Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
File: 9lFtfyjNvos_VddTcqrU07EL4J8.mft (raw, json)
Hash identifier: /naYRS6KEEcGhWWM/AVN4LZHkTMeSmcZGsmrbFlbfoA=
Subject key identifier: AE:29:79:70:AB:9F:E2:9F:13:00:0C:21:F4:9F:01:29:6E:32:19:06
Authority key identifier: F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F
Certificate issuer: /CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f
Certificate serial: 0194BBCEAAEA9371BC027357610DEC0CFC70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
Manifest number: 0724
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: 9lFtfyjNvos_VddTcqrU07EL4J8.crl (hash: g7WE17dgHaSZiTlvF1TuNHprb9mDfi3XIUzUQhmsHuQ=)
2: RFRyemMh5cFgw6G_Hs8rXpd2Ve4.roa (hash: Q/GgNiv43TfFu8lH2/Qowfw2+WyW8sNGbwKNhf/jdeM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:aa:ea:93:71:bc:02:73:57:61:0d:ec:0c:fc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=ae297970ab9fe29f13000c21f49f01296e321906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:7b:3e:d9:ef:85:2c:cf:41:c9:0f:dd:86:
c1:c4:12:bd:d0:7f:b5:06:a3:c0:9f:45:66:3d:95:
bd:c0:23:99:0b:f2:0f:c1:6d:4f:ca:9c:df:8a:ad:
7f:07:a6:1f:48:81:2c:4a:ed:da:5e:9a:3e:cb:2a:
ea:40:03:12:32:29:ef:6e:f8:cf:d8:7e:66:00:75:
b7:16:77:89:73:d0:c8:e9:22:bd:df:a4:97:f5:07:
a6:5e:5a:b4:6f:9b:c1:1f:5b:91:4c:50:c9:21:e1:
7f:22:63:f4:af:9c:3a:d7:fe:9d:e9:1a:71:e3:a0:
bd:fd:76:e4:7f:f9:51:98:36:63:ed:e2:9b:5f:b4:
4a:84:a7:85:4d:82:78:5e:1f:26:97:2e:62:55:c7:
0f:97:61:39:d7:49:ca:a9:d5:bb:c5:34:ea:34:12:
5e:2a:cc:11:0b:44:38:b0:45:eb:c2:22:f0:7c:61:
cc:e1:29:e4:49:07:84:db:a9:b6:b6:34:d2:28:a9:
56:5e:a6:3c:cc:a8:af:18:a1:ce:3b:6d:b8:4a:ac:
33:5c:dc:42:81:5e:59:c0:40:fc:5a:b9:56:66:15:
e8:1b:bc:a5:53:73:b8:f4:30:92:c3:f1:ab:65:bc:
ec:12:11:ef:ef:e2:ad:8d:7e:16:33:b0:c6:b5:a9:
8b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:29:79:70:AB:9F:E2:9F:13:00:0C:21:F4:9F:01:29:6E:32:19:06
X509v3 Authority Key Identifier:
keyid:F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f5:3d:a0:31:06:d4:d8:34:6b:f9:fb:f0:9a:5d:3b:b6:cd:
4c:91:52:4b:25:b6:ae:96:d7:07:9a:ee:f4:fa:0e:2d:f3:07:
c5:0b:8f:78:15:74:9b:b5:02:c7:80:8a:27:53:c0:f7:45:f6:
41:3f:4b:33:f3:5d:e2:29:40:6c:c0:96:08:72:20:6a:6d:a0:
22:bf:4c:9e:7a:6a:d8:aa:b4:17:0a:b4:37:86:b6:d4:2a:b7:
a4:c9:27:12:08:0a:5d:60:e5:67:e6:fb:66:4d:02:a5:5c:a9:
d8:af:ed:0f:53:4e:49:6b:e4:e9:14:0f:79:b3:6c:09:f3:44:
f2:68:29:d9:59:67:89:85:b9:65:83:89:a0:9a:c0:d4:6a:5b:
8a:e0:14:e0:4d:0e:62:39:bc:9f:91:d9:db:0d:7b:21:05:7f:
2f:0a:9a:d4:46:73:0b:d9:eb:82:93:70:43:88:5a:a3:e3:f4:
ee:45:5a:e6:41:bf:7c:5d:f5:65:d1:e2:5c:d3:fc:9d:55:fd:
42:51:ac:97:c4:7f:68:aa:20:1b:42:88:a2:3f:c9:a0:dd:47:
cf:b5:1c:bf:25:83:1a:9f:21:25:a1:98:0e:76:3a:3d:3f:75:
d1:13:db:94:03:95:88:6c:17:d3:2d:12:9a:3a:89:3a:f7:30:
31:5f:c5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:55:52 2025 by rpki-client