Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
File: g9Nuy69V5GTgCzmH2lJktq8tz4g.mft (raw, json)
Hash identifier: 9xcs5xBA1W9g7rZdUt0/j6oghDkfoWnNcjnX/2qTFoc=
Subject key identifier: B1:39:68:1E:4B:81:E0:22:69:A5:6F:C5:9D:AF:D8:1A:86:C1:B8:55
Authority key identifier: 83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
Certificate issuer: /CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Certificate serial: 0194BCA98AF5106B822904BB7A9AC4867C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
Manifest number: 0917
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: Ep6x42DXRSqizolUteEfvKxUcLA.roa (hash: R7QtcNnXyeV8OJfFTG/3xT0jdYWPM+BRX6IIEmRZyXk=)
2: g9Nuy69V5GTgCzmH2lJktq8tz4g.crl (hash: 2dTMER4Tfg/7OJdJlJDeXjp2DXP8F87mDvyGbg87d84=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8a:f5:10:6b:82:29:04:bb:7a:9a:c4:86:7c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=b139681e4b81e02269a56fc59dafd81a86c1b855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:e3:ce:4f:05:55:12:ab:8b:2c:1a:29:7e:
08:71:0b:0b:0c:7f:59:6e:cc:8a:ea:14:f1:3c:4a:
11:74:2c:68:d7:42:20:a6:ce:6d:dd:0b:02:de:92:
64:40:6f:58:75:06:35:37:85:13:36:5d:41:70:8e:
0d:f5:03:56:d0:fd:d8:23:c9:97:4b:48:5e:c9:fd:
0f:2d:d7:32:e7:a1:66:a3:d1:5b:aa:bd:68:17:ea:
fe:b3:a8:3e:f2:9a:b9:46:d7:f2:24:ee:49:61:17:
d0:33:e5:0e:53:0f:be:9c:b1:d8:0e:f3:18:15:2c:
31:b6:cd:e8:c6:3e:cb:f4:f3:18:50:6d:f6:00:25:
82:17:83:79:2a:ef:de:5e:f0:b0:de:67:b0:3a:24:
47:aa:0f:5a:a3:79:5e:d7:76:59:2f:45:c1:1f:14:
c3:0d:c0:d3:fa:2a:12:b3:71:72:5e:fe:ad:af:c8:
5b:82:6c:99:8d:17:fc:54:df:ca:a4:fe:c4:52:d0:
7f:dd:d2:fd:65:a6:dd:4b:e1:08:05:c4:b3:71:bc:
5e:02:ca:a3:14:56:16:c1:d6:20:61:90:14:b3:ae:
3a:db:41:7d:a2:65:3a:b4:ca:b0:4f:aa:60:c7:0c:
17:25:ec:98:05:15:ac:cc:0f:cf:eb:d8:60:64:bd:
e7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:39:68:1E:4B:81:E0:22:69:A5:6F:C5:9D:AF:D8:1A:86:C1:B8:55
X509v3 Authority Key Identifier:
keyid:83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ca:48:fc:42:17:bf:66:6a:f1:43:9f:c8:5d:f5:3b:4b:38:
84:d9:4e:ba:3b:5f:9f:8d:f1:f1:49:e9:53:28:d9:88:09:0d:
bb:44:c0:2f:eb:82:74:8b:df:bd:fd:25:ca:8f:7f:02:3a:e2:
a8:ce:ef:95:e4:b8:22:84:4a:a1:c7:65:60:1d:c2:ec:bc:fd:
d9:93:36:6e:25:53:0e:50:0d:37:9e:bd:82:d8:e8:86:9a:e9:
7b:7c:16:89:b5:e5:31:a5:e1:6f:b1:0c:3f:b6:d8:5a:05:38:
c1:40:0e:11:05:b0:17:c1:51:b6:69:7a:01:5c:fd:61:08:15:
90:69:b2:8b:f9:7d:8c:8a:76:eb:69:71:c6:41:0b:9d:ba:17:
86:17:7d:9a:89:74:14:7e:d3:7c:e2:e0:60:ec:4d:0b:7a:22:
a4:a3:dd:7c:76:af:29:64:d7:34:47:10:2e:15:c2:53:89:0d:
16:0e:fa:3d:2c:c7:31:a4:39:df:8a:50:ed:99:1d:44:27:52:
8f:62:ee:72:6e:9c:24:c9:04:6b:09:73:9b:42:15:d9:10:6a:
b4:d5:99:f3:15:66:8b:64:66:c2:db:c4:f6:8f:18:ad:d8:05:
81:15:7c:ae:4d:3d:af:b9:5d:72:09:d9:d4:7b:3d:be:28:72:
6b:3a:77:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYr1EGuCKQS7eprEhnw1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZDM2ZWNiYWY1NWU0NjRlMDBiMzk4N2RhNTI2NGI2YWYy
ZGNmODgwHhcNMjUwMTMxMTQwMDE1WhcNMjUwMjAxMTQwMDE1WjAzMTEwLwYDVQQD
EyhiMTM5NjgxZTRiODFlMDIyNjlhNTZmYzU5ZGFmZDgxYTg2YzFiODU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbfjzk8FVRKriywaKX4IcQsLDH9Z
bsyK6hTxPEoRdCxo10Igps5t3QsC3pJkQG9YdQY1N4UTNl1BcI4N9QNW0P3YI8mX
S0heyf0PLdcy56Fmo9Fbqr1oF+r+s6g+8pq5RtfyJO5JYRfQM+UOUw++nLHYDvMY
FSwxts3oxj7L9PMYUG32ACWCF4N5Ku/eXvCw3mewOiRHqg9ao3le13ZZL0XBHxTD
DcDT+ioSs3FyXv6tr8hbgmyZjRf8VN/KpP7EUtB/3dL9ZabdS+EIBcSzcbxeAsqj
FFYWwdYgYZAUs64620F9omU6tMqwT6pgxwwXJeyYBRWszA/P69hgZL3naQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLE5aB5LgeAiaaVvxZ2v2BqGwbhVMB8GA1UdIwQY
MBaAFIPTbsuvVeRk4As5h9pSZLavLc+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzlOdXk2OVY1R1RnQ3ptSDJsSmt0cTh0ejRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMmJlZjAtNzU2MS00MzdiLTk0OTAt
OTY1MzFkMTYzMzFiLzEvZzlOdXk2OVY1R1RnQ3ptSDJsSmt0cTh0ejRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMmJlZjAtNzU2MS00MzdiLTk0OTAtOTY1MzFkMTYzMzFi
LzEvZzlOdXk2OVY1R1RnQ3ptSDJsSmt0cTh0ejRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXspI/EIX
v2Zq8UOfyF31O0s4hNlOujtfn43x8UnpUyjZiAkNu0TAL+uCdIvfvf0lyo9/Ajri
qM7vleS4IoRKocdlYB3C7Lz92ZM2biVTDlANN569gtjohprpe3wWibXlMaXhb7EM
P7bYWgU4wUAOEQWwF8FRtml6AVz9YQgVkGmyi/l9jIp262lxxkELnboXhhd9mol0
FH7TfOLgYOxNC3oipKPdfHavKWTXNEcQLhXCU4kNFg76PSzHMaQ534pQ7ZkdRCdS
j2Lucm6cJMkEawlzm0IV2RBqtNWZ8xVmi2RmwtvE9o8YrdgFgRV8rk09r7ldcgnZ
1Hs9vihyazp3ug==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:29 2025 by rpki-client