Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
File: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json)
Hash identifier: 5MWWCqB/b6jaGvs780phJt4H2Z9VSXk51Nmbozm9jHI=
Subject key identifier: 54:E5:F5:16:E9:50:91:73:B9:E7:AD:7C:CE:42:67:B6:A1:29:6C:C7
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Certificate issuer: /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial: 0194BD4E5D5906C996FB7804A302D19DAEAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
Manifest number: 0883
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: qnQlpX5cX9rGBFNYYMgVPNZ2b//IJWMklen0rmnqUtU=)
2: pkEvxsg0lyUz8ua6CoCuzxPGvFc.roa (hash: EcykeL8rqJYAw+Ypkvc2gvotxsw/oc8iK0wUO0U4PaQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5d:59:06:c9:96:fb:78:04:a3:02:d1:9d:ae:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=54e5f516e9509173b9e7ad7cce4267b6a1296cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:88:f1:2c:b7:03:33:36:84:ff:70:2c:48:
39:a8:1f:31:d3:dd:81:85:84:72:a5:0f:3a:23:82:
b8:ca:6d:b7:f5:a0:99:34:91:f5:f8:9f:ea:a2:53:
47:ca:47:95:e8:34:9c:f3:ff:18:29:68:fb:7e:11:
67:a1:1a:b8:2b:7c:48:01:8a:6f:cb:ba:52:c8:04:
b4:fb:e1:ee:f5:b3:4b:12:ab:64:14:fb:ed:c6:67:
88:30:6d:33:54:16:90:77:03:7f:f0:6f:62:09:c7:
cf:e6:49:85:2c:de:88:75:0f:f9:ba:5c:db:33:81:
e8:d4:71:b3:43:8c:8a:37:a8:f1:f5:6c:07:43:09:
52:18:9f:09:ec:d0:16:d3:84:7c:fa:de:d9:fc:5e:
6c:c2:6e:30:cd:10:4d:bc:9b:04:34:35:95:bb:64:
4e:9e:06:3b:a7:7a:71:68:84:01:ef:34:a7:5e:1b:
36:16:ba:e7:03:08:92:dd:59:2e:5a:49:ac:90:71:
ca:2b:24:fe:0c:c8:5a:91:0e:78:6b:b7:3d:e4:f3:
e8:f9:95:5b:5f:20:20:b5:c9:09:e3:4e:3d:bd:e9:
d1:7b:a0:3d:12:70:05:1a:32:40:4a:3a:15:60:81:
cb:34:bb:95:9b:70:50:08:df:09:e4:3d:7b:db:5f:
3d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E5:F5:16:E9:50:91:73:B9:E7:AD:7C:CE:42:67:B6:A1:29:6C:C7
X509v3 Authority Key Identifier:
keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:22:4b:df:a5:a7:98:d5:d6:79:f4:e8:ac:56:00:90:77:4d:
c8:49:98:f0:b1:14:90:72:18:21:f5:59:0e:79:61:0e:57:13:
02:9e:f1:c2:d2:5b:46:25:25:f1:f5:39:28:ee:b4:76:db:06:
77:04:a1:bc:75:19:6f:62:d8:b2:9d:a7:71:ba:31:93:fa:d1:
27:3b:ed:df:84:5b:c7:a7:cc:be:0b:9b:14:0d:76:a0:38:51:
df:92:f8:b7:4f:5e:7c:45:86:a3:07:10:28:46:e3:af:b2:ca:
b3:1a:bd:50:bd:9e:d5:f0:5e:7f:88:dd:2c:9f:2f:db:8a:d1:
34:34:d3:29:e7:1f:e8:84:47:56:bc:04:3e:4a:b3:43:0d:e3:
45:67:3d:1e:9f:3c:da:35:1d:08:4f:29:77:cf:a7:ca:5f:6b:
ca:f2:e2:30:b7:9e:46:03:92:c0:36:9e:71:97:84:0c:f6:98:
9e:a8:b2:0c:da:79:66:25:26:ee:8e:16:c4:bc:0a:d8:8d:fb:
d9:e2:a1:04:54:10:46:24:f5:19:2e:7c:26:48:b0:85:60:41:
fb:ce:c6:db:76:38:52:34:fa:66:45:a9:0f:19:5f:3b:41:a0:
46:fa:fc:5e:6e:86:26:bd:f6:02:11:bb:db:29:45:4d:c0:39:
95:a5:73:76
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS9Tl1ZBsmW+3gEowLRna6uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDMyOTY4YWFhYTkxOWM1Mjc5MWZmYjA3ZjkzNDM2Yjc0
ZmQ1MDgwHhcNMjUwMTMxMTcwMDE3WhcNMjUwMjAxMTcwMDE3WjAzMTEwLwYDVQQD
Eyg1NGU1ZjUxNmU5NTA5MTczYjllN2FkN2NjZTQyNjdiNmExMjk2Y2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyceI8Sy3AzM2hP9wLEg5qB8x092B
hYRypQ86I4K4ym239aCZNJH1+J/qolNHykeV6DSc8/8YKWj7fhFnoRq4K3xIAYpv
y7pSyAS0++Hu9bNLEqtkFPvtxmeIMG0zVBaQdwN/8G9iCcfP5kmFLN6IdQ/5ulzb
M4Ho1HGzQ4yKN6jx9WwHQwlSGJ8J7NAW04R8+t7Z/F5swm4wzRBNvJsENDWVu2RO
ngY7p3pxaIQB7zSnXhs2FrrnAwiS3VkuWkmskHHKKyT+DMhakQ54a7c95PPo+ZVb
XyAgtckJ4049venRe6A9EnAFGjJASjoVYIHLNLuVm3BQCN8J5D172189hQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFTl9RbpUJFzueetfM5CZ7ahKWzHMB8GA1UdIwQY
MBaAFPvTKWiqqpGcUnkf+wf5NDa3T9UIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05TXBhS3Fxa1p4U2VSXzdCX2swTnJkUDFRZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvNzIzYjE1LWZhYWMtNDFmZi1hMWFh
LTg4NzM5ZTMzNTA1My8xLzEtOU1wYUtxcWtaeFNlUl83Ql9rME5yZFAxUWcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2EwLzcyM2IxNS1mYWFjLTQxZmYtYTFhYS04ODczOWUzMzUw
NTMvMS8xLTlNcGFLcXFrWnhTZVJfN0JfazBOcmRQMVFnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5CJL
36WnmNXWefTorFYAkHdNyEmY8LEUkHIYIfVZDnlhDlcTAp7xwtJbRiUl8fU5KO60
dtsGdwShvHUZb2LYsp2ncboxk/rRJzvt34Rbx6fMvgubFA12oDhR35L4t09efEWG
owcQKEbjr7LKsxq9UL2e1fBef4jdLJ8v24rRNDTTKecf6IRHVrwEPkqzQw3jRWc9
Hp882jUdCE8pd8+nyl9ryvLiMLeeRgOSwDaecZeEDPaYnqiyDNp5ZiUm7o4WxLwK
2I372eKhBFQQRiT1GS58JkiwhWBB+87G23Y4UjT6ZkWpDxlfO0GgRvr8Xm6GJr32
AhG72ylFTcA5laVzdg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:47 2025 by rpki-client