
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.mft
File: x9uZhsBTq3lIoSw9DITO65Om1j0.mft (raw, json)
Hash identifier: +k+9KOJae2EAMtWjwSFjW4LLaPEeIzcKdXJ7XLhvEb0=
Subject key identifier: AE:2B:14:37:A5:8F:E9:98:E9:86:60:A2:F6:3D:90:0C:8F:41:82:90
Authority key identifier: C7:DB:99:86:C0:53:AB:79:48:A1:2C:3D:0C:84:CE:EB:93:A6:D6:3D
Certificate issuer: /CN=c7db9986c053ab7948a12c3d0c84ceeb93a6d63d
Certificate serial: 0194BBCDB4511C80A70769E831452633406B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9uZhsBTq3lIoSw9DITO65Om1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: P-wj_vrRcbXiIB_5K8UUWmn7wtA.roa (hash: DBiwTIAVoLlTcU9IX3rDmcOWHkGERlsL2UhqGoUcwKc=)
2: x9uZhsBTq3lIoSw9DITO65Om1j0.crl (hash: RBlxYMIamX0PINh4qyVKVdDj9cHu5lBA3ZQ8YveUrCU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b4:51:1c:80:a7:07:69:e8:31:45:26:33:40:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db9986c053ab7948a12c3d0c84ceeb93a6d63d
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=ae2b1437a58fe998e98660a2f63d900c8f418290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:29:27:ff:97:8a:cd:fe:e3:f8:e2:af:06:
09:87:96:a8:0f:a6:b1:28:50:2d:08:85:9f:f5:68:
26:ef:4a:b7:77:b1:24:92:43:a8:2c:7f:f8:9a:20:
e1:a4:b2:91:2b:33:67:32:16:f6:df:38:29:ac:5c:
c0:45:24:d8:ff:04:49:d7:be:7b:6e:1d:54:8b:78:
44:de:e0:f2:b6:3e:88:b0:fd:80:bb:e9:43:46:4d:
9a:20:ff:d9:c2:e1:a0:03:ff:54:65:17:24:54:2f:
83:05:01:4d:fa:c5:98:66:6a:8d:f0:74:e1:33:55:
88:1a:6e:f6:02:1e:27:30:3a:ad:39:6b:4e:9b:83:
3f:f3:fe:fb:09:82:da:fb:a4:7a:e3:c7:90:92:69:
17:74:12:f2:cc:7d:66:18:fb:b3:36:75:ea:e2:6d:
9e:4f:b9:f6:e3:89:7f:05:63:2a:8c:bd:0e:48:ab:
86:14:42:4e:5e:5b:02:85:bd:64:b0:8c:ea:0b:b2:
f5:ad:60:5b:ed:82:65:81:0d:27:60:9c:be:6c:e4:
15:d1:89:06:3b:a7:b4:6f:4e:74:ca:13:60:d6:5a:
fb:e3:46:18:fc:21:f0:82:9b:64:19:c3:16:ef:5a:
72:1a:2e:be:a7:08:6c:b8:95:31:49:ef:88:d8:14:
17:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2B:14:37:A5:8F:E9:98:E9:86:60:A2:F6:3D:90:0C:8F:41:82:90
X509v3 Authority Key Identifier:
keyid:C7:DB:99:86:C0:53:AB:79:48:A1:2C:3D:0C:84:CE:EB:93:A6:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9uZhsBTq3lIoSw9DITO65Om1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:16:bd:e8:cd:16:9f:d7:cc:7f:7f:93:f8:ee:39:fe:bf:1f:
b5:12:f0:a6:7d:9b:c6:e0:6a:32:bf:83:8c:e4:58:b9:68:2b:
18:a4:11:cc:a0:1a:80:06:dc:82:11:4f:30:4a:9e:98:4d:a7:
ee:58:d4:52:c1:90:52:64:c2:04:43:87:eb:ca:87:97:92:6e:
5b:cd:da:01:ce:1e:a8:bb:fc:89:d5:e3:9c:e2:bd:eb:cb:b6:
f8:34:84:a5:3a:75:b4:65:3c:c7:9f:f9:a3:6b:03:ac:b3:94:
5b:21:35:bf:a3:c1:29:a6:48:4c:dc:a5:7c:14:d9:04:63:31:
77:88:16:a0:42:ca:a2:74:e7:33:81:40:12:6e:b1:16:26:53:
54:86:a5:00:8d:4b:22:d6:8a:c8:ad:d2:a0:25:43:27:1e:00:
ff:04:77:7b:d2:f3:93:39:2e:bf:f2:28:15:00:d0:17:8a:96:
18:d0:80:cd:af:98:0a:53:f4:3c:0e:2a:63:aa:94:8f:04:ea:
e3:c0:25:34:3e:61:e3:57:1c:b7:aa:6e:f3:bb:7b:5c:69:d0:
2c:93:72:f3:70:28:60:a0:31:86:6e:a9:92:f5:38:17:5f:93:
ba:e0:67:80:6c:22:b5:92:dd:37:45:1c:25:4e:21:e6:80:e1:
a0:65:90:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:11 2025 by rpki-client