Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
File: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json)
Hash identifier: ra8F4A61GVS58cN8zPjatcjmGWB5wlf9xRfnezqOUro=
Subject key identifier: DE:AD:A8:3C:04:90:D1:D8:6D:3F:19:02:45:55:9D:CE:A8:DC:CB:62
Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
Certificate issuer: /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Certificate serial: 0194BD85A7F877691BD837DF962C009A73C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
Manifest number: 0CC4
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: /Bi1j1kB9dM18zbyO6A7LgbuGXsmPFmXOa1tKxpG3zM=)
2: fIHxOTR4AusDjkUMl4F2Dw2GHL4.roa (hash: Sb4ZUnFbCp/emt+K6hXULcd6ikLK+m62aHUuIK4higk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a7:f8:77:69:1b:d8:37:df:96:2c:00:9a:73:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=deada83c0490d1d86d3f190245559dcea8dccb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:09:a0:1f:fd:22:29:3f:1d:77:46:f1:88:
ba:4e:a1:c8:65:45:bd:a7:c7:ac:20:24:85:7c:30:
c2:40:7c:96:c6:94:64:b6:90:14:3f:1a:23:6a:bd:
ab:14:b1:3b:ec:02:a5:fe:14:0b:76:52:f9:55:8f:
9b:bb:49:e5:cd:c6:24:3b:ab:ae:1c:f7:49:e7:fb:
d2:32:7b:d6:23:82:81:a9:e1:81:c6:89:4b:ef:da:
70:ea:9b:ae:4e:56:82:08:7d:69:23:94:10:c5:ba:
b3:2e:73:f3:d9:29:2a:7d:00:35:b4:33:ee:22:73:
c9:a4:aa:b1:75:2f:c3:b2:47:27:59:87:42:9e:e2:
95:cd:1a:54:47:9f:ef:ad:aa:b6:d4:c6:ae:0b:90:
61:64:a9:b1:47:50:57:84:79:6f:68:6c:8d:29:e2:
d3:40:32:6c:1e:80:15:d8:e3:8c:3e:fa:8c:75:f9:
96:8b:92:02:0f:52:28:fd:1e:d8:e3:05:91:73:a6:
86:f7:55:f6:4b:84:a0:bb:64:b1:32:d7:49:76:a5:
a9:1b:ce:7c:b7:51:f7:fc:6c:4a:9d:ac:4d:0c:37:
f7:12:d1:28:ce:65:0c:c7:45:a7:ce:7a:6b:82:b5:
80:89:0c:10:50:b4:4b:db:9a:0c:b4:53:54:39:4e:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AD:A8:3C:04:90:D1:D8:6D:3F:19:02:45:55:9D:CE:A8:DC:CB:62
X509v3 Authority Key Identifier:
keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:92:3c:f6:36:35:e5:5f:a3:96:08:13:b9:a7:5e:4e:22:8b:
72:31:5b:fb:b1:42:4c:59:18:3c:14:04:d6:0d:a4:0d:31:9d:
2c:5d:3f:98:b8:81:9d:e8:8b:aa:46:ca:f4:fb:64:18:c3:eb:
36:98:00:cb:7c:96:c2:ec:7c:b1:22:3b:50:92:5a:36:3b:7b:
17:46:65:5c:01:b5:c2:43:ae:34:08:2e:f7:d6:00:d7:b5:25:
92:1e:9a:1b:16:b4:1d:de:58:36:a2:9a:a0:4d:b4:43:f5:a6:
31:84:8b:68:67:a1:8e:39:16:77:be:1a:9c:74:54:fa:0c:98:
6f:16:d9:3f:9c:56:08:42:b3:b0:6f:cf:d7:e3:6a:24:ff:4f:
12:22:8e:fb:1f:c4:30:a7:74:72:fa:2a:77:f1:08:86:6d:9f:
f7:7a:e0:30:4a:d6:88:f5:27:80:aa:75:10:c6:48:e3:81:c6:
4b:73:a4:fa:09:cd:03:c2:62:d0:a8:16:75:0a:b3:4a:86:3b:
ee:f6:fa:72:7c:6b:9a:36:bf:94:5c:5d:6b:a1:bf:21:35:10:
5c:ad:1e:29:2d:18:45:eb:16:f3:57:b0:9f:82:2b:02:71:87:
bf:2c:e9:c6:12:50:9e:23:7f:65:62:c3:23:15:5f:0b:2d:9f:
b9:cf:da:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:31 2025 by rpki-client