Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
File: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft (raw, json)
Hash identifier: pu2bbBlU09JeQFgsoGe8UTByzWzTI4HyixK1ZYbIztA=
Subject key identifier: 1C:0B:38:C0:53:CC:6D:5E:4F:1C:39:53:02:74:57:5E:CA:E1:60:A5
Authority key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
Certificate issuer: /CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Certificate serial: 0195E0EB6381E13B8AA25E499E7CD197E7DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
Manifest number: 09FF
Signing time: Sat 29 Mar 2025 08:01:17 +0000
Manifest this update: Sat 29 Mar 2025 08:01:17 +0000
Manifest next update: Sun 30 Mar 2025 08:01:17 +0000
Files and hashes: 1: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl (hash: c5/QN/7xSEELpuOGXcmyUzpTOhTKzELN/c7Ltyok/a8=)
2: 9QEKfiqhzH-bmQh5b6rMdNbStYc.roa (hash: MpYTZwjsTnNyFZWB4RSLKA3k60L/jvvVARMaXOoFY4M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:63:81:e1:3b:8a:a2:5e:49:9e:7c:d1:97:e7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Validity
Not Before: Mar 29 08:01:17 2025 GMT
Not After : Mar 30 08:01:17 2025 GMT
Subject: CN=1c0b38c053cc6d5e4f1c39530274575ecae160a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fd:96:bf:6e:c8:e5:77:21:01:72:f2:58:b5:
98:e8:1a:c0:46:61:51:a4:ae:1f:4b:cc:21:7e:ea:
24:78:7b:0c:9d:96:95:83:36:15:9e:10:ce:23:0c:
58:a6:37:b1:25:90:fc:71:3a:bd:06:7a:cb:9b:09:
f5:3d:4e:5b:43:0c:e1:41:8c:b1:bb:59:d2:fe:6a:
8a:c8:e6:1a:42:73:83:df:dd:2e:22:fd:11:79:91:
9a:5c:35:c7:cb:2c:9c:ee:35:ad:c6:80:18:59:1a:
22:b7:4e:5e:d9:b7:87:53:ac:b5:27:30:c7:e3:41:
f8:e3:f7:3c:b9:ee:fd:83:dd:30:2d:27:7e:ad:10:
cc:0c:91:c3:59:4a:aa:16:56:52:36:a4:1b:e4:d8:
80:06:75:cc:1d:ca:a2:fd:41:18:93:bf:6c:91:79:
88:66:15:3b:87:11:7b:e6:91:bb:21:87:61:81:df:
73:db:4d:d0:18:c4:2f:45:05:13:9b:5b:f5:dd:d0:
01:f6:e5:e0:20:cc:9f:07:f4:06:ba:79:da:63:96:
0e:9e:0e:4e:20:85:03:56:d0:df:fc:ad:16:5e:b7:
ee:82:a9:4e:16:ff:39:5b:e5:dc:83:98:f3:65:bf:
e4:2d:8d:12:f3:08:f5:77:54:05:64:f3:91:61:14:
75:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0B:38:C0:53:CC:6D:5E:4F:1C:39:53:02:74:57:5E:CA:E1:60:A5
X509v3 Authority Key Identifier:
keyid:D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:43:cb:db:d1:dc:ac:87:77:d6:98:01:dc:bc:6f:7a:87:ea:
99:c9:62:a0:ac:21:25:f1:d4:19:c7:1c:e9:70:3b:a0:a9:97:
