Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
File: 9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json)
Hash identifier: LCxRw00oE9xPQTG7hGC14QnNPW8HKhjVo4ST2NUkWOc=
Subject key identifier: 8C:73:41:54:C9:35:41:45:59:8C:D6:51:F9:A6:31:4E:72:3B:EB:BB
Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Certificate serial: 0194BC04F17765CC28E648D80EFAC65A5AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
Manifest number: 095C
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: dZTGp67EGksekZUBWt60He4p4d/gCjC8GWHgnnqgomA=)
2: goWXgCcrT8sdpWvs98SjkshS1QQ.roa (hash: pL/QBtJXrUgZbyv/2j+3PUPuF0UtD1Pg09swJJxayTU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f1:77:65:cc:28:e6:48:d8:0e:fa:c6:5a:5a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=8c734154c9354145598cd651f9a6314e723bebbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:12:b7:8a:c5:db:b7:9b:dd:ac:b9:3f:fa:
23:7e:8a:10:ed:91:e3:8a:6b:58:27:01:54:13:37:
7d:50:92:1b:08:be:fa:a3:bb:f0:30:c2:14:79:38:
2b:0d:91:37:90:e3:3b:6e:25:d9:0d:0f:04:c1:36:
59:81:1a:71:6e:94:66:75:1c:49:94:a6:db:a3:b7:
d9:3d:4c:f6:db:c3:53:2b:8a:3c:ee:af:93:82:96:
62:d6:80:5a:4d:91:be:0e:b3:2e:8c:b8:55:a4:31:
74:77:45:85:22:a1:0d:db:25:ae:a3:c6:28:6b:a5:
57:12:16:ff:dc:b2:52:95:8e:52:d6:4e:2b:2d:dd:
3d:fe:68:fa:2c:e7:d4:b0:62:b7:e4:c2:80:3f:90:
6a:2e:5d:1b:0b:52:4c:48:44:33:8b:48:d4:69:6d:
16:4c:9f:bb:68:cc:d5:fb:49:fe:0d:23:19:05:4a:
4f:76:d4:56:2f:a8:61:29:f8:66:04:3e:68:05:40:
84:06:bc:ac:b4:95:0a:bd:44:ea:65:42:ea:13:05:
38:63:70:5d:4f:eb:f3:1b:11:8f:ea:04:79:72:27:
cb:a8:66:29:1a:41:67:02:49:4e:4c:9c:b5:e0:e9:
76:04:fc:08:89:3b:e0:a5:e6:d6:e0:de:65:51:99:
ad:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:73:41:54:C9:35:41:45:59:8C:D6:51:F9:A6:31:4E:72:3B:EB:BB
X509v3 Authority Key Identifier:
keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9e:98:28:80:0d:a9:9a:c9:5b:11:e2:5c:b7:34:7c:2f:60:
f7:10:97:c1:5d:5e:57:9c:2c:bd:14:7e:42:35:0e:ca:16:ad:
ef:9d:2f:fb:73:a8:08:72:bd:b0:6d:e4:82:1b:de:58:bd:b7:
9c:79:8b:d6:24:a1:c5:0f:e3:dc:e0:e4:74:c4:bc:f6:a1:5a:
eb:ec:30:64:67:52:ba:be:34:80:d5:1f:1f:be:85:7a:7f:f5:
f7:5b:fc:9f:34:db:7d:d4:48:42:f1:e8:ef:e6:48:e3:4a:45:
84:f5:7c:78:01:96:aa:46:be:65:8a:cb:26:f3:c8:fb:4d:62:
7c:08:1d:5c:28:60:39:a7:05:97:1b:9a:58:04:f6:a5:fd:ed:
52:61:5a:22:e5:2c:86:13:8d:60:74:a1:9c:bd:9b:f9:bd:27:
fb:66:53:95:90:a6:ea:c1:6c:dd:89:6c:53:a1:09:da:ae:53:
be:5d:37:e6:ac:e3:7b:73:39:c0:50:a8:4c:1c:af:1a:aa:e0:
e7:a5:9b:4a:bf:77:bd:2f:81:3b:59:06:0a:4c:c8:d4:65:42:
47:3e:3f:8d:ca:7d:a7:9a:c4:2f:cb:95:19:ef:fd:30:8c:eb:
4c:14:50:98:d7:fd:ba:ef:db:00:68:9d:cb:c8:57:d7:5d:04:
53:dc:cb:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPF3Zcwo5kjYDvrGWlriMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ODk3ZmRiZGM3ZDI1MDhkZmNkMTRjZmY2MDBhZDQzYjky
NzkyNGIwHhcNMjUwMTMxMTEwMDI4WhcNMjUwMjAxMTEwMDI4WjAzMTEwLwYDVQQD
Eyg4YzczNDE1NGM5MzU0MTQ1NTk4Y2Q2NTFmOWE2MzE0ZTcyM2JlYmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhASt4rF27eb3ay5P/ojfooQ7ZHj
imtYJwFUEzd9UJIbCL76o7vwMMIUeTgrDZE3kOM7biXZDQ8EwTZZgRpxbpRmdRxJ
lKbbo7fZPUz228NTK4o87q+TgpZi1oBaTZG+DrMujLhVpDF0d0WFIqEN2yWuo8Yo
a6VXEhb/3LJSlY5S1k4rLd09/mj6LOfUsGK35MKAP5BqLl0bC1JMSEQzi0jUaW0W
TJ+7aMzV+0n+DSMZBUpPdtRWL6hhKfhmBD5oBUCEBrystJUKvUTqZULqEwU4Y3Bd
T+vzGxGP6gR5cifLqGYpGkFnAklOTJy14Ol2BPwIiTvgpebW4N5lUZmttQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxzQVTJNUFFWYzWUfmmMU5yO+u7MB8GA1UdIwQY
MBaAFPSJf9vcfSUI380Uz/YArUO5J5JLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEt
OTRjNmY3NDRkZTQ2LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEtOTRjNmY3NDRkZTQ2
LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJ6YKIAN
qZrJWxHiXLc0fC9g9xCXwV1eV5wsvRR+QjUOyhat750v+3OoCHK9sG3kghveWL23
nHmL1iShxQ/j3ODkdMS89qFa6+wwZGdSur40gNUfH76Fen/191v8nzTbfdRIQvHo
7+ZI40pFhPV8eAGWqka+ZYrLJvPI+01ifAgdXChgOacFlxuaWAT2pf3tUmFaIuUs
hhONYHShnL2b+b0n+2ZTlZCm6sFs3YlsU6EJ2q5Tvl035qzje3M5wFCoTByvGqrg
56WbSr93vS+BO1kGCkzI1GVCRz4/jcp9p5rEL8uVGe/9MIzrTBRQmNf9uu/bAGid
y8hX110EU9zLiQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:19:10 2025 by rpki-client