Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
File: 9KvMeaNn2cASwWhKhCKZbNxD3nY.mft (raw, json)
Hash identifier: BcbHZPtEwDelc6Qm6ll+N4+9V/1o/4++hWwRMJDxULk=
Subject key identifier: 31:3A:28:AF:47:9C:02:D0:0C:B9:28:74:CC:0C:FE:64:4B:1C:7A:C0
Authority key identifier: F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
Certificate issuer: /CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Certificate serial: 0194BCAA3074C230E054778E3E2248506018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
Manifest number: 0249
Signing time: Fri 31 Jan 2025 14:00:57 +0000
Manifest this update: Fri 31 Jan 2025 14:00:57 +0000
Manifest next update: Sat 01 Feb 2025 14:00:57 +0000
Files and hashes: 1: 6vjl9U2iQ2PU377HYgeQNGNavVA.roa (hash: 9lo8xMTqnMTjqGzAvxVHUfsjdWxdily2JUl3SHSBWVE=)
2: 9KvMeaNn2cASwWhKhCKZbNxD3nY.crl (hash: NboBuXTQf+/4HAozTv6WmhNBSu4po/S8Icw2DJhmzQQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:30:74:c2:30:e0:54:77:8e:3e:22:48:50:60:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Validity
Not Before: Jan 31 14:00:57 2025 GMT
Not After : Feb 1 14:00:57 2025 GMT
Subject: CN=313a28af479c02d00cb92874cc0cfe644b1c7ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:6b:50:b4:2d:59:c4:05:a2:ee:10:8a:81:
5a:36:53:23:a8:e2:7f:56:1f:d7:6e:3f:97:8a:35:
a1:d6:d1:28:aa:ee:0b:0f:3b:f6:30:3f:6e:55:61:
72:23:33:1c:dd:82:97:e7:28:ef:6c:de:20:88:e1:
9d:80:15:55:ea:e1:6f:27:44:4a:fa:a9:65:7d:bb:
61:c9:e8:61:9a:6e:50:3f:07:76:3e:21:02:80:cb:
3f:99:dc:26:30:7d:d6:34:b5:44:c0:b9:89:cf:66:
46:40:e2:5a:c2:71:7e:93:09:3d:fe:c7:33:19:d8:
69:69:00:05:14:8f:43:0c:39:63:7b:c3:eb:c9:0c:
ff:63:1f:a6:74:d4:e6:92:1f:4e:28:74:33:d5:dd:
fd:3b:c4:33:64:04:10:be:11:77:eb:33:b8:34:80:
30:a8:4d:0e:3d:08:c5:27:36:a2:f1:de:a7:aa:fa:
ee:e4:01:c7:f2:ee:0b:72:cd:b7:bd:b1:13:e0:e5:
6a:24:d2:bd:7e:86:32:e5:c7:2c:c8:98:63:b7:f8:
ef:72:74:03:27:bb:0b:71:67:c8:fc:5f:15:b0:61:
b4:a7:14:08:ac:ed:75:59:d5:38:7b:e0:be:df:e0:
a3:96:18:fe:be:fb:14:cc:7b:ff:47:b4:91:36:6c:
6e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3A:28:AF:47:9C:02:D0:0C:B9:28:74:CC:0C:FE:64:4B:1C:7A:C0
X509v3 Authority Key Identifier:
keyid:F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ee:29:f0:cf:00:cd:1d:77:13:92:ef:93:d2:fb:c5:46:f3:
76:f4:de:41:7f:56:cf:4c:eb:e2:97:aa:9f:23:ae:c1:b2:2b:
