Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json)
Hash identifier: Dy9AE4/1X9qx6G8/ddaubx2mb+pMaBXe6pJEWT/PbbE=
Subject key identifier: 5D:58:4F:0B:CD:82:0B:C8:97:26:96:61:C9:42:30:40:9C:58:5F:E9
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 0194BD4E913867DD87EB7369DE51E229A1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
Manifest number: 11D2
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: ljMvJHcLUiaOGc29rovrKP3q5hi3ROANri8nJu2zyhU=)
2: JYVK5YIo9oFduSfdge32BhR1llk.roa (hash: MLgxgkj7xVD4j08JzP+4k7sw1diRLF6XHz+tW1zn9ms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:91:38:67:dd:87:eb:73:69:de:51:e2:29:a1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=5d584f0bcd820bc897269661c94230409c585fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:5a:0b:a0:44:3c:c0:75:f2:72:95:19:b0:
3c:53:8d:69:18:e0:5c:c4:bf:1a:98:ba:88:25:f7:
8a:9e:ba:d4:b8:11:25:20:72:8b:45:17:b5:67:59:
87:32:fc:bc:87:e0:73:95:87:51:eb:65:b6:ff:59:
d4:37:77:77:c1:99:cc:3a:c2:1b:3e:2f:9d:4d:4f:
d7:ec:9c:2c:5d:cf:62:f1:37:a2:bb:52:63:11:aa:
28:24:a4:9e:99:c5:05:f9:51:e0:f1:37:9d:4e:7d:
77:cd:43:7f:86:b3:68:cb:5b:a1:ef:a1:58:bf:e3:
7d:f2:46:32:f2:c0:1e:fa:71:29:b0:d6:9f:0d:1a:
5a:2a:f1:9f:2f:de:5d:e8:cf:e1:47:00:6c:39:bf:
95:a4:7a:95:8e:80:ae:44:c0:8d:a3:36:ce:19:14:
10:73:29:42:67:7c:11:e3:60:51:50:f2:ac:2e:ea:
2a:bf:cc:b5:60:86:5c:b5:77:05:c8:4c:9b:39:b6:
9b:1d:b0:63:94:3f:d9:8c:74:6b:8d:81:e2:f8:68:
b6:9e:0c:c0:ca:55:38:c3:c8:c5:58:96:a6:a1:bb:
8d:e4:42:9b:ce:ed:b0:d5:c5:5f:b5:3e:ac:09:b7:
19:94:a5:f6:9a:d6:41:3c:22:ce:17:28:1c:d4:b2:
b8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:58:4F:0B:CD:82:0B:C8:97:26:96:61:C9:42:30:40:9C:58:5F:E9
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b8:29:0f:ef:11:d5:1c:ac:a9:9e:51:bc:cf:70:96:93:2e:
bf:d1:bd:36:2d:5a:21:2f:c8:4e:19:9f:fb:ac:fc:12:91:ee:
2a:fe:32:a9:33:00:da:c3:b5:c3:32:5a:3c:00:1a:90:95:78:
59:53:f8:65:f7:a0:3e:de:b5:f5:5c:31:11:9a:9f:1f:f6:4e:
b9:e5:1c:3f:a5:7b:dd:05:e5:16:37:b0:11:c0:b6:70:f6:da:
47:d5:72:34:9d:2f:24:22:5e:55:18:b7:50:9d:13:74:2d:ea:
31:57:07:63:95:2a:d6:94:e0:39:64:25:03:73:1d:3f:04:ca:
b9:e9:b0:06:be:bb:46:b3:fd:08:cb:03:a1:f9:6b:52:33:2a:
a3:e1:2e:cb:8a:25:04:a1:a7:99:39:48:17:81:7f:56:30:46:
57:93:b3:8f:d6:bd:56:52:48:c9:d7:2f:0a:6d:2e:30:c5:91:
8c:2a:59:81:68:c5:b7:02:a8:f1:e7:95:04:5f:c7:57:39:3d:
41:99:8d:bc:31:4c:25:1e:5f:91:04:48:51:05:b7:82:b4:ea:
56:4c:6f:b5:5c:96:cd:e4:4d:d3:d1:df:7c:e1:5b:5a:02:b2:
79:b4:58:89:96:3d:ec:d1:28:ea:b4:18:dd:41:d9:4f:7f:87:
b2:60:89:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:33:57 2025 by rpki-client