Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
File: fZ9lKePCbtCMlfdP5j17Lush9XE.mft (raw, json)
Hash identifier: syjzpYgvrqtRM0Gbfx54L955vutDPT0TeCIx4RxKS9E=
Subject key identifier: F4:89:D2:73:DD:24:8B:CA:60:28:AF:C4:6C:1A:1E:EA:3F:79:C4:7B
Authority key identifier: 7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
Certificate issuer: /CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Certificate serial: 0194BC72AD3A729ECEA9A1AD6C88E61B2CB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
Manifest number: BD
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: 8KvlfbRq8s2GAiIRzqG7Rk422Gs.roa (hash: dNyvw6BImK/4I7a0t4iqRMr5gilh+0d+uv1VajB8u9E=)
2: fZ9lKePCbtCMlfdP5j17Lush9XE.crl (hash: tyBCdWBhCL6L1m39yktetesc99eNbkNBxN4t6eiw3Ao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ad:3a:72:9e:ce:a9:a1:ad:6c:88:e6:1b:2c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=f489d273dd248bca6028afc46c1a1eea3f79c47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:aa:90:f3:be:90:99:6f:1d:a2:c6:2e:10:
6a:87:67:9e:f1:90:d6:20:ea:a8:fc:f9:86:14:d6:
0f:22:e8:0f:77:92:d8:33:fe:25:67:8e:08:8f:45:
68:a2:f0:eb:f5:c3:f1:ca:d8:61:9b:eb:b4:97:70:
03:b5:70:7d:df:56:4a:02:f8:c9:b4:3d:93:64:8e:
28:98:8d:0b:9d:68:34:84:c9:37:ee:f3:50:15:50:
00:5d:39:09:62:04:e4:f8:73:78:54:4e:c3:23:e7:
f2:7c:8c:90:16:94:c3:d0:1f:e4:6b:cc:17:64:56:
a3:c6:8d:11:55:d0:d5:c2:26:0c:14:3c:9e:77:8c:
ab:80:83:85:ae:03:49:f3:61:4a:3d:1b:f8:6c:ee:
48:b8:79:86:fc:88:c1:f5:20:ee:67:68:8e:a7:9f:
3e:31:c7:f7:50:de:64:29:19:c8:f3:2d:bf:03:30:
4b:0b:36:08:3a:2c:bc:ec:3b:e2:91:b6:95:8a:2f:
c7:c3:a0:8f:2f:ca:cf:71:16:74:c5:57:13:1e:12:
cb:5f:98:aa:5e:5a:e4:60:04:dd:97:75:16:41:9b:
56:fd:1d:67:17:f6:84:ee:5a:30:46:c1:92:06:f5:
3f:52:ef:2e:10:f2:16:6f:a1:09:aa:9d:a6:f4:f4:
21:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:89:D2:73:DD:24:8B:CA:60:28:AF:C4:6C:1A:1E:EA:3F:79:C4:7B
X509v3 Authority Key Identifier:
keyid:7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3a:b4:35:67:22:98:ae:6f:d1:b7:3e:f4:e7:87:85:63:9e:
56:66:2e:e2:7c:0c:e6:90:dd:89:8a:55:ac:59:d3:5f:5a:16:
38:cc:c9:bb:9e:ad:ce:c2:68:40:54:aa:5e:d0:25:56:a2:bc:
b7:3c:09:65:b0:03:8f:c5:1f:d7:61:9a:e9:ab:14:d2:bc:c5:
fb:95:89:3a:21:de:62:b1:75:29:da:fe:89:17:a9:ef:bf:e5:
28:97:13:ba:aa:d6:87:25:0f:61:b8:9a:c6:80:c6:3a:05:c7:
c1:e2:1f:7c:b8:49:f8:ee:eb:fd:e5:fa:8a:43:66:49:1a:ca:
fa:51:24:fa:33:ff:d4:c8:42:c1:f0:60:70:60:c6:ec:a0:4a:
c5:7d:bd:75:15:85:e5:dc:c6:e2:58:7d:ee:61:05:61:66:03:
0c:34:e2:f4:18:87:c4:0e:15:3b:6c:a1:60:0d:56:f5:ab:dd:
b3:fb:4d:b8:df:89:20:24:f1:fb:fb:7c:83:fa:76:87:ec:2e:
6f:6a:56:24:2c:70:71:56:bc:80:b1:aa:c7:6b:be:02:f8:03:
30:b1:6d:fc:d5:82:e1:33:b9:5b:06:43:35:7f:67:01:2e:f5:
69:0f:f4:0d:ab:c0:2e:c9:1c:ac:23:84:b8:87:45:39:c5:34:
cd:a8:73:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cq06cp7OqaGtbIjmGyyyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkOWY2NTI5ZTNjMjZlZDA4Yzk1Zjc0ZmU2M2Q3YjJlZWIy
MWY1NzEwHhcNMjUwMTMxMTMwMDE5WhcNMjUwMjAxMTMwMDE5WjAzMTEwLwYDVQQD
EyhmNDg5ZDI3M2RkMjQ4YmNhNjAyOGFmYzQ2YzFhMWVlYTNmNzljNDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC+qkPO+kJlvHaLGLhBqh2ee8ZDW
IOqo/PmGFNYPIugPd5LYM/4lZ44Ij0VoovDr9cPxythhm+u0l3ADtXB931ZKAvjJ
tD2TZI4omI0LnWg0hMk37vNQFVAAXTkJYgTk+HN4VE7DI+fyfIyQFpTD0B/ka8wX
ZFajxo0RVdDVwiYMFDyed4yrgIOFrgNJ82FKPRv4bO5IuHmG/IjB9SDuZ2iOp58+
Mcf3UN5kKRnI8y2/AzBLCzYIOiy87DvikbaVii/Hw6CPL8rPcRZ0xVcTHhLLX5iq
XlrkYATdl3UWQZtW/R1nF/aE7lowRsGSBvU/Uu8uEPIWb6EJqp2m9PQhnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSJ0nPdJIvKYCivxGwaHuo/ecR7MB8GA1UdIwQY
MBaAFH2fZSnjwm7QjJX3T+Y9ey7rIfVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlo5bEtlUENidENNbGZkUDVqMTdMdXNoOVhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yNjdiNTEtOWFkYi00MDM4LWIyNGMt
OTI2MjQwYWE1ZjA1LzEvZlo5bEtlUENidENNbGZkUDVqMTdMdXNoOVhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8yNjdiNTEtOWFkYi00MDM4LWIyNGMtOTI2MjQwYWE1ZjA1
LzEvZlo5bEtlUENidENNbGZkUDVqMTdMdXNoOVhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjq0NWci
mK5v0bc+9OeHhWOeVmYu4nwM5pDdiYpVrFnTX1oWOMzJu56tzsJoQFSqXtAlVqK8
tzwJZbADj8Uf12Ga6asU0rzF+5WJOiHeYrF1Kdr+iRep77/lKJcTuqrWhyUPYbia
xoDGOgXHweIffLhJ+O7r/eX6ikNmSRrK+lEk+jP/1MhCwfBgcGDG7KBKxX29dRWF
5dzG4lh97mEFYWYDDDTi9BiHxA4VO2yhYA1W9avds/tNuN+JICTx+/t8g/p2h+wu
b2pWJCxwcVa8gLGqx2u+AvgDMLFt/NWC4TO5WwZDNX9nAS71aQ/0DavALskcrCOE
uIdFOcU0zahzaw==
-----END CERTIFICATE-----
Generated at Thu May 1 07:08:23 2025 by rpki-client