Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
File: 0R9tkk1vbMDpQIN9kwH85zIGV3E.mft (raw, json)
Hash identifier: 65YnDUdIvWCRlBcfKkPqtPezyp+Xqlj7UzME1q3R3ps=
Subject key identifier: 3A:F5:B7:C3:59:A1:0B:A4:5A:56:78:36:42:FB:59:8D:3C:E1:40:5A
Authority key identifier: D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
Certificate issuer: /CN=d11f6d924d6f6cc0e940837d9301fce732065771
Certificate serial: 0194BCE089B337D728989993287AEF743064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
Manifest number: 0283
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: 0R9tkk1vbMDpQIN9kwH85zIGV3E.crl (hash: 5HjNOU5bVYyrTHKfvj5f2aoq6pRfD/G5XrEoKZPD5es=)
2: iJSQx0f1nTa0-CmNbadm7Gos7IA.roa (hash: LXabEDWzH1fx8QmFW8g5Pa/8Oh8pnxFijMUOQc1WwTM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:89:b3:37:d7:28:98:99:93:28:7a:ef:74:30:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d11f6d924d6f6cc0e940837d9301fce732065771
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=3af5b7c359a10ba45a56783642fb598d3ce1405a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:f2:de:2e:48:1f:82:b8:ed:16:6b:f0:53:
7d:35:63:bc:49:77:29:6e:9a:2d:3b:e0:a3:79:e3:
0a:02:ba:cd:18:7a:ea:0a:c4:d0:f3:92:8f:f4:57:
38:3e:a7:b7:3e:c7:92:67:4f:f7:1b:40:dd:6f:b6:
39:c2:21:fc:9d:f8:81:21:4a:8f:31:05:98:7f:ee:
1d:f5:b3:38:db:62:56:f9:88:33:6b:3e:4c:5c:92:
71:6a:e3:b0:37:2c:18:0d:c6:77:7a:77:ef:86:d3:
a5:46:d6:9d:67:26:a1:01:d7:ca:ad:df:61:bf:9a:
cf:bb:7e:09:56:99:eb:54:ce:ea:a9:a2:50:e4:c8:
2a:f4:86:a3:52:f9:54:7c:b7:3a:dc:f7:55:1b:1c:
a5:6e:05:f3:cd:5d:6e:f5:92:d2:bd:0e:b3:16:f4:
e1:09:77:36:17:70:3c:d5:f2:a0:aa:70:98:c1:bc:
b6:11:6f:bd:a7:73:14:f9:c7:b1:26:bc:c6:23:57:
f1:34:3e:cf:62:81:81:bb:3f:db:2f:e2:cd:57:c3:
98:73:63:76:c1:dc:2e:21:41:9b:06:5a:6b:72:55:
b8:c9:72:3c:e0:d1:a0:76:57:20:38:1a:50:dc:8e:
64:74:de:d1:5e:cc:8a:09:67:17:12:b2:11:94:1f:
bf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F5:B7:C3:59:A1:0B:A4:5A:56:78:36:42:FB:59:8D:3C:E1:40:5A
X509v3 Authority Key Identifier:
keyid:D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:77:86:75:56:d8:bd:11:93:dd:71:ad:65:18:94:12:00:dc:
ce:11:fc:f2:b3:6a:a5:e1:c9:f2:b1:4b:56:11:bc:66:79:b4:
76:ad:68:8a:77:dd:51:64:64:03:7f:86:84:dd:80:58:dc:25:
66:6e:1a:1d:a5:5f:dc:a1:de:b6:cf:a0:a7:7c:8b:f3:26:ba:
63:ab:f4:60:21:98:b7:d8:54:17:2d:28:41:0b:ee:dc:f7:a0:
2f:b7:96:9c:61:62:d3:45:d1:06:0b:38:6a:c4:6c:aa:23:a0:
b5:be:78:41:04:ef:98:e7:09:f5:aa:30:ea:e6:0e:c9:a4:e1:
9e:c0:ea:1e:b6:a0:6e:bc:fe:7d:4b:10:c1:60:8d:dd:bd:7a:
ee:49:a1:f4:98:d4:54:58:cd:2b:38:b9:25:e9:63:f2:7a:79:
34:a6:f9:29:1f:9b:ae:73:88:67:d0:67:e0:3c:5e:d3:9e:60:
25:0b:8f:f5:80:a0:e3:a1:06:66:d8:bc:53:13:ea:22:af:08:
26:87:1e:ce:bb:53:15:e1:b4:c2:f0:bf:b4:46:e7:dd:d3:a8:
22:29:64:68:b2:e2:84:9a:11:ff:28:92:76:5f:0d:7b:4e:48:
81:54:84:01:99:f8:99:d5:e8:4b:3b:4b:66:97:a5:da:01:20:
2b:00:ae:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84ImzN9comJmTKHrvdDBkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMWY2ZDkyNGQ2ZjZjYzBlOTQwODM3ZDkzMDFmY2U3MzIw
NjU3NzEwHhcNMjUwMTMxMTUwMDE5WhcNMjUwMjAxMTUwMDE5WjAzMTEwLwYDVQQD
EygzYWY1YjdjMzU5YTEwYmE0NWE1Njc4MzY0MmZiNTk4ZDNjZTE0MDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLby3i5IH4K47RZr8FN9NWO8SXcp
bpotO+CjeeMKArrNGHrqCsTQ85KP9Fc4Pqe3PseSZ0/3G0Ddb7Y5wiH8nfiBIUqP
MQWYf+4d9bM422JW+Ygzaz5MXJJxauOwNywYDcZ3enfvhtOlRtadZyahAdfKrd9h
v5rPu34JVpnrVM7qqaJQ5Mgq9IajUvlUfLc63PdVGxylbgXzzV1u9ZLSvQ6zFvTh
CXc2F3A81fKgqnCYwby2EW+9p3MU+cexJrzGI1fxND7PYoGBuz/bL+LNV8OYc2N2
wdwuIUGbBlprclW4yXI84NGgdlcgOBpQ3I5kdN7RXsyKCWcXErIRlB+/7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDr1t8NZoQukWlZ4NkL7WY084UBaMB8GA1UdIwQY
MBaAFNEfbZJNb2zA6UCDfZMB/OcyBldxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84M2M5YjktYTFhYy00NTE2LWFiZTgt
OWVkOTcxMGQ2ZWEyLzEvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS84M2M5YjktYTFhYy00NTE2LWFiZTgtOWVkOTcxMGQ2ZWEy
LzEvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMneGdVbY
vRGT3XGtZRiUEgDczhH88rNqpeHJ8rFLVhG8Znm0dq1oinfdUWRkA3+GhN2AWNwl
Zm4aHaVf3KHets+gp3yL8ya6Y6v0YCGYt9hUFy0oQQvu3PegL7eWnGFi00XRBgs4
asRsqiOgtb54QQTvmOcJ9aow6uYOyaThnsDqHragbrz+fUsQwWCN3b167kmh9JjU
VFjNKzi5Jelj8np5NKb5KR+brnOIZ9Bn4Dxe055gJQuP9YCg46EGZti8UxPqIq8I
JocezrtTFeG0wvC/tEbn3dOoIilkaLLihJoR/yiSdl8Ne05IgVSEAZn4mdXoSztL
Zpel2gEgKwCuZQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:11:42 2025 by rpki-client