Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
File: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft (raw, json)
Hash identifier: oOKSwuOAv0v0/JDvdi5ZO4gh+l0Msxwhdipj1gK7EOA=
Subject key identifier: 6F:FA:38:BA:6D:1A:6B:03:94:F2:C7:04:11:65:15:A7:18:43:05:D5
Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
Certificate issuer: /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Certificate serial: 0194BC05094397142BFB70A31E95735DE08A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
Manifest number: 1440
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl (hash: xqweAqN8xdtijE5swsJ/W+xAEb3gFrkjWQ/neN17mi8=)
2: j7aDjONrxm38-GNyA3kjN1H7OQc.roa (hash: RBhjRopd1zf+AMIpQ1+ImU9X9Pkstelv3H1YNWvUr54=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:09:43:97:14:2b:fb:70:a3:1e:95:73:5d:e0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=6ffa38ba6d1a6b0394f2c704116515a7184305d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:20:97:88:84:56:3c:a5:e3:06:8a:14:43:
6c:2d:8c:79:05:aa:af:13:19:71:45:00:24:fa:b0:
c3:64:ef:c6:56:8e:c9:4f:02:c4:0c:dd:de:99:91:
45:be:a8:60:1a:46:46:c3:9c:e0:b9:40:46:5e:29:
5f:f0:88:4a:fa:8e:e8:b1:10:6e:02:af:44:b6:1b:
85:52:ed:17:85:d1:30:35:78:9f:de:6f:1d:cc:3e:
3f:b5:7e:43:3a:98:28:1e:51:e8:ad:bc:6e:6f:22:
17:fe:40:05:bd:05:a3:63:a9:09:bc:03:01:bc:54:
70:80:b6:c4:e3:61:a7:95:a5:36:9d:1d:b4:15:0c:
7b:d1:99:30:98:63:cd:9d:8a:c3:a7:cb:e4:29:6d:
5b:9e:08:d3:ed:72:51:d0:52:98:b2:c6:62:f6:a3:
42:40:25:59:86:da:2d:96:2f:af:b5:73:05:6b:13:
75:75:2c:4b:df:ea:87:d0:54:e9:13:c3:21:0f:95:
f8:57:f1:64:9a:08:ca:e3:ff:71:93:2f:82:12:cb:
be:ab:02:55:b4:a0:91:de:05:3f:10:88:9a:be:6b:
4c:65:51:e1:c9:7d:80:6f:9f:70:65:a8:ff:23:55:
a3:b6:b3:e8:dd:ee:38:10:e1:6b:c5:e1:01:db:34:
13:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FA:38:BA:6D:1A:6B:03:94:F2:C7:04:11:65:15:A7:18:43:05:D5
X509v3 Authority Key Identifier:
keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a2:71:70:1b:46:37:a7:56:1b:f7:1c:f7:63:3e:85:ae:d2:
ea:46:07:3a:b8:15:e4:08:5e:ae:48:9e:ae:d3:6e:19:f3:a1:
38:a4:57:9b:c1:a0:26:87:14:c3:2d:7c:ec:c7:7b:3a:6f:da:
3c:d3:6c:e2:b1:82:00:9e:d2:aa:04:7c:43:21:2e:70:93:af:
c5:63:94:49:9b:f7:f6:2b:16:5f:47:a2:ac:c3:cc:b2:49:2d:
79:f4:cb:cb:00:46:68:63:10:e8:55:db:f1:ba:43:aa:4c:6d:
0a:d3:19:ed:e7:e8:d4:d7:be:a7:78:ba:83:4f:0a:1d:8c:68:
8a:46:9f:bd:0c:c1:30:0a:62:ff:f6:f8:ba:58:4f:a5:bd:8a:
d0:cc:99:40:ed:3f:48:1f:15:99:0a:ca:99:23:7e:20:06:91:
41:a8:38:ef:0a:0c:87:22:20:7d:78:0a:1f:e1:fe:87:1f:62:
6c:77:97:55:79:db:1e:86:de:b9:af:99:34:7f:0c:3b:e9:88:
b9:89:5f:3d:b2:c3:71:e0:db:f0:72:9f:1d:28:bf:6a:92:00:
0e:6d:d4:f0:88:0b:ab:0a:cb:74:e7:68:be:df:fe:1a:e5:31:
4f:83:3d:2b:a8:f2:18:4f:f5:88:44:66:6f:33:9d:91:50:d8:
91:1a:b1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:23 2025 by rpki-client