Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
File: 9bulXh8L-GE-qbu-KXooGzyDgYA.mft (raw, json)
Hash identifier: 0Jlm1uYE/8L8Sg8CdqsTPFpHCR2SjwRCqFErh7Xpq5c=
Subject key identifier: 54:59:C7:E3:30:F7:78:95:F0:03:01:EF:68:37:C5:23:95:EF:BA:1F
Authority key identifier: F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
Certificate issuer: /CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Certificate serial: 0194BD85292C96F209AC48BD8900401AE4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:08 +0000
Manifest this update: Fri 31 Jan 2025 18:00:08 +0000
Manifest next update: Sat 01 Feb 2025 18:00:08 +0000
Files and hashes: 1: 9bulXh8L-GE-qbu-KXooGzyDgYA.crl (hash: YHDf2VpE+JDcKvrM516toVe9+k6yOCipym0bO6Exq6U=)
2: UKsojMJQKjwqEBjlQ0hvZzPL5fM.roa (hash: JwS6NOp3JTf4Gv4MdW3hpkLuh9j4F7ahSArR1W30tPw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:29:2c:96:f2:09:ac:48:bd:89:00:40:1a:e4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Validity
Not Before: Jan 31 18:00:08 2025 GMT
Not After : Feb 1 18:00:08 2025 GMT
Subject: CN=5459c7e330f77895f00301ef6837c52395efba1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:08:32:8e:bc:12:3c:ab:1f:21:25:bd:bf:ab:
8f:8b:3f:8f:f0:d7:48:b9:9d:1c:d3:09:d2:c4:72:
5d:bc:d4:5a:08:d3:c3:dd:80:27:67:dd:0f:13:77:
7b:2b:f9:51:b7:db:25:10:0c:94:16:9b:27:77:c3:
e8:96:a1:ef:48:6b:c6:20:4e:83:6f:23:a5:90:55:
26:c4:82:70:a4:50:9d:79:cb:5f:cc:4f:cc:b9:6d:
62:24:b8:90:21:77:0a:c6:9a:1c:dd:6d:98:c0:09:
0e:bf:dc:85:cf:58:45:20:84:e8:69:59:4f:c2:1f:
88:76:c6:b9:fe:38:2c:a6:13:33:28:96:14:7b:66:
8c:f4:f3:4d:36:2c:34:7b:6d:2f:b4:5c:5d:86:33:
03:13:fd:a1:b4:25:59:59:97:e1:97:d7:d6:c7:db:
e1:44:93:81:09:db:76:d8:71:16:c7:70:a5:54:43:
fa:4f:8f:d8:7f:89:82:63:71:71:ef:16:73:a3:84:
fa:28:33:85:b9:58:e2:7f:a2:b9:1e:a1:af:bd:23:
9c:54:24:7b:d0:fb:06:b7:30:be:17:48:40:89:c2:
03:25:c6:a7:25:e4:f3:70:f1:fe:28:1f:a2:e0:0c:
45:85:4a:a6:87:cd:c8:df:a1:c5:b9:7c:97:f9:b8:
91:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:59:C7:E3:30:F7:78:95:F0:03:01:EF:68:37:C5:23:95:EF:BA:1F
X509v3 Authority Key Identifier:
keyid:F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:fa:83:a3:9d:f8:05:38:b8:40:42:a4:92:a6:6e:5f:96:27:
55:11:07:15:38:6b:71:32:11:57:ca:ec:d8:fa:5f:f3:22:f2:
0c:bd:ce:04:8c:2b:04:db:62:69:08:74:55:da:7d:8e:c3:3a:
61:bb:3e:3b:43:f2:54:5e:4e:4c:11:c6:90:89:9e:b1:ac:20:
6d:87:19:31:fc:37:40:28:55:5d:80:7e:9c:c9:ef:b2:be:99:
4b:8c:7a:2d:c5:e4:58:6b:78:99:8a:67:ba:a1:a4:8f:13:29:
ce:3f:a7:83:a0:f8:08:9a:ad:68:36:56:03:9d:a0:17:68:89:
ff:5b:8c:b2:15:46:c4:e8:e5:49:6f:1a:bf:ea:04:8e:8c:6c:
f2:23:4f:e4:05:e8:0e:af:53:6b:cf:f0:89:97:3c:8f:61:6f:
d1:b9:3d:a7:bf:43:eb:0d:61:72:fd:e9:0b:c8:46:fc:96:1c:
56:8d:0e:9f:92:38:1a:12:5d:bd:b2:18:6c:31:41:6b:b6:c3:
68:e4:48:38:26:89:f2:0c:95:45:34:6d:f8:e0:eb:35:a6:13:
e5:64:4b:17:6a:ac:c2:52:e8:83:71:40:7d:27:5b:6e:1d:d1:
43:e3:70:c6:13:5f:ac:cf:f8:48:49:eb:fe:3e:bf:ae:ef:91:
42:0d:ee:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:22 2025 by rpki-client