Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
File: F9LMnguBhrYLJwMTzZaCECLQS5U.mft (raw, json)
Hash identifier: dKjBauLRnEOJwuLw7NUs4E4rzPhCvYXGiBZ4rexyoQs=
Subject key identifier: 63:47:BD:F1:62:83:E2:24:A9:B6:3F:BB:B1:C6:4A:81:CC:93:F5:66
Authority key identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
Certificate issuer: /CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Certificate serial: 0194BC3CA12D7B257D8763027D2383F0DFDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
Manifest number: 0340
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: F9LMnguBhrYLJwMTzZaCECLQS5U.crl (hash: 8ytDyYRt54LNpcqehzf9l2kHGIz4rY6IeooAcckXbWs=)
2: uXgPf_GHZXRnXeYChGwQ6YgTY0A.roa (hash: O3rlazvN4WdAuuqeK4Ye7g2IFvV+XXKOscOrXA6JGjw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a1:2d:7b:25:7d:87:63:02:7d:23:83:f0:df:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=6347bdf16283e224a9b63fbbb1c64a81cc93f566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:08:33:76:b6:da:3c:9a:8c:34:68:5d:fb:
a3:06:d8:e0:a4:cd:ff:a4:92:6a:f2:70:d6:ed:f2:
4b:14:31:39:a7:41:d3:69:dc:5f:89:5a:5f:1d:2f:
63:04:b7:cb:1a:9f:cb:30:31:de:93:5d:c9:f9:dd:
33:0b:25:00:f5:74:6f:8b:b7:65:e3:65:ec:b0:b9:
85:4a:9d:7b:9d:e3:ec:c9:45:0f:67:21:54:7b:9a:
d8:aa:8d:b3:d3:bb:23:41:a4:11:70:0a:c2:a6:b9:
40:fa:59:e9:aa:ca:2d:b3:72:26:0c:77:c1:94:ee:
e1:f1:48:32:e3:a7:b1:68:a7:1a:81:56:f7:9c:fb:
cb:87:6f:46:22:7c:d3:63:a7:fa:b1:19:41:65:76:
49:1d:ab:3f:7c:18:4a:88:bd:ce:6c:f4:e8:96:18:
1e:9b:c0:ad:75:43:79:0c:8b:62:90:08:1e:c7:a2:
52:63:b9:6e:5f:10:62:3b:d7:04:4a:56:8a:98:a8:
df:25:4f:f1:33:6c:ef:07:5d:cf:70:1c:af:34:c1:
ec:58:4c:f1:93:cc:3c:d7:5f:52:05:98:2f:a7:c4:
de:bb:43:d5:ef:9c:62:89:48:cd:5c:9c:c2:35:b2:
d5:61:96:90:03:9f:49:3a:90:9a:63:01:0f:c5:9c:
ef:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:47:BD:F1:62:83:E2:24:A9:B6:3F:BB:B1:C6:4A:81:CC:93:F5:66
X509v3 Authority Key Identifier:
keyid:17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e5:b2:25:cd:fb:77:04:93:1c:51:ff:14:4d:e4:e9:e8:1d:
a1:15:90:81:1e:cb:16:2c:68:07:d3:78:da:d6:c3:64:26:11:
07:4b:28:83:73:27:47:77:20:ee:de:31:44:4c:29:b5:89:37:
1d:17:65:55:6c:2e:7b:8b:a1:a6:9e:76:82:16:31:99:49:b6:
35:ca:cf:fd:44:22:65:68:86:8b:81:12:dc:21:a5:ae:e3:28:
29:64:4b:28:3b:09:51:3c:70:0d:f3:2c:60:55:75:fc:4a:7e:
6f:96:a0:0c:b2:a1:5c:de:ad:92:42:11:06:5e:17:ca:57:83:
31:81:1a:92:ee:e0:f7:df:bf:d2:28:c9:43:6a:94:8f:4f:82:
26:33:da:0e:96:63:bb:44:f9:17:2c:7a:fd:d9:f2:ba:89:09:
83:65:b8:89:9d:90:ec:64:1a:db:e4:0f:6c:51:2f:5a:99:17:
87:29:78:18:3d:a5:dd:ad:5e:28:fa:e8:0e:05:c4:fa:5b:0e:
77:ee:7a:ca:c0:da:97:15:dd:7a:22:94:06:6e:c3:d2:10:26:
28:47:70:c3:aa:dc:98:3f:b5:b9:98:94:2d:cc:14:c6:e4:bf:
cf:42:8e:40:0a:56:87:37:d5:01:75:44:9e:c8:f9:95:69:0f:
b9:ad:91:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:16 2025 by rpki-client