Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
File: 1-c9m7XQoo55j8NJzYDf0McQao08.mft (raw, json)
Hash identifier: BoI5hkOhjYBaajwcnfHOoh98U7UCddBIIuIdAEFuJ2c=
Subject key identifier: 0A:2F:74:BD:F1:40:F5:D5:C9:FB:F8:2B:AC:82:7F:7F:EC:F8:D2:A4
Authority key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
Certificate issuer: /CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Certificate serial: 01962E2AF90D0E1CDDF9168BB94EAF046A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
Manifest number: 14EA
Signing time: Sun 13 Apr 2025 08:01:30 +0000
Manifest this update: Sun 13 Apr 2025 08:01:30 +0000
Manifest next update: Mon 14 Apr 2025 08:01:30 +0000
Files and hashes: 1: 1-c9m7XQoo55j8NJzYDf0McQao08.crl (hash: 3FJaUM0VZK0VY/ZoyK5sqMJHBeBRw6891ZvCeQgXFAo=)
2: rbOZFLBJLeiBgSg-ywSTHEPc89w.roa (hash: Wz1ZKiJOk56RIdFfsa2AALc0JqTjfQEXp/iXAbjA7+g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2a:f9:0d:0e:1c:dd:f9:16:8b:b9:4e:af:04:6a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Validity
Not Before: Apr 13 08:01:30 2025 GMT
Not After : Apr 14 08:01:30 2025 GMT
Subject: CN=0a2f74bdf140f5d5c9fbf82bac827f7fecf8d2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:43:25:83:19:28:09:d3:f6:9c:b3:5e:f0:
0a:2b:1d:a1:b4:c4:54:8f:68:67:a3:f8:51:c7:a6:
cc:15:6a:4a:19:ac:64:e2:9e:5c:b5:54:ee:20:9f:
5e:03:1b:d4:e8:16:3a:83:62:2b:23:af:42:19:af:
e8:c7:cf:b8:a2:31:82:34:cc:e4:19:39:d0:52:60:
c6:d0:c2:80:a6:45:e5:e4:50:92:cc:c2:76:ef:a1:
be:50:80:6c:7c:14:3b:27:55:1b:bd:73:04:78:b0:
4e:e9:12:7e:12:1b:71:aa:dc:82:c1:67:85:09:ff:
4b:d8:4d:49:b2:62:8e:82:95:82:d5:29:08:c7:1a:
ac:06:00:3e:57:42:1b:bf:01:b0:b4:25:e2:ba:11:
20:ae:ab:0b:b9:f1:fd:36:24:94:d7:c0:ed:68:aa:
1a:12:2a:4a:be:93:91:b0:eb:15:05:bc:7b:8f:30:
95:22:45:51:63:64:d0:0f:8a:9f:1f:e4:f1:3e:dc:
5b:e6:d9:bd:f8:48:62:6f:31:95:30:2f:d3:0c:3c:
49:7a:76:e3:16:13:79:8a:40:83:22:90:80:6e:19:
25:25:45:89:23:02:16:db:2e:ca:2a:f6:64:81:74:
36:81:b6:4e:53:99:85:d5:f3:12:25:d6:2c:72:c4:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2F:74:BD:F1:40:F5:D5:C9:FB:F8:2B:AC:82:7F:7F:EC:F8:D2:A4
X509v3 Authority Key Identifier:
keyid:F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6c:ff:dc:92:4b:35:71:6e:6e:b5:00:fe:80:8b:40:91:f2:
9a:a5:82:eb:c2:65:38:66:b2:df:6e:8f:04:97:b6:f4:fd:ab:
86:d9:1a:1e:fb:57:cb:45:f7:04:a0:70:0b:f3:70:4d:a1:9a:
