Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier: oTb5JpeVpeSV0559ymTrFpVrLcycj/ZERnmvfgYLXaU=
Subject key identifier: DF:2F:89:B1:45:2A:FB:66:9A:06:5E:22:20:3F:EC:C8:26:73:AB:10
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 0195E1901A13373376A15F128249F26CF56C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number: 05AB
Signing time: Sat 29 Mar 2025 11:01:12 +0000
Manifest this update: Sat 29 Mar 2025 11:01:12 +0000
Manifest next update: Sun 30 Mar 2025 11:01:12 +0000
Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: x+G9aXuQ078ls5ltK4iUpycZUxPmSm+mtHlhmrG7faE=)
2: goyOFyNzCSnjNoSGUslWBJblZKU.roa (hash: gOANPYh3QzN79F/MQE5xUnJrm2gWdrunUVxAKHrrHlk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:1a:13:37:33:76:a1:5f:12:82:49:f2:6c:f5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: Mar 29 11:01:12 2025 GMT
Not After : Mar 30 11:01:12 2025 GMT
Subject: CN=df2f89b1452afb669a065e22203fecc82673ab10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:d7:5d:06:95:e1:20:46:4b:e9:93:74:71:
82:8b:bc:03:7c:66:65:5f:dc:07:17:26:96:f5:13:
77:2e:73:b0:ab:54:ab:63:07:48:f0:2f:bd:37:85:
b3:21:ad:30:4f:dd:24:04:42:09:8b:18:53:dc:90:
1f:48:b7:e6:5f:4b:6c:ae:77:cc:2c:e8:04:da:70:
45:be:05:a8:3f:5c:5c:78:00:d9:48:68:56:fc:fd:
29:aa:d3:52:0c:ab:96:12:ca:f2:71:ef:a2:9d:5f:
c4:e9:cd:5b:34:2d:3b:e5:d7:4e:29:55:e2:32:28:
97:30:06:ed:62:35:f1:8e:a0:9c:23:e1:40:d3:0d:
26:a2:b4:62:c5:41:2e:20:48:78:99:62:aa:7e:6d:
b1:5a:c5:1b:79:74:95:cd:d6:56:5b:b0:26:7b:35:
04:07:6a:61:4f:b1:46:06:48:4b:a6:04:e1:ca:36:
86:bc:aa:d0:c1:23:d5:12:97:10:7c:20:e3:61:46:
d2:a9:cd:88:78:07:f7:45:c8:da:01:84:3c:53:58:
6d:2d:60:59:e1:2f:ba:d0:86:fb:2d:f3:c0:33:b0:
5d:d1:73:d2:45:78:a4:2f:6f:ce:0c:fa:e8:ad:4c:
46:54:a4:38:ed:1b:ef:48:30:0b:ad:0d:e9:1f:1f:
2f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2F:89:B1:45:2A:FB:66:9A:06:5E:22:20:3F:EC:C8:26:73:AB:10
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:04:b8:a1:02:62:f8:fc:8a:7b:a5:75:34:de:9d:36:6b:e1:
c4:2f:ec:eb:74:6d:90:fc:22:63:95:4a:81:94:24:47:66:bd:
a1:e5:a2:85:3c:0d:3d:20:9e:91:b3:80:ac:93:c0:b8:c7:2d:
44:e8:36:23:5e:3e:65:e1:d9:91:c4:cf:74:3f:37:07:8a:7d:
e9:a3:b6:7f:56:63:e6:f6:bc:26:a2:ca:fe:43:e1:a5:5f:4c:
99:51:70:f6:d8:20:c6:eb:20:35:e4:81:02:9a:f5:cb:d5:38:
23:05:de:07:8e:22:bb:41:f5:de:d4:67:26:9a:f2:b7:5b:5f:
28:50:db:29:88:f6:13:7f:93:2b:93:8a:82:c0:64:a7:ce:ee:
10:20:e0:74:8e:b3:70:46:c3:ae:6e:e0:60:26:b1:73:f8:41:
94:37:74:d5:7e:12:b8:75:be:c0:1a:cb:63:8f:3d:65:09:97:
fd:92:9e:81:72:dd:22:23:df:95:ce:8e:a2:d2:f1:3a:4a:83:
e8:12:2c:7a:2a:2d:f2:07:a6:8e:fb:d5:91:bd:b0:ad:a1:fe:
0d:4a:d9:7c:f5:ea:7d:44:52:3a:39:03:ac:2c:0b:f3:ea:f4:
b6:1e:d3:29:09:ee:b3:9b:e3:72:14:ad:67:62:c3:11:69:2d:
39:0f:e2:b1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZXhkBoTNzN2oV8SgknybPVsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhY2Y1ZTFlOTI4ODg2MDc4MGQxMmUzNGE0YWQzYjQwZDk4
NDgzZmMwHhcNMjUwMzI5MTEwMTEyWhcNMjUwMzMwMTEwMTEyWjAzMTEwLwYDVQQD
EyhkZjJmODliMTQ1MmFmYjY2OWEwNjVlMjIyMDNmZWNjODI2NzNhYjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshnXXQaV4SBGS+mTdHGCi7wDfGZl
X9wHFyaW9RN3LnOwq1SrYwdI8C+9N4WzIa0wT90kBEIJixhT3JAfSLfmX0tsrnfM
LOgE2nBFvgWoP1xceADZSGhW/P0pqtNSDKuWEsryce+inV/E6c1bNC075ddOKVXi
MiiXMAbtYjXxjqCcI+FA0w0morRixUEuIEh4mWKqfm2xWsUbeXSVzdZWW7AmezUE
B2phT7FGBkhLpgThyjaGvKrQwSPVEpcQfCDjYUbSqc2IeAf3RcjaAYQ8U1htLWBZ
4S+60Ib7LfPAM7Bd0XPSRXikL2/ODProrUxGVKQ47RvvSDALrQ3pHx8vLwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFN8vibFFKvtmmgZeIiA/7Mgmc6sQMB8GA1UdIwQY
MBaAFPrPXh6SiIYHgNEuNKStO0DZhIP8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zOWVIcEtJaGdlQTBTNDBwSzA3UU5tRWdfdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvMzljNjIyLTQ4NjctNGZiMy04ZWY3
LTVkMjdmOWRiZWQ2Ni8xLzEtczllSHBLSWhnZUEwUzQwcEswN1FObUVnX3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY3LzM5YzYyMi00ODY3LTRmYjMtOGVmNy01ZDI3ZjlkYmVk
NjYvMS8xLXM5ZUhwS0loZ2VBMFM0MHBLMDdRTm1FZ193LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwS4
oQJi+PyKe6V1NN6dNmvhxC/s63RtkPwiY5VKgZQkR2a9oeWihTwNPSCekbOArJPA
uMctROg2I14+ZeHZkcTPdD83B4p96aO2f1Zj5va8JqLK/kPhpV9MmVFw9tggxusg
NeSBApr1y9U4IwXeB44iu0H13tRnJpryt1tfKFDbKYj2E3+TK5OKgsBkp87uECDg
dI6zcEbDrm7gYCaxc/hBlDd01X4SuHW+wBrLY489ZQmX/ZKegXLdIiPflc6OotLx
OkqD6BIseiot8gemjvvVkb2wraH+DUrZfPXqfURSOjkDrCwL8+r0th7TKQnus5vj
chStZ2LDEWktOQ/isQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:48:35 2025 by rpki-client