Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
File: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json)
Hash identifier: KJS1JhLM8rQNrcVZG5wO0vah4Ox4ApdrwAkCairIegw=
Subject key identifier: 48:EA:47:CB:7E:34:40:40:55:4B:DC:42:40:AC:64:A9:78:C4:EB:8D
Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
Certificate issuer: /CN=f57331288d908dd762e4b56f003b448f01881d24
Certificate serial: 0194BC052AE0B5F35220E4AC7B6AC44D784F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
Manifest number: 0861
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: 0bWQKA9zOtioaMzmn9TsZ_m-_Ak.roa (hash: XVs6Vl4wE42XJXEmtUVk+/HVBTJz/D0t8xUAsepjFh4=)
2: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: Kbmva1Q8yJV4eSuyyzQb6oTT9cjbIjHg8OlWV8ejDfY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2a:e0:b5:f3:52:20:e4:ac:7b:6a:c4:4d:78:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=48ea47cb7e344040554bdc4240ac64a978c4eb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:83:b0:1e:30:01:e1:07:8d:81:d3:f0:a7:
bb:da:bd:82:59:e9:48:e4:51:dd:c0:49:89:d8:38:
f5:e1:27:66:f7:20:6c:30:97:28:1d:40:f1:3d:43:
18:47:6a:7f:21:11:fd:62:87:4f:b7:c2:38:f0:23:
88:8c:54:81:8b:ec:55:d5:ea:4a:b3:d4:88:63:34:
b2:55:e3:e3:be:e9:e0:94:09:a2:21:29:68:25:6f:
86:c7:1f:2f:19:f0:48:df:d6:03:05:fd:68:ca:24:
29:1b:9b:58:f3:21:dc:a8:a2:1b:2c:77:c9:49:64:
30:9c:b0:67:75:a7:5d:a5:e1:e7:a4:b1:62:8f:82:
08:23:4d:9f:a5:ef:39:70:b6:38:de:39:33:2b:c7:
64:5a:62:67:4b:cc:d4:12:a3:a5:e5:74:73:c5:32:
ef:27:32:7f:ae:4d:45:5f:40:71:dd:1d:c8:2d:37:
4a:d2:5d:d6:0b:56:0e:8a:04:d2:3b:b3:87:92:b0:
20:be:f4:1e:77:b5:7c:cc:dd:a1:4c:b2:5c:16:3f:
90:c4:ab:67:c0:04:9d:28:cb:74:45:c4:78:31:27:
81:2b:9e:e2:92:cd:8e:85:5d:97:88:b8:56:69:29:
d7:25:00:17:b1:b0:f8:5e:88:68:64:9c:98:58:e2:
a3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EA:47:CB:7E:34:40:40:55:4B:DC:42:40:AC:64:A9:78:C4:EB:8D
X509v3 Authority Key Identifier:
keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:02:0e:8b:b7:0e:9a:8f:b4:28:22:99:14:a0:69:a5:72:b0:
ae:f0:60:3e:35:b2:00:f2:d7:bd:6a:f5:bc:3a:6f:ed:55:03:
61:86:76:00:97:bb:83:f4:29:44:15:fb:ba:75:e0:cf:ff:8c:
88:01:d3:99:0c:fc:82:e7:2e:bd:29:04:ef:95:ab:f6:4c:b2:
0e:d1:c6:26:a5:3a:6d:07:99:83:32:35:30:34:67:6e:99:e7:
89:fd:29:6d:ea:f2:89:dc:6e:c9:a6:ab:c8:a9:09:72:10:43:
bb:ee:cd:97:ab:31:0a:5b:65:0e:b2:7a:79:ac:54:10:57:e6:
28:61:01:2b:0b:7a:ce:aa:4f:1f:26:f5:21:ad:fa:4d:35:c6:
92:c7:03:64:4a:70:0a:ff:ab:76:9f:e7:40:c0:ed:3f:a3:a7:
7b:c4:2e:d3:66:1c:06:fb:b8:62:b1:01:3e:37:eb:4f:64:64:
02:0d:4d:ec:56:92:3b:8b:82:6a:13:f0:62:4d:05:17:f8:0a:
87:1a:4d:fd:a0:29:2e:6a:a7:45:d4:38:76:29:30:c3:10:5e:
13:18:9d:29:9a:12:68:9b:16:99:cd:95:cc:d6:88:0c:6c:1d:
ff:f0:c7:5a:13:93:ba:80:63:d1:5e:5b:ba:c5:67:de:a2:58:
22:21:30:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:31 2025 by rpki-client