ca:a6:33:ef:b7:9f:47:5b:d9:94:c6:08:f0:65:6d:92:57:10:
b6:af:65:e4:6d:81:1f:96:a7:83:70:d1:f3:e1:48:65:0f:33:
30:f9:87:43:aa:b1:9b:3c:63:de:96:e9:98:de:d6:ba:4d:04:
e6:0e:39:98:a3:64:e2:4e:eb:b3:1b:7a:d4:4e:7c:c9:fe:fa:
58:c8:d8:24:30:91:3e:dc:df:09:a4:e8:3d:25:29:7f:08:92:
50:b2:95:fc:89:ed:0b:d1:4c:45:2e:7a:90:de:5a:67:0d:1e:
95:3c:20:fd:ee:7c:1f:a4:4b:a8:2a:3a:10:8c:1d:b0:a5:b8:
e4:b8:c9:d4:14:c8:35:fb:0e:45:3c:7d:61:69:4c:a5:05:10:
a5:15:c9:d2:ba:d6:07:44:08:a5:81:6d:52:83:9c:af:8a:ad:
6c:5a:a2:76:97:be:7a:21:c3:74:69:52:7b:ef:9b:f4:6f:55:
a6:39:f7:e8:ca:26:1a:3d:a1:26:b8:2c:b5:01:48:38:be:2d:
8b:35:ed:57
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYuKvkNDhzd+RaLuU6vBGp8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5Y2Y2NmVkNzQyOGEzOWU2M2YwZDI3MzYwMzdmNDMxYzQx
YWEzNGYwHhcNMjUwNDEzMDgwMTMwWhcNMjUwNDE0MDgwMTMwWjAzMTEwLwYDVQQD
EygwYTJmNzRiZGYxNDBmNWQ1YzlmYmY4MmJhYzgyN2Y3ZmVjZjhkMmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIpDJYMZKAnT9pyzXvAKKx2htMRU
j2hno/hRx6bMFWpKGaxk4p5ctVTuIJ9eAxvU6BY6g2IrI69CGa/ox8+4ojGCNMzk
GTnQUmDG0MKApkXl5FCSzMJ276G+UIBsfBQ7J1UbvXMEeLBO6RJ+EhtxqtyCwWeF
Cf9L2E1JsmKOgpWC1SkIxxqsBgA+V0IbvwGwtCXiuhEgrqsLufH9NiSU18DtaKoa
EipKvpORsOsVBbx7jzCVIkVRY2TQD4qfH+TxPtxb5tm9+EhibzGVMC/TDDxJenbj
FhN5ikCDIpCAbhklJUWJIwIW2y7KKvZkgXQ2gbZOU5mF1fMSJdYscsTxZQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAovdL3xQPXVyfv4K6yCf3/s+NKkMB8GA1UdIwQY
MBaAFPnPZu10KKOeY/DSc2A39DHEGqNPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jOW03WFFvbzU1ajhOSnpZRGYwTWNRYW8wOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvZDc4NGVkLWJlNzUtNDA3Mi1hNzgw
LWU2MzM3MDNmY2JlZC8xLzEtYzltN1hRb281NWo4Tkp6WURmME1jUWFvMDgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzcxL2Q3ODRlZC1iZTc1LTQwNzItYTc4MC1lNjMzNzAzZmNi
ZWQvMS8xLWM5bTdYUW9vNTVqOE5KellEZjBNY1FhbzA4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGz/
3JJLNXFubrUA/oCLQJHymqWC68JlOGay326PBJe29P2rhtkaHvtXy0X3BKBwC/Nw
TaGayqYz77efR1vZlMYI8GVtklcQtq9l5G2BH5ang3DR8+FIZQ8zMPmHQ6qxmzxj
3pbpmN7Wuk0E5g45mKNk4k7rsxt61E58yf76WMjYJDCRPtzfCaToPSUpfwiSULKV
/IntC9FMRS56kN5aZw0elTwg/e58H6RLqCo6EIwdsKW45LjJ1BTINfsORTx9YWlM
pQUQpRXJ0rrWB0QIpYFtUoOcr4qtbFqidpe+eiHDdGlSe++b9G9Vpjn36MomGj2h
JrgstQFIOL4tizXtVw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:54 2025 by rpki-client on console.sobornost.net