Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
File: 9EufgJPdiJ5HfO-np1VjkqZrOHA.mft (raw, json)
Hash identifier: 620zymfWchIOk7DX91WAqgTLElv+s6d66lCalX6xdl4=
Subject key identifier: C4:A9:CF:64:45:15:43:EB:A7:AD:AA:C4:21:5F:49:5A:AE:3C:F4:83
Authority key identifier: F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
Certificate issuer: /CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Certificate serial: 0194BBCE3FAF345880EC39DF3674DDD97409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
Manifest number: 0949
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: 2iT_kM3PkUEf8NeJ29enDVY5XmM.roa (hash: Dzh4bklpE4pirUMSN3Hq/Ic2ypp5OVgKHU7vTB3ErEs=)
2: 9EufgJPdiJ5HfO-np1VjkqZrOHA.crl (hash: IOr8Ysf1nDWYKIIPOMyRMdou1Yzf3tzx40UZN6G36uc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3f:af:34:58:80:ec:39:df:36:74:dd:d9:74:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=c4a9cf64451543eba7adaac4215f495aae3cf483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d0:d2:4a:09:bb:65:5f:45:43:8d:82:19:87:
6b:c7:db:93:b7:de:14:20:34:52:86:4b:41:88:95:
69:10:0c:24:d7:fb:69:23:3b:3c:9e:5f:b0:51:0b:
5d:55:9b:43:84:c0:f3:59:d3:f8:dd:a5:cb:1b:4a:
f2:31:fe:0e:72:18:5f:8e:64:eb:5e:1f:75:15:0c:
a4:d5:b3:91:4b:a4:dc:00:8e:8d:e1:1f:3c:53:b5:
5e:03:c0:18:bc:30:60:22:4d:c3:89:98:27:da:49:
47:d3:f4:99:4f:99:51:ce:1d:d6:74:d3:ba:93:82:
01:79:ab:9a:b3:ab:f2:d7:ff:d3:52:48:2f:29:33:
9c:d0:c5:d0:24:19:68:2b:a3:19:45:6e:5b:4e:98:
b8:db:3b:fa:75:7b:5c:f9:56:80:61:92:29:c4:9b:
1c:fd:d9:d0:23:fa:02:7c:b2:25:72:a5:05:99:87:
cb:7d:6f:05:18:f8:29:19:54:75:52:47:c9:3b:d6:
1a:0f:82:f9:6d:97:d0:55:8b:a6:1f:a6:a4:dd:d2:
5c:f7:4a:77:ea:7c:90:11:44:02:d1:ed:f1:0a:7a:
f0:cc:d3:67:dc:ff:fb:7b:14:20:9f:08:c7:19:aa:
c4:06:40:fb:79:05:3a:4c:7f:85:92:1b:7b:56:92:
e1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A9:CF:64:45:15:43:EB:A7:AD:AA:C4:21:5F:49:5A:AE:3C:F4:83
X509v3 Authority Key Identifier:
keyid:F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7e:8e:31:2a:56:3e:d9:d2:6f:d0:6e:05:bb:0c:4b:9a:0d:
6e:73:ad:94:16:79:60:91:11:70:56:c6:6a:ca:18:ec:e8:0b:
a5:62:e9:18:13:1d:88:b8:da:5c:9d:ac:92:2e:85:da:6b:b4:
14:11:0a:d3:4e:8e:d1:2f:3b:e2:af:8a:58:62:9e:01:5f:4b:
f2:c4:c2:01:89:d8:93:3d:94:96:09:87:60:50:49:c8:e8:58:
25:9a:ea:c4:da:59:c1:0a:a3:69:cf:5a:b4:2c:12:9b:61:69:
6e:e0:58:66:ce:40:f8:29:4d:d9:b0:2a:22:58:2e:ee:e1:54:
b9:f7:9f:10:71:9e:76:46:72:67:03:57:ae:2b:59:b2:6e:5e:
2f:e5:e4:1f:e6:8a:be:af:71:3d:65:a7:08:b1:c3:71:e7:5f:
ef:31:9b:6b:23:fe:ef:4d:1c:f7:0b:b5:b5:84:b2:a0:78:57:
4d:25:0f:93:7a:5d:21:0e:1b:3b:c3:37:9e:03:03:84:85:70:
9e:bd:dd:80:6e:2f:ef:66:ab:62:48:97:8b:e1:5f:85:ce:af:
81:6b:ba:7c:4a:94:01:3d:ce:a8:66:73:66:5f:a3:5b:94:53:
cb:a2:4c:6a:d1:ba:33:83:6e:89:6a:d7:be:e1:5c:6b:e1:0d:
f1:ce:56:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zj+vNFiA7DnfNnTd2XQJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NGI5ZjgwOTNkZDg4OWU0NzdjZWZhN2E3NTU2MzkyYTY2
YjM4NzAwHhcNMjUwMTMxMTAwMDQzWhcNMjUwMjAxMTAwMDQzWjAzMTEwLwYDVQQD
EyhjNGE5Y2Y2NDQ1MTU0M2ViYTdhZGFhYzQyMTVmNDk1YWFlM2NmNDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNDSSgm7ZV9FQ42CGYdrx9uTt94U
IDRShktBiJVpEAwk1/tpIzs8nl+wUQtdVZtDhMDzWdP43aXLG0ryMf4OchhfjmTr
Xh91FQyk1bORS6TcAI6N4R88U7VeA8AYvDBgIk3DiZgn2klH0/SZT5lRzh3WdNO6
k4IBeauas6vy1//TUkgvKTOc0MXQJBloK6MZRW5bTpi42zv6dXtc+VaAYZIpxJsc
/dnQI/oCfLIlcqUFmYfLfW8FGPgpGVR1UkfJO9YaD4L5bZfQVYumH6ak3dJc90p3
6nyQEUQC0e3xCnrwzNNn3P/7exQgnwjHGarEBkD7eQU6TH+Fkht7VpLhewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSpz2RFFUPrp62qxCFfSVquPPSDMB8GA1UdIwQY
MBaAFPRLn4CT3YieR3zvp6dVY5KmazhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUV1ZmdKUGRpSjVIZk8tbnAxVmprcVpyT0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lYTE5ZjgtN2RkMi00MjlkLTk3MTgt
MTAzYjA0ODUyMDNiLzEvOUV1ZmdKUGRpSjVIZk8tbnAxVmprcVpyT0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9lYTE5ZjgtN2RkMi00MjlkLTk3MTgtMTAzYjA0ODUyMDNi
LzEvOUV1ZmdKUGRpSjVIZk8tbnAxVmprcVpyT0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASn6OMSpW
PtnSb9BuBbsMS5oNbnOtlBZ5YJERcFbGasoY7OgLpWLpGBMdiLjaXJ2ski6F2mu0
FBEK006O0S874q+KWGKeAV9L8sTCAYnYkz2UlgmHYFBJyOhYJZrqxNpZwQqjac9a
tCwSm2FpbuBYZs5A+ClN2bAqIlgu7uFUufefEHGedkZyZwNXritZsm5eL+XkH+aK
vq9xPWWnCLHDcedf7zGbayP+700c9wu1tYSyoHhXTSUPk3pdIQ4bO8M3ngMDhIVw
nr3dgG4v72arYkiXi+Ffhc6vgWu6fEqUAT3OqGZzZl+jW5RTy6JMatG6M4NuiWrX
vuFca+EN8c5WCA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:15 2025 by rpki-client