Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier: oezWTG3qlNK8xR7La6L/8KWNYTa2oUwuQnRTw2bL3Cg=
Subject key identifier: A2:FC:F7:05:08:53:1F:CF:41:AA:77:D2:BD:45:E5:53:25:84:4A:B2
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial: 0194BD179E6C8B50C6C4DB4B0E97FE4A60BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number: 0D12
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: NCMKN0ErAT9KTp2AwH379Vtw0GTrP/rpwP/zZkdTSMg=)
2: OpJ_uz4hg9WS1uTnKXn75qGvb3w.roa (hash: zJt7hWD6hoBRKS4g5AHeuYKclEqIASb0N8YkICHekl0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9e:6c:8b:50:c6:c4:db:4b:0e:97:fe:4a:60:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=a2fcf70508531fcf41aa77d2bd45e55325844ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cf:e4:76:80:0a:40:3d:21:02:ee:53:fc:c0:
de:44:e0:8f:fb:5d:35:ec:be:24:0d:5a:7e:c3:94:
10:ab:95:fc:2d:ce:9e:4d:a9:3c:6e:20:a4:f4:54:
d0:a1:a2:8c:04:50:ec:13:56:aa:66:5b:dd:16:98:
8f:91:8b:90:81:2b:f9:70:8b:eb:b3:59:7d:31:00:
a8:b0:3e:13:90:14:25:98:07:ce:5b:bc:4b:fd:fb:
c2:90:14:6b:fa:51:e7:2e:ff:25:54:ae:2e:8d:89:
7d:a4:71:50:17:7f:a1:a4:1d:ac:c6:d4:d9:a1:39:
94:c7:4b:c2:d0:fe:8b:01:fb:e5:0c:ac:e3:d6:e8:
db:ca:17:f9:bb:23:0b:f6:6a:1b:40:44:a8:96:82:
00:90:34:f1:dd:67:21:f4:cc:37:79:59:0f:9d:90:
5f:aa:42:12:a7:bc:b9:ce:60:7c:54:71:90:a7:75:
1d:10:aa:aa:13:85:7c:5a:d4:ba:7a:7a:e7:6e:79:
27:15:07:4a:de:95:bc:69:33:bf:05:a8:aa:87:1c:
86:9a:5e:8f:00:24:61:3c:93:11:99:8f:8c:57:9b:
ce:49:29:f2:a1:19:fd:18:5c:e9:bf:9a:62:ef:49:
05:b8:d4:84:93:99:e1:18:e6:42:05:57:18:94:45:
ff:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FC:F7:05:08:53:1F:CF:41:AA:77:D2:BD:45:E5:53:25:84:4A:B2
X509v3 Authority Key Identifier:
keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6b:eb:59:8d:49:f3:37:ca:22:a5:f9:b5:8c:cf:cf:3f:93:
e0:cd:c0:05:d8:ac:cc:d5:01:e3:a3:e0:8b:63:59:55:18:ba:
a1:77:42:a2:71:28:f2:f8:69:b3:37:58:f7:da:9c:8a:07:95:
a5:1f:68:08:91:33:78:8e:11:7b:3c:05:38:74:92:63:a6:b5:
33:25:e6:69:8f:5b:aa:8a:e4:87:f7:f0:b5:e6:a7:62:48:ef:
07:83:37:7f:07:2c:a0:a4:f6:0a:d9:42:40:10:4f:2a:c2:ab:
40:88:0b:5d:64:fb:1e:53:83:10:9d:b7:63:22:3c:e2:d6:9a:
67:a1:ce:b6:51:27:9e:3c:46:f4:cd:d1:0f:3c:ef:ac:17:51:
63:0f:21:f7:42:47:02:a5:7d:a3:a7:15:8a:dd:40:6b:14:9b:
f8:73:eb:35:5b:c6:6e:5c:2c:3a:32:6a:8c:75:6e:26:b3:de:
94:ff:16:0f:6a:f7:b8:50:ef:1c:f1:36:03:9a:b1:c5:1a:d2:
2f:12:c7:20:6c:ab:42:3b:46:e9:08:bb:7c:cb:32:ec:4d:ed:
ff:04:27:6b:57:2b:7a:d0:18:1a:44:3b:62:5c:93:2b:46:dc:
e1:cd:96:be:91:72:a0:ec:e8:b2:62:a6:8a:43:20:94:ca:a5:
2e:44:78:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:02 2025 by rpki-client