Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a1c8bd-bd94-46f6-aa49-7417e71a76e8/1/9ovCAZ6OUG45nL9lhmmcyIb8IPY.mft
File: 9ovCAZ6OUG45nL9lhmmcyIb8IPY.mft (raw, json)
Hash identifier: L9HKY1hn6XlT1zCgnmO8SER1kANXYow6+Cw+YArOPTE=
Subject key identifier: 4D:0A:F7:34:11:C6:10:AD:60:B1:8C:4E:70:51:69:47:F3:6A:3F:25
Authority key identifier: F6:8B:C2:01:9E:8E:50:6E:39:9C:BF:65:86:69:9C:C8:86:FC:20:F6
Certificate issuer: /CN=f68bc2019e8e506e399cbf6586699cc886fc20f6
Certificate serial: 01944AB95AAF82D13349B7D6AD26EDC718B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ovCAZ6OUG45nL9lhmmcyIb8IPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a1c8bd-bd94-46f6-aa49-7417e71a76e8/1/9ovCAZ6OUG45nL9lhmmcyIb8IPY.mft
Manifest number: 13C5
Signing time: Thu 09 Jan 2025 11:00:48 +0000
Manifest this update: Thu 09 Jan 2025 11:00:48 +0000
Manifest next update: Fri 10 Jan 2025 11:00:48 +0000
Files and hashes: 1: 9ovCAZ6OUG45nL9lhmmcyIb8IPY.crl (hash: c61yxXltxSyCoRTTiyoUwxdet0M30SePRSJMOn37+2A=)
2: d-rkCPEWQiWuiZZUguExXn9RIh8.roa (hash: bghyH5rqUf1VZLa/yIfZLWuakQo6sjjmYi5842bNOVM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:b9:5a:af:82:d1:33:49:b7:d6:ad:26:ed:c7:18:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68bc2019e8e506e399cbf6586699cc886fc20f6
Validity
Not Before: Jan 9 11:00:48 2025 GMT
Not After : Jan 10 11:00:48 2025 GMT
Subject: CN=4d0af73411c610ad60b18c4e70516947f36a3f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:e7:05:f0:7e:de:23:66:b7:63:8a:a5:e9:
b6:e7:64:2f:c5:7f:cb:f0:a7:57:72:9c:24:e8:05:
7f:87:fc:31:47:a9:5b:6d:4a:26:e1:03:c1:d6:e8:
05:78:ea:1a:90:16:ec:6b:00:43:2b:37:c2:7e:40:
b8:4c:f0:ef:10:b1:55:42:6a:59:c6:5c:27:1e:1a:
d9:5c:2a:fd:27:70:bd:8e:5a:c1:d5:87:71:b2:a9:
ed:29:2b:76:4f:86:4d:5c:5e:4d:38:8f:f2:84:8c:
06:2d:b6:ed:2c:7d:02:db:f1:00:16:ea:1c:97:95:
26:b9:c8:fa:88:7a:07:c9:ce:64:f4:25:65:fb:1e:
3c:40:9f:e8:32:5a:1b:0a:e3:ce:94:de:ce:a0:ce:
cd:52:eb:1f:5f:3a:b8:db:1e:fb:21:c3:3f:42:79:
5f:56:b7:a9:49:86:4d:94:c9:43:1f:2a:41:6e:38:
92:c8:b2:42:ba:d7:d7:56:cd:11:eb:2f:9c:87:95:
57:a7:d6:0c:89:2d:c6:50:90:9d:1e:8c:6d:b9:e5:
19:75:50:d5:b7:b4:72:ff:f2:41:4f:91:3d:c1:c6:
3d:be:a6:f2:93:a2:63:5c:88:61:15:39:bb:6a:e7:
fa:45:28:0f:01:53:5a:a3:94:e6:8e:1f:42:33:78:
6c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0A:F7:34:11:C6:10:AD:60:B1:8C:4E:70:51:69:47:F3:6A:3F:25
X509v3 Authority Key Identifier:
