Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft (raw, json)
Hash identifier: 18M37twIQCb4zFML7ITxJqx3SMVj86UaxDwBzG1TntA=
Subject key identifier: 21:45:85:CD:F5:A3:81:C4:76:7B:2D:89:86:4D:1D:BC:50:72:8F:E9
Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Certificate serial: 0194BD4EBD3D9A8CA79D98F17BACB9619AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl (hash: hPqYSu2/7wqsl80lgAVxYwm05zLZ4Ix9jmYMjJOTV8c=)
2: bOCBzzRvzuJPuu-j2dvPA0mnOUw.roa (hash: InvZiY5TCPmmHvBaq4Cag3h3swbwKMBYSgXMQxCeJZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bd:3d:9a:8c:a7:9d:98:f1:7b:ac:b9:61:9a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=214585cdf5a381c4767b2d89864d1dbc50728fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:90:c2:73:97:16:25:60:26:6a:e1:c3:bd:95:
86:25:dd:48:d2:e8:c9:f9:62:18:e4:4f:68:7e:9e:
83:cd:1d:2f:8f:7b:17:cf:b4:07:e5:6f:b9:f4:02:
dd:e4:74:0f:30:cb:70:9e:38:0e:6d:ad:09:09:63:
dd:78:e1:c0:03:a9:80:d4:a1:f0:ad:b8:04:0a:e4:
c0:77:f5:03:5a:09:26:db:9f:b9:b6:8a:06:d7:48:
62:4e:90:8a:d7:38:b2:a2:8f:3e:74:3f:64:76:f5:
2e:20:71:ef:21:56:18:89:5c:4b:c5:18:1d:63:b4:
2b:4f:5f:aa:11:9b:d3:12:b1:98:41:df:38:bf:ab:
8f:21:de:52:ca:34:4a:ca:ff:aa:a5:61:a3:73:69:
bc:1a:04:3c:1d:a0:98:ba:0f:e1:9e:91:ad:5c:1f:
b1:f0:d5:40:38:a9:19:6e:06:36:90:f8:c0:0f:a9:
52:ea:21:92:70:a3:f4:b5:5e:cb:cf:61:df:51:ba:
b1:5d:64:03:60:b4:5b:44:9d:cb:54:d2:b1:72:e8:
fb:d5:f0:e3:57:17:17:59:fe:c6:8d:31:28:93:28:
d6:b1:03:28:8e:c8:e5:36:78:f5:cd:a4:68:a4:bb:
e5:b0:d4:03:42:6c:ab:74:0c:b4:67:ea:b2:88:26:
f1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:45:85:CD:F5:A3:81:C4:76:7B:2D:89:86:4D:1D:BC:50:72:8F:E9
X509v3 Authority Key Identifier:
keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:42:87:55:74:dc:b7:4a:02:96:72:87:38:5d:28:a9:9a:d6:
00:a3:03:4a:09:86:08:84:df:c9:17:6d:68:81:6e:b6:ca:fc:
38:cd:6a:31:d1:cf:f9:71:f4:a6:81:56:4a:0d:32:79:fe:14:
9e:fd:01:0a:d4:2c:e4:d2:fd:37:e1:8e:47:a7:f4:9a:9b:59:
09:10:d2:04:90:56:28:db:a2:b9:43:fd:18:86:0f:bf:78:b9:
54:1a:28:e2:17:18:d3:73:4e:0b:ed:7b:ee:74:84:0c:3f:c2:
93:37:10:83:80:a2:ac:68:1d:91:a9:21:d8:58:2e:56:24:57:
e6:3e:5a:0f:c0:bd:f8:d3:0e:b0:91:fe:6b:0d:0d:d0:bf:a0:
cb:53:4d:10:db:d4:b5:bc:df:8a:19:bc:82:2a:d0:30:a1:93:
59:e0:40:59:34:11:c5:ce:d8:a3:b1:c1:8a:98:aa:dc:5a:95:
6b:8c:fc:a0:6d:36:1d:bc:b1:45:40:c8:39:f2:07:4a:43:ad:
3f:9c:75:76:53:0c:48:d3:14:06:85:01:45:51:04:36:b2:df:
ac:49:28:fc:16:6f:04:d1:da:6c:07:a5:2e:79:23:5a:c4:9c:
fb:57:26:29:cf:69:3f:15:c1:81:99:1c:bd:22:8d:b5:7f:24:
76:79:1f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:19:14 2025 by rpki-client