:6e:a2:95:95:dd:81:fa:79:7b:e5:
bf:b6:39:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyJCIaapCnPFlT1YXVL2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0N2Y3MDhjMzRhNWU3MWRhZjNkMmU1NGI5OWFiNzRmMDY5
ZWY4MGIwHhcNMjUwMTMxMTMwMDQ5WhcNMjUwMjAxMTMwMDQ5WjAzMTEwLwYDVQQD
Eyg0NWI0ZjliZjkxNmY5ZjMwMTNkMDRjYmE5NjljNWNlNzIwZDdiYmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bt3Mtok+5g4LKoVSyW+D2Y5LNsp
cWckAzCWa3nawLOnV2YF3VlJFQ3OBIkmgPRW/09Gly4Od0Caf+4y/prShbdKtlhx
x/8cWg874yL+m75Bnqgb1arVV43GfFy/i6Io+h7yoHsBurJo8Ywqk9qVkUw9xZjV
5K5jw7phcU0MZ2M4SiXc06v30aVqJzk/r/0vpp+FOg5OPK1GmQ+FSb5Qw/1ug2Jt
Alrn2bnOaKAH3sPtSFSc3ShKgeN55GcDiFWfjyjQOmjwlmfRjCLlhWHYU/ILzG8N
2nwhAXiRTBsHaV9tK7x25YzF/MOz2TNY6oXLFWWIvkKFrrizHc452koc2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEW0+b+Rb58wE9BMupacXOcg17v5MB8GA1UdIwQY
MBaAFKR/cIw0pecdrz0uVLmat08GnvgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEg5d2pEU2w1eDJ2UFM1VXVacTNUd2FlLUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8wMTlhMWUtYmU5OC00MTRjLThjMmMt
NmIyN2ZmMjI1N2M2LzEvcEg5d2pEU2w1eDJ2UFM1VXVacTNUd2FlLUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8wMTlhMWUtYmU5OC00MTRjLThjMmMtNmIyN2ZmMjI1N2M2
LzEvcEg5d2pEU2w1eDJ2UFM1VXVacTNUd2FlLUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOmAQtVh
jZjSu5+jELHKYQ/1/oXhVGdB8QX2gG8rA5iadMMO3aLppbmVmVVVdxPalvb0MM1U
VFTqRkkgQLz5QEJnr1/K0aDK9ov7JWPD0NRuNQO729A6f345WqZKPpAJkLj99Nw1
ojsjghayiZZJoAYD1gdfV0IB6Ii2Q4TSGsIV5b9+9WSmxvk47t5ikIVmJvWo79hJ
artaL4QPRjsw86D2UGttpgiCTP2MqiD4jpy8lveqJuU1DMQF1A9PbNL6uUhRcAB6
HfcJQNGuK2NsVQffLFE+D4+9ndg/f2EVi9kDHJuJzhmu2SQ5DU2XK70h/1RuopWV
3YH6eXvlv7Y5ng==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:24 2025 by rpki-client