Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
File: 9q7W1c5BV5fBKF9-9v0EPGRm594.mft (raw, json)
Hash identifier: 6jrVtJb4hEgXQ+4J7nysAa3HFS59/RfKR8iwVjFIVY0=
Subject key identifier: CA:54:2C:FE:E0:CF:AD:BF:F2:DE:72:86:A1:B0:27:36:9C:BA:8D:CB
Authority key identifier: F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
Certificate issuer: /CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Certificate serial: 0194BBCE983261322BA6E38A9937F5021003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
Manifest number: 091E
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: 9q7W1c5BV5fBKF9-9v0EPGRm594.crl (hash: bhRHHqy+1gRkpKEQ4DB9NVdaNE+/tpmHYjR2QFtz6Dc=)
2: ziQt4Au1b87EcX3IQE4F3MWkDm8.roa (hash: KUoOZI3FZormf07wPCHQ5jctubRO3hNmnfHFtLKB4fQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:98:32:61:32:2b:a6:e3:8a:99:37:f5:02:10:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=ca542cfee0cfadbff2de7286a1b027369cba8dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c5:22:05:d2:d7:20:5c:da:73:bc:cb:84:60:
2b:41:e6:ad:a1:1f:7f:26:24:37:53:cc:d7:d7:6f:
26:55:ca:2f:d3:40:f7:49:54:2d:de:97:a6:89:5b:
83:06:3e:d2:48:4b:73:f5:ba:e0:cc:fb:0f:35:e4:
6e:77:60:25:da:3d:a2:f6:7f:ee:bb:50:c6:d7:50:
71:f8:fb:93:01:5a:06:f2:00:89:9f:08:62:58:35:
4d:44:70:9b:36:8e:4d:3f:ae:8f:3f:24:90:91:5b:
6d:62:06:39:bf:05:f0:6a:b1:19:ce:fa:84:03:67:
30:b2:26:2c:5d:b1:36:ff:a1:2f:fd:17:d8:26:38:
0d:52:bc:ae:bf:44:de:f9:d9:02:f3:f2:70:e8:25:
14:45:9d:9a:d7:ff:7c:96:ef:0f:3c:73:84:df:ca:
31:72:65:af:e1:b0:ab:f6:4a:86:72:0d:8f:a9:c5:
64:34:62:b3:fb:a6:f4:21:5f:c0:0f:a4:c2:9a:49:
5d:f6:c1:7f:21:dc:79:8f:4f:d7:af:34:19:a2:c5:
20:8e:08:b2:62:37:a5:71:6c:b9:22:f1:ea:5a:21:
10:ec:2a:48:10:80:9b:06:71:eb:95:8d:0b:ed:61:
a4:aa:7d:9a:bb:af:ba:36:5d:96:1d:77:ec:a5:f4:
9c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:54:2C:FE:E0:CF:AD:BF:F2:DE:72:86:A1:B0:27:36:9C:BA:8D:CB
X509v3 Authority Key Identifier:
keyid:F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ae:c0:6d:d5:35:c3:d7:46:36:76:59:48:a0:f0:89:e5:71:
c6:58:91:01:a1:58:37:ad:db:a1:d3:4a:64:20:75:af:89:51:
56:bd:35:0d:a2:1a:e9:20:ce:aa:1a:85:02:84:ff:14:3d:be:
c4:eb:76:60:39:4a:19:bd:74:5c:be:fe:a1:24:6c:0b:b0:7b:
39:a3:b3:30:1a:58:67:6b:64:d9:a4:b1:0e:46:f9:b3:c5:5f:
b9:53:c8:ab:89:ae:32:78:7c:46:9d:28:f4:e5:ac:21:c0:64:
4a:4c:54:13:ee:a2:5e:4e:7d:b0:5c:aa:05:43:50:90:f0:c1:
6c:32:93:6d:cc:6b:99:9f:95:c6:a0:b0:7e:d3:d2:72:ee:31:
5a:5f:cc:9c:0c:0a:46:fa:48:94:22:04:a8:86:89:e8:5e:97:
fc:0f:f5:de:2a:c6:24:74:0e:cb:a2:90:cf:66:df:fd:23:21:
0d:f1:fe:5a:fe:9c:7b:e6:e0:51:a8:3e:43:e6:fd:16:d3:2f:
12:fc:05:30:70:63:bf:0e:79:c0:d0:dc:97:45:61:39:74:04:
9e:f2:cf:e4:c9:2f:e7:f6:a7:92:2d:64:13:bd:91:74:12:d1:
d5:a0:77:0d:15:58:9c:fc:cf:28:48:88:d2:e8:df:20:1e:c7:
65:d3:42:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:01:10 2025 by rpki-client