keyid:F6:8B:C2:01:9E:8E:50:6E:39:9C:BF:65:86:69:9C:C8:86:FC:20:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ovCAZ6OUG45nL9lhmmcyIb8IPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a1c8bd-bd94-46f6-aa49-7417e71a76e8/1/9ovCAZ6OUG45nL9lhmmcyIb8IPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a1c8bd-bd94-46f6-aa49-7417e71a76e8/1/9ovCAZ6OUG45nL9lhmmcyIb8IPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e9:33:7d:2c:8c:a9:4c:b9:ff:18:13:d8:40:e9:f9:3d:e3:
e4:3c:c7:85:65:cf:9d:42:87:dd:7b:0d:e8:f3:83:a4:c6:1f:
0d:37:8a:bb:65:09:0c:c1:89:e0:f4:72:92:fe:c7:81:86:46:
06:b8:95:fc:21:85:63:63:7c:c8:a8:2d:7a:44:7d:01:57:01:
6c:94:99:39:1d:0d:51:84:bd:af:fc:9d:63:4c:18:5b:dd:c8:
d2:82:08:35:49:06:6d:65:b6:d6:88:8b:8e:37:c9:c8:db:73:
33:15:f5:f8:d2:0b:91:d8:69:84:72:c4:b6:9f:2b:d6:7d:f3:
9e:d3:ac:9a:7c:bf:9f:90:e5:97:59:98:a4:92:d0:00:61:59:
ae:22:41:e5:d3:a2:20:3a:5f:78:7d:3d:b7:0c:95:48:fd:73:
e6:63:4a:98:91:68:5f:86:10:95:0c:1a:2f:6f:bb:bf:2a:1b:
43:92:f2:c9:88:7b:91:a1:4c:03:65:2b:43:45:20:9f:99:8f:
04:9d:59:df:07:84:91:59:5a:82:78:97:b7:f1:9b:29:d5:dc:
1a:71:32:45:26:d0:74:74:e1:ac:81:3b:08:32:44:a9:b2:f6:
3f:fa:38:ac:5e:57:5d:19:ae:35:cd:f2:94:02:38:61:f1:15:
68:68:c1:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZRKuVqvgtEzSbfWrSbtxxi3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OGJjMjAxOWU4ZTUwNmUzOTljYmY2NTg2Njk5Y2M4ODZm
YzIwZjYwHhcNMjUwMTA5MTEwMDQ4WhcNMjUwMTEwMTEwMDQ4WjAzMTEwLwYDVQQD
Eyg0ZDBhZjczNDExYzYxMGFkNjBiMThjNGU3MDUxNjk0N2YzNmEzZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLznBfB+3iNmt2OKpem252QvxX/L
8KdXcpwk6AV/h/wxR6lbbUom4QPB1ugFeOoakBbsawBDKzfCfkC4TPDvELFVQmpZ
xlwnHhrZXCr9J3C9jlrB1YdxsqntKSt2T4ZNXF5NOI/yhIwGLbbtLH0C2/EAFuoc
l5Umucj6iHoHyc5k9CVl+x48QJ/oMlobCuPOlN7OoM7NUusfXzq42x77IcM/Qnlf
VrepSYZNlMlDHypBbjiSyLJCutfXVs0R6y+ch5VXp9YMiS3GUJCdHoxtueUZdVDV
t7Ry//JBT5E9wcY9vqbyk6JjXIhhFTm7auf6RSgPAVNao5Tmjh9CM3hsYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0K9zQRxhCtYLGMTnBRaUfzaj8lMB8GA1UdIwQY
MBaAFPaLwgGejlBuOZy/ZYZpnMiG/CD2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW92Q0FaNk9VRzQ1bkw5bGhtbWN5SWI4SVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hMWM4YmQtYmQ5NC00NmY2LWFhNDkt
NzQxN2U3MWE3NmU4LzEvOW92Q0FaNk9VRzQ1bkw5bGhtbWN5SWI4SVBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hMWM4YmQtYmQ5NC00NmY2LWFhNDktNzQxN2U3MWE3NmU4
LzEvOW92Q0FaNk9VRzQ1bkw5bGhtbWN5SWI4SVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOkzfSyM
qUy5/xgT2EDp+T3j5DzHhWXPnUKH3XsN6PODpMYfDTeKu2UJDMGJ4PRykv7HgYZG
BriV/CGFY2N8yKgtekR9AVcBbJSZOR0NUYS9r/ydY0wYW93I0oIINUkGbWW21oiL
jjfJyNtzMxX1+NILkdhphHLEtp8r1n3zntOsmny/n5Dll1mYpJLQAGFZriJB5dOi
IDpfeH09twyVSP1z5mNKmJFoX4YQlQwaL2+7vyobQ5LyyYh7kaFMA2UrQ0Ugn5mP
BJ1Z3weEkVlagniXt/GbKdXcGnEyRSbQdHThrIE7CDJEqbL2P/o4rF5XXRmuNc3y
lAI4YfEVaGjB9Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:50 2025 by rpki-client