ed:8a:b9:20:05:81:db:ea:0c:d7:9a:5d:dc:c3:11:54:e5:df:
ee:21:96:38:a8:d8:d0:0e:40:ec:6a:02:89:b2:bd:78:09:c9:
33:b7:b9:74:25:58:d8:a4:f5:1c:1a:81:f3:bd:34:09:49:1a:
99:98:a0:f4:0b:51:20:77:6a:a8:f2:9c:79:c3:1e:34:5a:90:
9c:5a:40:3d:b1:18:0c:45:69:ba:41:44:1f:92:a6:b1:88:94:
10:38:44:0e:2a:21:f6:30:09:53:a4:50:25:dd:dc:19:4c:b6:
3e:01:6c:85:9d:8c:f7:43:1f:4a:1c:c6:76:10:1f:d3:34:ff:
06:11:18:5e:17:0d:9b:58:84:7d:48:08:3d:59:07:1d:21:84:
5a:96:0e:98:a1:53:a3:21:7f:c7:fe:ca:99:a1:c8:eb:9c:c9:
17:03:8d:96:7e:81:ee:8c:15:03:fe:a0:1e:02:ba:c7:01:b2:
04:6a:b7:f8:b4:7b:36:9e:d2:76:03:23:57:6f:50:9b:11:c6:
7e:35:75:28:3f:fb:00:57:89:a5:d5:df:57:22:bd:82:06:6a:
0f:96:e9:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qjB0wjDgVHeOPiJIUGAYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YWJjYzc5YTM2N2Q5YzAxMmMxNjg0YTg0MjI5OTZjZGM0
M2RlNzYwHhcNMjUwMTMxMTQwMDU3WhcNMjUwMjAxMTQwMDU3WjAzMTEwLwYDVQQD
EygzMTNhMjhhZjQ3OWMwMmQwMGNiOTI4NzRjYzBjZmU2NDRiMWM3YWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqlrULQtWcQFou4QioFaNlMjqOJ/
Vh/Xbj+XijWh1tEoqu4LDzv2MD9uVWFyIzMc3YKX5yjvbN4giOGdgBVV6uFvJ0RK
+qllfbthyehhmm5QPwd2PiECgMs/mdwmMH3WNLVEwLmJz2ZGQOJawnF+kwk9/scz
GdhpaQAFFI9DDDlje8PryQz/Yx+mdNTmkh9OKHQz1d39O8QzZAQQvhF36zO4NIAw
qE0OPQjFJzai8d6nqvru5AHH8u4Lcs23vbET4OVqJNK9foYy5ccsyJhjt/jvcnQD
J7sLcWfI/F8VsGG0pxQIrO11WdU4e+C+3+Cjlhj+vvsUzHv/R7SRNmxunwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDE6KK9HnALQDLkodMwM/mRLHHrAMB8GA1UdIwQY
MBaAFPSrzHmjZ9nAEsFoSoQimWzcQ952MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUt2TWVhTm4yY0FTd1doS2hDS1piTnhEM25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84OGJmMWUtZDljNS00ZDI0LTk0Yjgt
ZGU0NGVlODE0NzBiLzEvOUt2TWVhTm4yY0FTd1doS2hDS1piTnhEM25ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi84OGJmMWUtZDljNS00ZDI0LTk0YjgtZGU0NGVlODE0NzBi
LzEvOUt2TWVhTm4yY0FTd1doS2hDS1piTnhEM25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGu4p8M8A
zR13E5Lvk9L7xUbzdvTeQX9Wz0zr4peqnyOuwbIr7Yq5IAWB2+oM15pd3MMRVOXf
7iGWOKjY0A5A7GoCibK9eAnJM7e5dCVY2KT1HBqB8700CUkamZig9AtRIHdqqPKc
ecMeNFqQnFpAPbEYDEVpukFEH5KmsYiUEDhEDioh9jAJU6RQJd3cGUy2PgFshZ2M
90MfShzGdhAf0zT/BhEYXhcNm1iEfUgIPVkHHSGEWpYOmKFToyF/x/7KmaHI65zJ
FwONln6B7owVA/6gHgK6xwGyBGq3+LR7Np7SdgMjV29QmxHGfjV1KD/7AFeJpdXf
VyK9ggZqD5bp2A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:37 2025 by rpki-client