Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
File: m1hBsHzPY5l5mzWGobIohZI9-L8.mft (raw, json)
Hash identifier: 2dMQcR14Srn04zvAVOKcw8iNGUdTbGT7gj5ulVIfPEA=
Subject key identifier: F5:45:38:F5:12:7F:E0:A3:E6:FD:B1:6F:0A:63:45:3B:A4:9E:5D:A6
Authority key identifier: 9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF
Certificate issuer: /CN=9b5841b07ccf6399799b3586a1b22885923df8bf
Certificate serial: 0194BC72C1F8A2158B4131F858CBB6423416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
Manifest number: 10A6
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: m1hBsHzPY5l5mzWGobIohZI9-L8.crl (hash: 8fPODpswaw80cYPEjcbH6f/uY8c1JF3gj2Roi3tYdgU=)
2: t1PClou-z7vfeF555qMb4l57MSc.roa (hash: 9X/H2c1jyHWtYn2BaqYb1fxAsJf2gSZ8sASmz7CE+Tw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c1:f8:a2:15:8b:41:31:f8:58:cb:b6:42:34:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5841b07ccf6399799b3586a1b22885923df8bf
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=f54538f5127fe0a3e6fdb16f0a63453ba49e5da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:44:6a:5b:a6:a5:2e:f6:fb:3f:6f:3d:0f:5f:
cd:6f:46:3d:b4:2f:10:16:4f:fe:9d:e5:5e:51:68:
d3:21:9d:6f:42:38:a9:90:7f:f8:d1:6d:58:b1:af:
6d:87:ae:e3:7f:a4:d4:ea:5c:72:fd:89:0a:39:ca:
63:32:92:e5:c9:a0:33:c2:e0:70:21:78:4b:6b:15:
46:ce:21:68:60:b1:16:2f:03:89:bd:4b:a2:e7:06:
54:16:a7:36:98:db:40:1a:62:e7:14:8a:66:cf:82:
22:26:06:48:68:8b:05:6c:ff:6b:49:94:3e:03:b3:
45:73:41:cb:67:90:fb:6a:25:3c:b7:87:e8:32:40:
32:51:2b:84:35:1c:2f:76:ba:3a:af:fa:05:52:ff:
d5:1e:94:f3:0e:aa:7a:52:8b:79:ce:80:24:76:e4:
3e:ed:17:45:7c:19:a5:2a:b6:24:70:ae:1c:20:34:
5e:bd:73:71:8b:17:91:cf:18:46:7a:9c:87:af:33:
b3:4f:a6:dd:20:d0:77:c0:83:62:35:09:6d:f9:80:
c9:6c:4a:7b:d6:d6:6b:d1:26:de:40:53:98:a8:1f:
eb:71:2c:5d:57:a0:b5:d6:a5:40:34:1a:dd:6b:19:
a0:89:13:5f:76:1a:3a:38:ff:03:fe:c1:05:f2:2a:
48:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:45:38:F5:12:7F:E0:A3:E6:FD:B1:6F:0A:63:45:3B:A4:9E:5D:A6
X509v3 Authority Key Identifier:
keyid:9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:94:c6:90:9f:75:ee:0c:df:f1:5e:9c:89:06:92:bc:e9:c6:
bc:22:d2:85:1b:b3:39:ad:8e:30:ca:6c:7f:65:e6:76:b5:06:
51:fd:14:3f:ba:c9:33:51:9b:fb:af:7b:b4:c5:ea:dc:48:c8:
15:89:fc:42:e4:c5:7f:6f:e3:6f:1f:8f:84:23:25:a9:e4:e1:
8a:72:4d:60:23:f6:b9:36:db:23:fc:6c:fe:1b:79:db:f0:99:
71:7b:98:8f:15:ef:b0:8e:ca:06:93:da:74:b2:a9:2c:75:75:
05:60:bc:a9:9c:bb:5c:1e:8e:c5:41:cc:d2:6b:65:49:b3:9c:
64:c9:90:87:73:21:0c:7b:c4:d3:d1:5a:ec:4c:b9:ca:ee:6b:
92:61:dd:42:91:41:3e:e9:3b:f3:4d:30:8d:13:5d:3a:ce:51:
00:f6:a1:07:e6:65:1b:6c:fd:cf:8d:7b:55:1f:25:28:e9:96:
73:11:77:66:b3:9d:d5:25:6d:4c:a0:0a:7c:2c:f4:66:fb:14:
4a:1d:4c:2d:a6:17:55:b6:36:74:81:01:36:88:c2:99:7f:eb:
d1:85:d7:a0:12:46:10:c9:32:8c:38:4c:cc:73:e1:6d:fd:2d:
5a:5e:46:9e:ca:40:09:53:2b:26:10:ac:99:6e:05:b0:7f:54:
b6:8d:5d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:40:12 2025 by rpki-client