Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c29a1c-244d-44d4-bf1b-db843340f3d5/1/9vT-urM3YEdXVXVRIrnyAmI5G5I.mft
File: 9vT-urM3YEdXVXVRIrnyAmI5G5I.mft (raw, json)
Hash identifier: IlHtMbKUtkFIr4RLpYKE9WQSr4GX2DXDIZpDN1toTUc=
Subject key identifier: 3C:CA:09:96:81:97:BB:D5:0E:BE:08:C0:D4:BC:9F:A5:D7:10:4B:78
Authority key identifier: F6:F4:FE:BA:B3:37:60:47:57:55:75:51:22:B9:F2:02:62:39:1B:92
Certificate issuer: /CN=f6f4febab33760475755755122b9f20262391b92
Certificate serial: 0194BC3BE84B2958EAB2F96D9D11EDABDB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vT-urM3YEdXVXVRIrnyAmI5G5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c29a1c-244d-44d4-bf1b-db843340f3d5/1/9vT-urM3YEdXVXVRIrnyAmI5G5I.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: 9vT-urM3YEdXVXVRIrnyAmI5G5I.crl (hash: ZVk8XueilJF17RvI3QHqy5ETQ34Ufpmbtpl8rfWwlmA=)
2: hjx08CbWNVb-AMGbwL0-5Sf_ifk.roa (hash: 6C02koWDYB7dLeFI8ibJ+LhMKomu57ibOfSN2wKtslA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e8:4b:29:58:ea:b2:f9:6d:9d:11:ed:ab:db:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f4febab33760475755755122b9f20262391b92
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=3cca09968197bbd50ebe08c0d4bc9fa5d7104b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:22:bc:d6:39:e3:cb:86:2a:64:8b:74:56:dc:
ef:3a:17:92:80:f1:7f:f7:fb:bd:70:41:e6:66:ac:
fe:49:2d:12:8c:fc:15:6b:b5:86:e2:32:5a:86:f3:
e6:1b:9b:f7:a2:68:07:e2:17:36:ba:d0:5b:a1:b0:
e8:b6:63:4e:80:ad:d9:0b:48:ca:80:dc:07:37:e8:
52:e5:a6:dc:d8:d0:cf:51:1f:50:92:fa:5a:32:ea:
48:ba:44:2e:36:69:7e:d6:0a:f2:54:eb:16:13:9b:
79:cf:ba:81:a3:18:1c:21:85:de:3e:6a:fd:ca:11:
06:aa:1a:b3:d3:24:49:41:0c:a6:21:b0:05:1b:77:
94:b4:82:35:b6:1a:a7:d0:d5:ee:57:56:7b:42:de:
1a:fc:26:8b:f1:60:59:d1:fc:9d:2c:77:99:3b:27:
c1:88:26:19:5a:37:d4:7d:e6:36:8f:8f:65:3c:97:
5a:dd:00:05:ff:ce:dd:4b:84:de:3f:a1:fd:2d:8a:
55:44:54:9b:21:bc:3d:94:27:f3:7a:a1:e5:cb:ba:
e5:c5:80:00:08:43:8b:98:06:df:c8:4a:46:ee:5e:
73:8b:34:fc:7c:ad:ad:ce:1b:44:4c:9b:e5:83:59:
2c:62:8b:af:ea:fd:62:39:8c:e3:2a:17:a2:f1:4d:
b8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CA:09:96:81:97:BB:D5:0E:BE:08:C0:D4:BC:9F:A5:D7:10:4B:78
X509v3 Authority Key Identifier:
keyid:F6:F4:FE:BA:B3:37:60:47:57:55:75:51:22:B9:F2:02:62:39:1B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vT-urM3YEdXVXVRIrnyAmI5G5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c29a1c-244d-44d4-bf1b-db843340f3d5/1/9vT-urM3YEdXVXVRIrnyAmI5G5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c29a1c-244d-44d4-bf1b-db843340f3d5/1/9vT-urM3YEdXVXVRIrnyAmI5G5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ae:56:bc:00:09:8e:a8:89:ba:bb:0f:22:fe:00:40:cf:03:
