Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
File: 1-cJWdFvSc8kYauKWNoohF9PSytk.mft (raw, json)
Hash identifier: OPKgrG9Vgy0PThW3xylG63c14YBBV5SE4sfkXxdmCq0=
Subject key identifier: C1:AE:F0:94:BA:FA:D5:41:35:AD:86:75:40:3D:58:54:A1:DE:A2:1D
Authority key identifier: F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
Certificate issuer: /CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Certificate serial: 0194BD4EB13D06F3A17ACB3A612BA513D4D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
Manifest number: 09FE
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: 1-cJWdFvSc8kYauKWNoohF9PSytk.crl (hash: tT5WTZbhXskQAOowksI1pFxEMxR5JCNjGP99XHsCYk0=)
2: N0McjdXZl5TUnCSac35uIbLCfTQ.roa (hash: 3oYd1qltvihRo6bFoxlQSV7suemsf1IDfXlwXxFseIU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b1:3d:06:f3:a1:7a:cb:3a:61:2b:a5:13:d4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=c1aef094bafad54135ad8675403d5854a1dea21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2a:e2:57:40:7d:e8:23:ee:4b:85:fa:4a:af:
e2:bd:0d:f2:df:cb:55:87:d0:93:ad:2c:a1:70:fb:
67:ed:d0:6c:c7:70:6c:8b:13:89:7e:67:0f:3d:ef:
f7:1f:92:24:1e:04:40:df:11:50:2b:cf:95:36:1e:
31:f0:20:6f:71:11:33:1c:33:d7:72:62:b3:16:3c:
68:02:65:2d:b1:9c:8f:37:b7:31:ab:ca:0f:f1:04:
fa:2e:ab:25:19:10:83:0e:f4:43:c4:65:b6:75:7f:
24:46:c3:71:87:83:de:76:35:16:bb:08:14:45:4b:
ad:fe:ff:82:17:a9:d4:bc:32:cc:32:d8:47:44:a1:
03:2e:21:13:82:59:d9:19:9d:1f:39:d1:a2:62:83:
61:34:c8:3f:63:9e:18:34:0d:99:9a:9d:ba:b1:7a:
83:08:93:99:40:73:bb:53:2c:5f:b7:5a:ae:ac:65:
95:35:e6:54:9e:4b:8a:01:a3:30:60:46:58:0b:0d:
12:90:68:0c:12:01:93:9f:46:69:1c:bf:9c:ca:aa:
e1:d4:1e:e3:c8:f8:c5:a6:68:0c:e0:8e:db:0c:56:
df:ec:51:e0:3c:49:8a:44:f7:39:af:8c:c7:b0:de:
a0:72:4c:0d:97:af:36:a1:f9:d8:8a:f0:1e:9c:5d:
8d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AE:F0:94:BA:FA:D5:41:35:AD:86:75:40:3D:58:54:A1:DE:A2:1D
X509v3 Authority Key Identifier:
keyid:F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:58:73:11:90:b3:86:e7:62:8f:37:9a:fd:a1:2b:38:56:f0:
d5:81:a6:1f:a5:84:de:24:8f:13:03:60:1f:f1:f3:e8:d1:49:
21:b2:45:79:fc:72:e5:52:ee:d3:3c:80:ac:fb:8e:b8:1e:44:
f5:52:d8:c1:2d:ad:d0:74:46:58:9c:f5:ae:1c:1a:88:ca:76:
68:05:2c:40:69:c6:bd:ec:03:f3:b9:ba:b1:43:cc:55:0c:5f:
ed:af:a9:6c:24:ad:a2:9b:a9:e5:e9:4e:90:a4:d5:aa:1e:a2:
a9:ce:4f:2a:e8:79:d8:3f:5c:45:7f:3b:97:78:11:ca:30:a5:
a0:d1:8f:6f:87:f5:a9:c1:c6:75:0f:b6:ea:ab:2b:65:60:5f:
99:1b:4c:f2:76:c3:af:0a:0d:e3:92:e2:45:ec:92:81:ff:49:
9e:c6:1b:6e:04:a4:41:ea:76:4f:5f:e3:99:2e:d1:67:dd:ae:
ed:1f:8a:67:1b:81:a4:95:16:8a:17:66:3f:cd:c0:9e:6b:dd:
08:58:6c:f7:b6:61:83:b6:83:98:f2:a3:0a:89:e4:c4:f8:d4:
c2:b8:59:a1:d7:a7:c4:43:df:fb:70:dd:24:2a:9e:4f:25:b1:
3f:e4:af:c2:01:80:57:36:a0:5f:d8:f3:cb:0a:1f:84:dc:48:
2c:ae:76:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:24 2025 by rpki-client