Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json)
Hash identifier: 8QlYGKVvu3D53NbGRg7jNc03au13sr5xtNFQBbpHrvE=
Subject key identifier: C9:BA:1E:7A:C2:16:34:CC:C6:51:5C:07:63:9F:6E:33:08:16:97:89
Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Certificate serial: 0194BBCE3069AA5EA983607A7C7E16CCC46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
Manifest number: 1010
Signing time: Fri 31 Jan 2025 10:00:39 +0000
Manifest this update: Fri 31 Jan 2025 10:00:39 +0000
Manifest next update: Sat 01 Feb 2025 10:00:39 +0000
Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: E8PGpOO5BI8ZyyEjl28R75nqpOW9+CcPtb/IDkXttZg=)
2: FZ8lZ1tv1WxiamAtVvEastVDrnM.roa (hash: tk+YgdTHch7esivD8xj2gkAMo3Z/Ic0ikMlr9jKcOGc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:30:69:aa:5e:a9:83:60:7a:7c:7e:16:cc:c4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Validity
Not Before: Jan 31 10:00:39 2025 GMT
Not After : Feb 1 10:00:39 2025 GMT
Subject: CN=c9ba1e7ac21634ccc6515c07639f6e3308169789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:70:bf:ce:2c:43:73:1f:50:9b:a0:b2:0b:
ec:67:a1:6b:9d:df:d9:df:1c:8f:54:ce:29:91:ce:
e3:d7:be:a1:6c:4f:d1:94:0f:bf:79:f1:22:4b:26:
d8:75:55:af:5f:cf:b3:92:fe:2c:cd:3a:34:29:b5:
9b:a0:6b:41:7b:90:0f:f8:f7:5a:1b:16:ba:3d:00:
84:a1:68:31:87:73:36:80:3a:57:5a:09:fe:55:21:
1f:fb:f0:52:b2:91:a3:f7:21:c5:66:4b:9b:95:40:
ac:87:89:56:78:db:f8:25:e4:29:7f:b0:07:de:93:
8c:74:dd:1d:03:eb:57:50:e2:1c:45:61:32:2e:58:
1e:ac:70:24:93:09:66:8b:80:a0:e2:89:97:30:59:
d5:88:76:fc:b8:31:e3:35:bd:cc:9f:93:36:b9:ff:
f0:81:cf:fb:6c:e3:5b:d2:57:27:45:70:32:f8:32:
59:b8:2c:89:c6:d3:df:2d:53:98:86:d2:be:3a:70:
57:2a:0f:97:72:39:d3:10:c6:df:d7:ae:f7:0f:1d:
f1:99:84:61:a9:43:30:3b:6e:20:17:93:d5:b5:37:
0c:48:24:c1:a2:88:93:43:f0:7a:e6:1d:2d:0a:bb:
eb:a5:e6:48:0c:ef:15:5b:77:91:a2:b2:37:0a:36:
0f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BA:1E:7A:C2:16:34:CC:C6:51:5C:07:63:9F:6E:33:08:16:97:89
X509v3 Authority Key Identifier:
keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1c:63:43:c2:fb:53:f8:5a:32:83:cf:c6:08:e2:89:86:e4:
89:73:82:af:76:17:4d:5a:b6:30:be:6b:ad:eb:ce:1e:6b:51:
dc:6c:6a:2b:cc:e1:d9:5d:1c:31:d2:4a:84:ed:fe:45:cc:4f:
42:1d:af:0e:25:56:b3:fb:94:a2:e6:2b:8e:3a:c4:d1:5d:16:
83:2c:25:f5:bd:81:1d:c2:3b:72:11:05:dd:6e:58:ca:84:b0:
ab:4f:38:f5:6d:53:e2:99:84:06:a7:bc:86:37:5c:7f:db:94:
e3:ac:fd:78:8e:ec:bc:0c:e8:62:5c:b3:3c:b9:65:15:92:d3:
30:33:5d:1a:96:57:5b:67:60:d3:e5:13:ca:69:ba:1b:2d:f1:
b9:60:e0:70:68:c7:ee:16:ce:e7:7a:3e:da:43:79:9e:97:62:
b5:29:26:61:f6:bf:15:ec:d2:59:f2:43:2d:b9:be:eb:ba:db:
6f:10:c9:d7:63:84:53:ef:e8:ec:26:4c:1c:21:34:c2:8a:77:
82:2e:eb:22:2d:b5:e1:29:d1:ff:0f:b5:a9:0b:f0:81:0a:15:
7b:52:ce:e4:5c:3c:68:ed:99:4c:93:9e:f1:17:0a:f0:0e:68:
64:6c:22:d4:5e:26:48:38:37:de:08:d6:b1:09:58:56:3a:c0:
71:12:c5:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjBpql6pg2B6fH4WzMRtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZmY0NmJhNmNkOGUyZjM1YWZkYjViNWY5Zjg2NTAyZjgz
NGMzNGEwHhcNMjUwMTMxMTAwMDM5WhcNMjUwMjAxMTAwMDM5WjAzMTEwLwYDVQQD
EyhjOWJhMWU3YWMyMTYzNGNjYzY1MTVjMDc2MzlmNmUzMzA4MTY5Nzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4Nwv84sQ3MfUJugsgvsZ6Frnd/Z
3xyPVM4pkc7j176hbE/RlA+/efEiSybYdVWvX8+zkv4szTo0KbWboGtBe5AP+Pda
Gxa6PQCEoWgxh3M2gDpXWgn+VSEf+/BSspGj9yHFZkublUCsh4lWeNv4JeQpf7AH
3pOMdN0dA+tXUOIcRWEyLlgerHAkkwlmi4Cg4omXMFnViHb8uDHjNb3Mn5M2uf/w
gc/7bONb0lcnRXAy+DJZuCyJxtPfLVOYhtK+OnBXKg+XcjnTEMbf1673Dx3xmYRh
qUMwO24gF5PVtTcMSCTBooiTQ/B65h0tCrvrpeZIDO8VW3eRorI3CjYPyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMm6HnrCFjTMxlFcB2OfbjMIFpeJMB8GA1UdIwQY
MBaAFPX/Rrps2OLzWv21tfn4ZQL4NMNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xZmRlMDQtNTg3Yi00MDg1LWI1ODUt
NmFkMjBhMmVhY2I4LzEvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xZmRlMDQtNTg3Yi00MDg1LWI1ODUtNmFkMjBhMmVhY2I4
LzEvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhxjQ8L7
U/haMoPPxgjiiYbkiXOCr3YXTVq2ML5rrevOHmtR3GxqK8zh2V0cMdJKhO3+RcxP
Qh2vDiVWs/uUouYrjjrE0V0Wgywl9b2BHcI7chEF3W5YyoSwq0849W1T4pmEBqe8
hjdcf9uU46z9eI7svAzoYlyzPLllFZLTMDNdGpZXW2dg0+UTymm6Gy3xuWDgcGjH
7hbO53o+2kN5npditSkmYfa/FezSWfJDLbm+67rbbxDJ12OEU+/o7CZMHCE0wop3
gi7rIi214SnR/w+1qQvwgQoVe1LO5Fw8aO2ZTJOe8RcK8A5oZGwi1F4mSDg33gjW
sQlYVjrAcRLFpw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:31:42 2025 by rpki-client