46:c8:92:2f:bf:65:c9:81:8c:9c:78:e2:fc:ac:1d:6d:6a:c1:
ea:f3:83:09:de:10:0d:f8:e6:f8:2d:a4:8f:57:07:3b:f7:11:
69:76:41:7c:47:04:b5:33:50:9d:8d:da:ff:51:de:d2:fe:ed:
bc:3d:0e:a7:c7:30:f1:c2:9c:6f:3a:a1:63:fe:1d:a1:ea:d7:
2b:0e:45:35:7d:80:37:ee:90:1a:08:2d:52:82:37:11:17:9d:
98:7e:22:9f:48:01:89:91:8a:ed:94:9b:44:49:37:bd:f6:5d:
71:fb:74:e3:6d:86:3b:02:06:7c:3a:38:87:8b:92:c9:8c:71:
60:7e:3c:44:06:29:15:5e:f0:c3:90:67:58:0d:7b:fd:11:d2:
d8:32:b8:49:16:54:f7:64:e0:d7:a1:2c:00:a2:62:9c:fc:4e:
27:07:ee:23:39:75:99:f4:bd:57:de:a3:04:16:9d:29:7e:2c:
86:9f:88:e2:38:d1:19:91:fb:29:02:93:a5:6a:cd:17:4c:cf:
90:8c:f5:58:a8:a9:13:c3:83:11:36:b1:4a:d2:cb:3a:07:39:
f9:71:e0:68:1d:63:0a:c0:98:d8:91:4f:8f:75:70:39:15:31:
f0:8f:f7:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+hLKVjqsvltnRHtq9szMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZjRmZWJhYjMzNzYwNDc1NzU1NzU1MTIyYjlmMjAyNjIz
OTFiOTIwHhcNMjUwMTMxMTIwMDMwWhcNMjUwMjAxMTIwMDMwWjAzMTEwLwYDVQQD
EygzY2NhMDk5NjgxOTdiYmQ1MGViZTA4YzBkNGJjOWZhNWQ3MTA0Yjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SK81jnjy4YqZIt0VtzvOheSgPF/
9/u9cEHmZqz+SS0SjPwVa7WG4jJahvPmG5v3omgH4hc2utBbobDotmNOgK3ZC0jK
gNwHN+hS5abc2NDPUR9QkvpaMupIukQuNml+1gryVOsWE5t5z7qBoxgcIYXePmr9
yhEGqhqz0yRJQQymIbAFG3eUtII1thqn0NXuV1Z7Qt4a/CaL8WBZ0fydLHeZOyfB
iCYZWjfUfeY2j49lPJda3QAF/87dS4TeP6H9LYpVRFSbIbw9lCfzeqHly7rlxYAA
CEOLmAbfyEpG7l5zizT8fK2tzhtETJvlg1ksYouv6v1iOYzjKhei8U24QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzKCZaBl7vVDr4IwNS8n6XXEEt4MB8GA1UdIwQY
MBaAFPb0/rqzN2BHV1V1USK58gJiORuSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXZULXVyTTNZRWRYVlhWUklybnlBbUk1RzVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jMjlhMWMtMjQ0ZC00NGQ0LWJmMWIt
ZGI4NDMzNDBmM2Q1LzEvOXZULXVyTTNZRWRYVlhWUklybnlBbUk1RzVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jMjlhMWMtMjQ0ZC00NGQ0LWJmMWItZGI4NDMzNDBmM2Q1
LzEvOXZULXVyTTNZRWRYVlhWUklybnlBbUk1RzVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbq5WvAAJ
jqiJursPIv4AQM8DRsiSL79lyYGMnHji/KwdbWrB6vODCd4QDfjm+C2kj1cHO/cR
aXZBfEcEtTNQnY3a/1He0v7tvD0Op8cw8cKcbzqhY/4doerXKw5FNX2AN+6QGggt
UoI3ERedmH4in0gBiZGK7ZSbREk3vfZdcft0422GOwIGfDo4h4uSyYxxYH48RAYp
FV7ww5BnWA17/RHS2DK4SRZU92Tg16EsAKJinPxOJwfuIzl1mfS9V96jBBadKX4s
hp+I4jjRGZH7KQKTpWrNF0zPkIz1WKipE8ODETaxStLLOgc5+XHgaB1jCsCY2JFP
j3VwORUx8I/3DQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:03:09 2025 by rpki-client