89:7d:8f:d6:ab:67:18:ca:51:a1:91:24:31:a6:2a:c5:f4:6f:
f4:93:88:c3:d9:75:0c:a3:ae:d9:1b:3a:11:f9:4d:d5:9c:ef:
13:bc:73:0f:76:bf:29:a5:40:bb:66:c8:0d:d6:09:a8:e8:f9:
86:3b:eb:3a:0c:c3:b0:df:68:a3:fa:e5:73:72:85:56:cc:78:
6c:17:37:01:f1:ea:78:e7:e0:47:23:ec:ee:12:2b:07:bd:b0:
da:ee:c2:2c:11:f9:48:ce:f2:4d:c7:0e:3c:bd:72:b6:33:0c:
38:2a:69:0a:b9:00:c4:ff:c1:6f:d3:45:58:6d:ed:c0:2b:4b:
71:8f:3c:c0:5d:3d:2a:26:19:dc:1c:2c:e3:38:cd:02:d0:f4:
5d:c6:5e:40:1a:ed:8f:97:65:3e:7e:27:31:06:1a:18:3d:92:
46:15:0a:10:1f:91:91:b6:07:14:94:3c:4e:0c:44:77:27:2a:
ec:f7:06:09:ec:05:6a:5b:45:77:db:c5:15:e8:1f:17:10:86:
ed:1c:f4:22:b4:da:7a:60:c2:ad:58:2f:95:61:1e:dd:c5:14:
9f:3a:bc:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXg62OB4TuKol5JnnzRl+fdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NDljYWJhM2Q0MzE1NjA3ZjRhNmQ2MjdlY2UxZWNlYThj
YmMzMTkwHhcNMjUwMzI5MDgwMTE3WhcNMjUwMzMwMDgwMTE3WjAzMTEwLwYDVQQD
EygxYzBiMzhjMDUzY2M2ZDVlNGYxYzM5NTMwMjc0NTc1ZWNhZTE2MGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/2Wv27I5XchAXLyWLWY6BrARmFR
pK4fS8whfuokeHsMnZaVgzYVnhDOIwxYpjexJZD8cTq9BnrLmwn1PU5bQwzhQYyx
u1nS/mqKyOYaQnOD390uIv0ReZGaXDXHyyyc7jWtxoAYWRoit05e2beHU6y1JzDH
40H44/c8ue79g90wLSd+rRDMDJHDWUqqFlZSNqQb5NiABnXMHcqi/UEYk79skXmI
ZhU7hxF75pG7IYdhgd9z203QGMQvRQUTm1v13dAB9uXgIMyfB/QGunnaY5YOng5O
IIUDVtDf/K0WXrfugqlOFv85W+Xcg5jzZb/kLY0S8wj1d1QFZPORYRR1awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwLOMBTzG1eTxw5UwJ0V17K4WClMB8GA1UdIwQY
MBaAFNlJyro9QxVgf0ptYn7OHs6oy8MZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlVuS3VqMURGV0JfU20xaWZzNGV6cWpMd3hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mZTY5MDQtZWI1Ni00NDkzLTkyOWMt
MWE5ZGYzOGY1OTAxLzEvMlVuS3VqMURGV0JfU20xaWZzNGV6cWpMd3hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9mZTY5MDQtZWI1Ni00NDkzLTkyOWMtMWE5ZGYzOGY1OTAx
LzEvMlVuS3VqMURGV0JfU20xaWZzNGV6cWpMd3hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0PL29Hc
rId31pgB3LxveofqmclioKwhJfHUGccc6XA7oKmXiX2P1qtnGMpRoZEkMaYqxfRv
9JOIw9l1DKOu2Rs6EflN1ZzvE7xzD3a/KaVAu2bIDdYJqOj5hjvrOgzDsN9oo/rl
c3KFVsx4bBc3AfHqeOfgRyPs7hIrB72w2u7CLBH5SM7yTccOPL1ytjMMOCppCrkA
xP/Bb9NFWG3twCtLcY88wF09KiYZ3Bws4zjNAtD0XcZeQBrtj5dlPn4nMQYaGD2S
RhUKEB+RkbYHFJQ8TgxEdycq7PcGCewFaltFd9vFFegfFxCG7Rz0IrTaemDCrVgv
lWEe3cUUnzq8dQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:35 2025 by rpki-client