Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
File: 70Ku0OkbI9DNy_skrIObDb5qoEs.mft (raw, json)
Hash identifier: cr6Mlo87z47FN4yEHwUKObk/sdWU9L4uzdDnHr7Rk5s=
Subject key identifier: 42:86:C7:BE:B8:22:B8:13:EA:C8:BE:25:6A:BA:BA:91:B3:E5:BE:F3
Authority key identifier: EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
Certificate issuer: /CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Certificate serial: 0194BD177BF61D04F3895091C396CF881A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
Manifest number: 09A0
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: 70Ku0OkbI9DNy_skrIObDb5qoEs.crl (hash: h/05fm2e2fnMpmBhEFj+bs4z8wGoklh+2pY6ijwrrOQ=)
2: FiLJrOB6VSbXcUW10ayq5u0-45c.roa (hash: SVzm6u7ARr2O1cZhcAUWJuayXj1RRfV/z3YIwyKiXZI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7b:f6:1d:04:f3:89:50:91:c3:96:cf:88:1a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=4286c7beb822b813eac8be256ababa91b3e5bef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:df:49:00:89:ac:39:77:cb:74:dd:6a:47:
80:0c:c8:82:de:d9:1a:75:a2:19:0c:94:9a:6c:e5:
64:5c:3c:94:fd:68:28:21:90:41:25:b5:0d:a3:bd:
f3:df:3e:72:50:ad:36:4c:56:9a:fe:11:14:d5:e5:
65:aa:54:59:d0:ea:db:4c:25:da:51:89:ee:92:2f:
9c:85:04:8d:dd:aa:fb:a8:1d:47:85:1d:20:26:9c:
49:40:81:87:f7:15:8e:56:53:54:c5:4b:44:2b:78:
3b:65:2c:9c:5a:3f:30:79:41:74:ef:25:d5:99:9b:
48:7d:6d:6f:7c:79:18:bd:dc:b8:78:bf:21:33:80:
c4:82:a6:a3:5c:e0:73:ce:1d:09:3a:4c:eb:0c:1b:
55:e7:e9:71:36:b6:b3:31:b8:c2:6d:01:e7:b6:52:
ee:52:8c:65:4a:6a:ce:32:f0:5e:de:12:1e:73:e0:
d6:51:af:75:ab:7f:d2:ac:71:7d:f3:a7:c2:f9:3d:
d5:79:4c:8d:0c:a9:1b:8a:fa:16:eb:e3:73:b5:7d:
52:dc:95:f5:fd:2c:6f:b2:1e:57:75:e7:fd:bf:fb:
8f:45:01:f1:22:9f:31:05:7b:54:9b:42:43:de:35:
38:ef:d7:d2:22:02:bf:ff:f9:09:ad:49:41:48:27:
d9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:86:C7:BE:B8:22:B8:13:EA:C8:BE:25:6A:BA:BA:91:B3:E5:BE:F3
X509v3 Authority Key Identifier:
keyid:EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:36:73:f9:42:17:1b:b3:1c:ec:28:06:61:28:21:19:36:5b:
21:24:d4:34:72:04:b7:4d:b0:59:96:03:3e:7a:0f:57:1b:32:
cf:14:e7:55:af:78:da:cc:74:8b:81:6d:ea:f0:36:f8:45:f9:
ea:47:9f:51:6f:5c:31:50:38:55:c5:b9:c1:9e:76:10:d4:55:
04:9a:1a:63:a5:e8:04:a4:bd:5d:0c:83:02:49:0d:a2:c7:9d:
5a:f1:0f:9d:c2:14:10:72:bb:1c:8a:32:ed:28:7b:9b:47:67:
ea:3e:80:28:9f:07:7a:dd:59:94:36:ef:59:30:db:66:12:57:
e5:b7:1b:75:18:d9:82:20:07:78:19:fe:05:4a:e9:d6:ef:9e:
21:66:f1:2c:19:fa:be:b0:9f:da:ec:f1:07:49:41:b8:15:66:
1a:9f:23:48:9b:d7:ae:59:35:7e:da:90:0b:62:b4:20:da:38:
29:89:de:b5:73:ce:76:84:b4:64:1a:b1:00:26:3f:f6:d5:50:
50:5a:43:63:e2:a5:a5:ab:a3:51:3d:bf:55:10:63:5a:d0:94:
0c:db:41:bf:46:e7:d6:1e:3a:2a:47:c2:56:3f:33:46:1e:a0:
a9:b3:8f:fa:12:63:ee:16:cb:dc:72:6b:e7:cf:67:86:3d:1d:
fd:56:41:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:03:37 2025 by rpki-client