Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
File: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft (raw, json)
Hash identifier: OPm5BHfSkbqxEqyhgwMjpBQjTemlLBMgIcxfvPNw4L4=
Subject key identifier: A6:93:F3:47:50:C5:86:72:0F:FB:C9:23:B5:A2:A2:72:1E:5B:89:43
Authority key identifier: F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
Certificate issuer: /CN=f4dcb5741e29352ddd42469270178506008a4140
Certificate serial: 0194BC7310B51E956E2D0A60E4EC84D34583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
Manifest number: 96
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl (hash: yykhJ/TiTkuiQaRQa1iKcYQPm0hVMH7J4tBbvWUUHcg=)
2: T3T0ZkFQFPUc2BEd0op7sYAz8XA.roa (hash: WuXt/ChkvGDFgO8WDo1RKpja79/oAcXrCCkvEETR+EY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:10:b5:1e:95:6e:2d:0a:60:e4:ec:84:d3:45:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dcb5741e29352ddd42469270178506008a4140
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=a693f34750c586720ffbc923b5a2a2721e5b8943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:fb:a9:b3:f5:25:89:05:f5:83:54:07:4a:
76:7e:42:e5:d1:42:cb:b4:dc:31:0e:a5:8a:d7:a9:
70:99:fe:87:46:62:18:92:ea:ce:4b:3e:6d:4f:24:
7a:26:58:ea:b4:86:46:60:4a:03:2b:4e:45:2b:48:
f0:bc:e9:e1:ff:66:af:cf:4b:2e:1b:3b:1c:92:e1:
48:77:6b:1d:46:21:2a:5f:0a:59:a7:58:9a:47:27:
a8:07:aa:7f:74:70:e7:e9:5d:9c:08:1b:45:f7:f9:
6b:8a:04:b9:d5:83:65:7a:1b:a4:b4:a9:da:e2:e5:
9d:1c:e4:85:50:23:16:3a:be:0b:96:5f:7f:a0:fd:
57:57:99:58:c3:9b:a7:5d:2a:5b:25:50:e0:ae:6b:
ad:07:c0:40:69:3f:eb:52:b5:91:ac:3e:39:2b:16:
e1:5e:2f:e0:03:5d:6c:02:c6:d0:a1:af:bd:07:ca:
dc:6d:8d:72:09:15:8a:68:0e:cd:80:f9:07:0f:91:
4f:b1:b5:a7:09:77:49:0d:39:d4:e6:84:3c:72:05:
51:5e:b6:62:a2:43:08:fb:2c:bf:0c:55:9c:07:eb:
f2:42:f9:b8:d9:ac:64:97:f9:0e:05:89:40:87:44:
ea:f5:26:da:24:a5:77:b9:f6:a3:51:de:1d:0f:d0:
4d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:93:F3:47:50:C5:86:72:0F:FB:C9:23:B5:A2:A2:72:1E:5B:89:43
X509v3 Authority Key Identifier:
keyid:F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f9:2c:ea:af:0a:b2:3e:1d:13:fe:e1:86:ac:c9:26:d8:38:
f3:85:7e:a3:8b:b2:5a:3d:8c:ad:99:3d:c4:2c:00:79:87:05:
ef:03:85:9e:27:03:22:c3:18:00:76:32:c1:02:2e:c0:03:38:
2e:bd:9f:5c:67:e1:f6:0f:4c:bd:b4:68:08:a9:bb:f4:8b:d7:
4c:e8:45:6d:b2:f1:f4:37:ee:41:5e:0b:ac:c1:9b:37:87:7b:
8f:e1:d6:0d:d5:e4:77:7e:8d:4f:2e:7c:ca:51:29:17:d9:e6:
c6:f6:c6:58:75:55:9c:ee:28:0b:7e:3f:9d:33:4b:8f:03:db:
3f:ac:d0:9b:6a:8b:f5:c1:1e:60:10:2c:e8:32:91:94:c8:33:
41:3f:32:e3:ea:b1:82:3c:8b:7e:b5:83:9a:73:f8:86:ce:fa:
4c:63:21:9c:cb:ba:7e:65:b0:2e:a9:86:b1:01:e1:49:d2:57:
f9:83:90:07:11:92:07:c6:9e:6c:f9:6c:08:1a:a7:37:af:95:
74:01:d2:ca:66:26:cd:7f:6a:21:86:9f:a2:34:2f:af:06:ab:
d0:96:fe:31:18:01:2b:4e:7f:95:56:09:87:6a:eb:67:52:c9:
aa:fc:13:af:26:f3:6c:32:40:28:e4:83:ed:96:ef:3f:14:dd:
7f:bf:29:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:52 2025 by rpki-client