Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft
File: 9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft (raw, json)
Hash identifier: 02THlfpit0dk7SrgJVKVwUkV2f2WIkXUmo+S6hG4ipw=
Subject key identifier: 3A:27:6F:B8:17:C8:E3:D4:1C:EB:BF:3E:D0:35:EF:BE:E8:4C:04:BC
Authority key identifier: F5:4B:FB:01:B0:3C:AA:6F:CE:88:7B:43:84:25:3D:B2:0E:59:FA:71
Certificate issuer: /CN=f54bfb01b03caa6fce887b4384253db20e59fa71
Certificate serial: 0194BD85AC580DA05666B81CF8FCC62239D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: 9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl (hash: u05tzgqjC2dIzdyfbvM8uWteg8npfBse+ud8BnMNeaI=)
2: V341t6lFU17La723o82yJ0OztQk.roa (hash: 5ZnBvoWyakZy583RsB0+KziGW81oXH+bvf5OC8lpqqA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ac:58:0d:a0:56:66:b8:1c:f8:fc:c6:22:39:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54bfb01b03caa6fce887b4384253db20e59fa71
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=3a276fb817c8e3d41cebbf3ed035efbee84c04bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d9:e8:48:d6:97:2c:e3:4f:f9:05:43:d8:e2:
61:98:bc:49:9f:db:98:c6:a1:1b:63:6e:9f:52:bd:
af:37:99:cb:d5:a4:b5:98:5f:2e:40:0d:4e:d0:cb:
5e:db:d4:02:4d:c2:f5:f1:d7:19:80:e2:68:3b:86:
8d:21:3f:a3:91:7d:58:f8:7a:bc:ec:7f:10:79:03:
7d:07:9d:1a:9b:55:90:8b:78:ba:47:a8:c4:40:b6:
a0:37:14:6c:4d:6a:bd:f9:5e:30:27:c4:33:13:47:
5e:bd:b3:42:1c:30:d3:cc:ec:4e:fa:6a:86:47:03:
c8:ff:eb:68:ad:6d:17:ca:9c:5d:13:4a:c4:e6:8c:
6c:fb:1d:60:11:45:8d:88:b3:9d:ca:3a:1c:cd:08:
f3:df:ea:a5:35:7d:2d:e3:cc:0f:09:2f:1f:ec:f4:
a2:d3:ea:bd:90:cf:4c:36:e9:b1:9d:4f:20:18:52:
93:7a:06:36:18:0a:20:48:45:ab:b2:3f:f6:0f:5d:
af:9a:46:51:88:04:7c:f8:a6:a9:3a:7e:30:35:c6:
15:03:f0:2e:22:c0:e0:05:d6:5e:c6:a5:da:3d:25:
e3:ad:df:f6:53:94:27:79:65:6d:fc:0e:76:cc:60:
78:48:2d:f4:b0:ce:0e:de:09:ed:13:79:b7:6a:ec:
66:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:27:6F:B8:17:C8:E3:D4:1C:EB:BF:3E:D0:35:EF:BE:E8:4C:04:BC
X509v3 Authority Key Identifier:
keyid:F5:4B:FB:01:B0:3C:AA:6F:CE:88:7B:43:84:25:3D:B2:0E:59:FA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e8:50:82:03:41:d3:fe:04:6b:36:06:7d:ba:88:b0:ae:b6:
cf:c6:20:3e:0c:09:1c:ac:03:cd:ac:26:d6:16:fe:11:10:fc:
54:52:73:b4:ce:19:f0:9e:00:13:50:c9:18:1b:25:97:ef:72:
e1:48:d9:7e:23:48:cf:33:55:32:40:f6:45:11:d3:13:42:53:
d7:f0:91:20:72:3c:6d:aa:17:51:bf:79:42:cc:95:12:c6:3e:
96:82:e9:de:d6:6a:46:be:a6:fe:e5:94:1d:3d:dc:c4:c4:f4:
3b:a4:63:1d:fc:28:1d:85:df:9a:07:99:c8:7b:61:fb:f3:27:
e6:89:86:39:d6:dd:01:40:4c:db:77:4d:ee:40:1b:dd:5e:3c:
83:51:4f:e2:4b:76:7a:65:53:85:ea:67:3b:89:77:ec:69:86:
97:3e:97:c7:e6:b4:d0:01:05:32:99:88:fb:c1:3c:9e:79:e6:
af:47:8d:ed:d6:b8:ae:44:74:cf:3c:0a:61:60:37:cf:b4:ea:
b8:b9:c8:2d:13:a4:e9:18:37:31:66:40:e7:0d:c4:2f:88:ce:
62:a5:d2:49:e6:ee:c6:50:d9:0e:27:cc:3b:bc:38:c0:d8:bc:
30:bd:14:c1:38:2d:56:ca:75:9a:bd:99:fd:c7:02:6d:57:9d:
81:67:4d:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9haxYDaBWZrgc+PzGIjnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NGJmYjAxYjAzY2FhNmZjZTg4N2I0Mzg0MjUzZGIyMGU1
OWZhNzEwHhcNMjUwMTMxMTgwMDQxWhcNMjUwMjAxMTgwMDQxWjAzMTEwLwYDVQQD
EygzYTI3NmZiODE3YzhlM2Q0MWNlYmJmM2VkMDM1ZWZiZWU4NGMwNGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtnoSNaXLONP+QVD2OJhmLxJn9uY
xqEbY26fUr2vN5nL1aS1mF8uQA1O0Mte29QCTcL18dcZgOJoO4aNIT+jkX1Y+Hq8
7H8QeQN9B50am1WQi3i6R6jEQLagNxRsTWq9+V4wJ8QzE0devbNCHDDTzOxO+mqG
RwPI/+torW0XypxdE0rE5oxs+x1gEUWNiLOdyjoczQjz3+qlNX0t48wPCS8f7PSi
0+q9kM9MNumxnU8gGFKTegY2GAogSEWrsj/2D12vmkZRiAR8+KapOn4wNcYVA/Au
IsDgBdZexqXaPSXjrd/2U5QneWVt/A52zGB4SC30sM4O3gntE3m3auxmfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDonb7gXyOPUHOu/PtA1777oTAS8MB8GA1UdIwQY
MBaAFPVL+wGwPKpvzoh7Q4QlPbIOWfpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVV2N0FiQThxbV9PaUh0RGhDVTlzZzVaLW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lNWU2ODktYzU4YS00ZTg2LWJmOGIt
YWMwNTk4ZWMzNDJmLzEvOVV2N0FiQThxbV9PaUh0RGhDVTlzZzVaLW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9lNWU2ODktYzU4YS00ZTg2LWJmOGItYWMwNTk4ZWMzNDJm
LzEvOVV2N0FiQThxbV9PaUh0RGhDVTlzZzVaLW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbuhQggNB
0/4EazYGfbqIsK62z8YgPgwJHKwDzawm1hb+ERD8VFJztM4Z8J4AE1DJGBsll+9y
4UjZfiNIzzNVMkD2RRHTE0JT1/CRIHI8baoXUb95QsyVEsY+loLp3tZqRr6m/uWU
HT3cxMT0O6RjHfwoHYXfmgeZyHth+/Mn5omGOdbdAUBM23dN7kAb3V48g1FP4kt2
emVThepnO4l37GmGlz6Xx+a00AEFMpmI+8E8nnnmr0eN7da4rkR0zzwKYWA3z7Tq
uLnILROk6Rg3MWZA5w3EL4jOYqXSSebuxlDZDifMO7w4wNi8ML0UwTgtVsp1mr2Z
/ccCbVedgWdNig==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:54:54 2025 by rpki-client