Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
File: n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json)
Hash identifier: 4rFYPHfdCtM1CMbvIVpIjPblq/nQF57sdvx0CklUVmA=
Subject key identifier: 9B:D9:70:40:6C:33:87:D8:3C:6A:AB:1D:8C:33:22:6E:DC:DE:2E:69
Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
Certificate issuer: /CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Certificate serial: 0194BD85747198E74871A8E2F3432C7E0BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
Manifest number: 01E9
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: Rjc45YVuDrAMQdY8qgjKUXqz9To.roa (hash: VkM0hIqEPGBmrXo8E00kzKR2aWKMeDBdfCqKvjZR58E=)
2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: L6vdTKUuzqoK80U4LahFT+z8+jghlVgGp1CIsxrZIZw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:74:71:98:e7:48:71:a8:e2:f3:43:2c:7e:0b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=9bd970406c3387d83c6aab1d8c33226edcde2e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:dd:68:49:78:e6:54:9d:13:60:a3:7f:ab:
9a:06:83:2f:85:cf:68:e6:51:55:84:26:a6:11:a0:
bc:b7:24:23:c0:8a:1c:2e:4b:80:27:88:d1:ab:76:
a4:e9:c3:00:a5:3c:5f:ae:5b:dc:bc:ba:bc:f4:08:
a0:0f:70:83:2e:e0:39:69:f9:a5:f9:d8:da:c3:24:
b8:31:03:a5:b2:35:5e:5c:f8:15:87:fa:90:36:cc:
32:10:c7:6f:ec:35:09:78:96:19:0e:7c:40:3b:f6:
ec:f9:c4:26:4e:a6:9b:14:d4:24:fc:0e:ff:a5:f2:
53:19:05:c0:c0:90:47:4c:55:cd:6a:85:e1:39:ba:
33:a8:41:dd:18:87:6e:51:73:e0:41:8c:8d:14:54:
cd:36:54:03:8a:c2:7c:29:90:81:9a:5b:2f:32:e6:
4d:a1:76:09:8f:be:6e:74:9f:82:06:79:d7:a5:6a:
c3:f3:92:ef:97:b6:64:80:13:9b:74:56:4d:63:fa:
a4:aa:b0:62:e2:c2:78:ab:02:89:f6:13:a6:f9:22:
88:f3:e8:0a:04:ec:1b:fe:b6:ed:b5:43:76:27:f6:
3b:2a:f0:40:fb:d8:cd:c1:04:f9:94:dc:f6:aa:52:
d7:f0:5b:c7:36:c7:09:7a:be:36:37:0d:98:1a:8f:
dd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D9:70:40:6C:33:87:D8:3C:6A:AB:1D:8C:33:22:6E:DC:DE:2E:69
X509v3 Authority Key Identifier:
keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e4:42:f9:ca:e5:09:66:d8:51:98:33:89:70:d9:fa:ef:78:
00:84:25:33:28:fc:a6:61:22:43:45:ef:91:ae:48:4c:bb:67:
8b:6b:1f:8b:04:6c:df:59:c9:3f:89:76:7b:6c:7d:0c:c6:0e:
08:3d:73:8b:df:cf:ba:f5:1e:89:e0:3c:e2:01:9e:e2:15:17:
f2:7d:3a:e2:05:5a:a2:5f:42:60:94:b3:fb:78:0d:26:28:15:
9e:dc:bf:14:ab:d2:bf:ea:51:50:93:d4:6b:ce:92:43:41:b7:
6f:b0:54:2f:2f:e0:0c:96:97:3f:4e:d8:ad:f0:a0:34:0a:39:
e5:18:ef:99:4c:d1:41:c1:54:1d:30:f5:f0:5e:84:4d:21:19:
7d:2c:3e:6a:f3:7c:07:bd:0c:32:8f:8d:45:ea:04:63:b8:fc:
40:11:7b:c2:44:72:f4:56:b0:11:45:5a:40:50:28:ee:6a:7a:
7c:d9:84:38:51:f6:ed:c8:db:c8:57:65:5a:dd:37:b3:89:89:
23:81:4a:8e:ff:63:b1:46:86:fc:7f:7e:74:b4:76:26:ee:c4:
f4:21:59:a5:51:e8:21:a0:4e:71:f8:b0:22:af:b0:3f:8b:c7:
52:21:89:f6:74:12:d1:55:28:af:05:1b:9f:c5:8f:2b:1f:db:
8f:9a:64:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:35 2025 by rpki-client