Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
File: r9v0VgEKm9FJQcoskcpTPn71F4o.mft (raw, json)
Hash identifier: dOCnYBYbEg5qvh0FP8IR7aFVT+aZXwEPMh/DMt9e+hQ=
Subject key identifier: AD:00:DF:BA:E9:F0:21:CE:E4:58:7E:D2:1B:61:78:64:4D:C0:D3:37
Authority key identifier: AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
Certificate issuer: /CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Certificate serial: 0194BBCEBD02173EDEC629BB147E07A17A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
Manifest number: 0D02
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: ajkzuEH8FnXzD6y9WqgTkvcAyWQ.roa (hash: ezeCzHTBFnMMCDhX8NkCA6ybD9xQfKuL+xUd+x4C3b4=)
2: r9v0VgEKm9FJQcoskcpTPn71F4o.crl (hash: i1jWqN6dlDEtcjxCL/wHaPMJFyN8mVWGUG/2Bji7Sbc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bd:02:17:3e:de:c6:29:bb:14:7e:07:a1:7a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=ad00dfbae9f021cee4587ed21b6178644dc0d337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:9b:3a:1c:dc:03:82:df:ff:30:4a:8c:b2:
9d:d4:65:dc:d7:6a:4f:1e:90:b4:53:46:5c:0c:10:
fb:e5:24:c1:f0:ce:34:9c:37:92:a5:31:8b:a0:e4:
06:b0:01:ef:e3:d2:bb:97:0e:5c:5b:90:f5:76:51:
38:b2:3d:fa:2f:24:95:9a:6d:db:75:7d:70:28:1b:
44:e3:b7:d2:e7:db:8d:3b:45:2f:34:80:e5:f6:ac:
ec:3d:0c:4b:fa:bb:74:77:50:c2:cb:25:2e:4e:8e:
03:03:12:6f:b5:40:c5:fc:4b:57:62:61:87:cd:71:
c8:38:73:d2:37:65:02:ab:0d:8d:2b:82:8a:bb:3e:
8f:a0:a7:ad:f7:92:39:28:2b:00:95:69:ab:c6:ab:
71:32:5e:86:46:44:8e:4b:6e:f4:8a:0f:8c:3b:0d:
8f:7f:27:ae:7b:ea:db:0d:16:e7:59:51:a9:d7:2a:
71:a0:30:ce:f2:53:40:e2:ce:e9:60:9b:2a:37:f5:
fe:b0:11:04:bd:0d:01:b2:5a:74:6a:0e:b4:c6:53:
c2:15:42:45:b3:de:c9:fc:9c:8a:83:97:57:0d:ca:
1f:01:88:75:d5:12:6a:bc:3f:38:ca:e7:b0:5b:65:
c4:81:2d:98:68:ce:02:c5:57:b9:c4:43:5b:5d:bf:
e1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:00:DF:BA:E9:F0:21:CE:E4:58:7E:D2:1B:61:78:64:4D:C0:D3:37
X509v3 Authority Key Identifier:
keyid:AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f9:c1:b5:c7:51:45:41:56:98:84:80:b1:6a:51:58:a9:fc:
8a:da:aa:64:cc:c7:c9:3d:78:6a:05:52:28:66:1e:dd:5a:4e:
e2:b4:63:ea:8f:ea:7a:9a:9a:08:1d:05:65:6a:c4:8f:2a:83:
cb:d1:a5:27:f9:af:e3:c4:b0:1e:26:2a:89:04:5a:ba:db:95:
e2:e6:bf:5a:75:7b:8a:5e:c9:bf:43:e8:be:18:a3:c5:3d:e1:
11:7a:bd:57:76:2d:e7:9f:d8:d0:75:e4:2a:60:10:91:51:5a:
ab:0b:1b:48:14:98:b2:80:9f:7c:69:ce:d1:b4:57:c8:43:20:
e6:4d:eb:05:1a:0c:85:96:b2:79:39:59:ff:29:f9:a6:b2:6c:
83:5e:7f:88:f4:51:f0:2f:c7:5a:80:8e:78:e8:41:28:74:ea:
17:3a:14:7c:6c:57:42:06:41:5e:27:16:3f:06:90:b3:fa:5f:
41:55:bb:90:8d:c7:90:fe:d1:3a:59:0d:6a:24:e0:3e:63:2a:
38:dc:09:ae:c1:05:e9:c4:7d:8f:17:9b:45:1f:63:5f:47:a5:
53:b8:9b:45:2f:f3:d9:9f:66:a2:8f:55:d9:32:60:f6:48:f4:
83:76:be:af:e8:71:c9:41:42:eb:60:a5:58:6f:92:18:de:8b:
ba:4f:21:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:19 2025 by rpki-client