Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json)
Hash identifier: 5t3GfpWNcoPa2HkqIApbwtjddMod2WMEMGZnyL+spb8=
Subject key identifier: 75:5C:7C:85:58:89:F8:79:1C:16:8A:F3:E5:DE:71:8B:CD:C1:CA:3A
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Certificate issuer: /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial: 0194BBCDF457A80D24B624516BF8A035A246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
Manifest number: 09F2
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: fiYkLuTCUWBeS6Vn0ziAFzXb2t4Zo1wz7MeUQ+vMnXo=)
2: HnZ1VjQW735MMUi4UDqiepCAdeM.roa (hash: 31a3rYl8qptlSMbknXPbZIkMQ7iUM4ri0d4GzZPfheM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f4:57:a8:0d:24:b6:24:51:6b:f8:a0:35:a2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=755c7c855889f8791c168af3e5de718bcdc1ca3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:30:8b:f9:b1:32:17:13:7e:03:3b:7a:b2:c8:
03:f9:d0:b2:2f:5c:b6:37:cd:1f:03:88:9b:51:91:
16:1f:ba:d0:04:e9:63:04:fb:c1:87:82:c9:f2:f1:
e3:70:9d:5b:91:79:83:fb:53:9a:4d:99:72:da:d3:
b1:89:aa:1c:8c:42:ec:08:ed:11:22:31:4d:c2:fa:
3b:5e:e3:3a:89:ef:3e:c6:b9:01:d2:16:cc:23:21:
6f:00:2e:4f:43:fa:a7:cd:98:d6:63:7a:73:09:98:
e0:5a:57:bf:7a:89:44:61:e6:fb:b7:dd:29:fa:82:
9f:9e:0b:8d:1d:bf:cf:73:ec:e6:ea:f3:9a:e3:b6:
07:d0:f2:56:ed:7f:d2:d1:0b:41:31:76:6c:c1:36:
f3:75:3c:a6:e0:a0:f3:f9:a0:47:36:d7:0e:e0:41:
9a:5b:ef:d9:8e:44:73:37:ca:cd:58:d9:11:bd:3d:
43:80:f2:aa:8d:1a:45:2c:47:38:8b:13:77:f1:96:
97:9d:8f:ee:46:ed:f5:fe:e8:d9:34:a2:84:89:76:
e6:6c:32:2e:9f:b4:1a:c0:46:57:69:7d:30:26:52:
47:70:d6:c6:6c:29:84:37:96:0a:b3:91:1a:c1:e3:
bb:aa:8b:23:68:0b:44:9f:ca:3e:3f:52:c4:17:64:
77:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5C:7C:85:58:89:F8:79:1C:16:8A:F3:E5:DE:71:8B:CD:C1:CA:3A
X509v3 Authority Key Identifier:
keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1b:86:c4:19:6b:7e:ff:d7:d0:06:93:07:a7:b6:95:cf:0e:
a5:fe:3b:97:15:95:7d:a4:28:ff:e4:8c:ca:0b:00:56:5a:17:
bb:a5:9e:68:46:ba:e1:69:8c:a3:41:ac:3b:28:d5:77:c4:8e:
80:4d:a7:e9:bc:9d:e3:a8:11:20:6d:bd:dd:b3:4e:0b:97:4e:
16:fd:35:f2:7f:c1:b3:26:5d:60:eb:7a:8b:a6:4a:fc:b9:87:
b2:a0:4f:68:54:3a:88:75:22:71:96:59:6c:cd:e0:c5:e3:57:
6e:9f:9c:6e:5e:7d:3d:11:a2:8a:e0:43:32:39:01:e3:b0:27:
e0:e8:79:73:63:3a:d8:16:96:fd:9b:22:72:5c:8a:c2:64:bc:
e4:f1:a3:e4:d2:0f:88:a3:8d:23:24:fe:ab:92:6f:ae:d6:55:
0f:d6:66:b3:c9:d2:71:b1:c2:a9:0f:7e:3f:2c:2e:d1:39:b9:
db:16:65:a0:25:80:e4:17:26:8e:a9:7b:64:22:dc:23:ec:ce:
f5:7b:3c:d6:ca:71:04:fb:6f:61:2b:4f:8f:18:ec:33:30:33:
72:27:95:e6:bc:ff:c8:49:68:76:8e:25:d9:fb:d4:59:bd:cc:
b6:30:ad:b1:70:7d:ad:a8:2d:5f:fc:e1:53:2a:48:75:30:ca:
7d:7d:12:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zfRXqA0ktiRRa/igNaJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OTUyN2EwNmEwMzVjYmNhZWNmMDBkYWNhMmZkODgzOTlj
ZjlkMTIwHhcNMjUwMTMxMTAwMDI0WhcNMjUwMjAxMTAwMDI0WjAzMTEwLwYDVQQD
Eyg3NTVjN2M4NTU4ODlmODc5MWMxNjhhZjNlNWRlNzE4YmNkYzFjYTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zCL+bEyFxN+Azt6ssgD+dCyL1y2
N80fA4ibUZEWH7rQBOljBPvBh4LJ8vHjcJ1bkXmD+1OaTZly2tOxiaocjELsCO0R
IjFNwvo7XuM6ie8+xrkB0hbMIyFvAC5PQ/qnzZjWY3pzCZjgWle/eolEYeb7t90p
+oKfnguNHb/Pc+zm6vOa47YH0PJW7X/S0QtBMXZswTbzdTym4KDz+aBHNtcO4EGa
W+/ZjkRzN8rNWNkRvT1DgPKqjRpFLEc4ixN38ZaXnY/uRu31/ujZNKKEiXbmbDIu
n7QawEZXaX0wJlJHcNbGbCmEN5YKs5EaweO7qosjaAtEn8o+P1LEF2R3HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVcfIVYifh5HBaK8+XecYvNwco6MB8GA1UdIwQY
MBaAFPaVJ6BqA1y8rs8A2sov2IOZz50SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kNDU1MzEtZDZjOC00ZGNlLWI2MDYt
ODVjODU1MjI3YjIzLzEvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9kNDU1MzEtZDZjOC00ZGNlLWI2MDYtODVjODU1MjI3YjIz
LzEvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxuGxBlr
fv/X0AaTB6e2lc8Opf47lxWVfaQo/+SMygsAVloXu6WeaEa64WmMo0GsOyjVd8SO
gE2n6byd46gRIG293bNOC5dOFv018n/BsyZdYOt6i6ZK/LmHsqBPaFQ6iHUicZZZ
bM3gxeNXbp+cbl59PRGiiuBDMjkB47An4Oh5c2M62BaW/ZsiclyKwmS85PGj5NIP
iKONIyT+q5JvrtZVD9Zms8nScbHCqQ9+Pywu0Tm52xZloCWA5Bcmjql7ZCLcI+zO
9Xs81spxBPtvYStPjxjsMzAzcieV5rz/yElodo4l2fvUWb3MtjCtsXB9ragtX/zh
UypIdTDKfX0SdA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:33 2025 by rpki-client