Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.mft
File: 9S8g0NOy78W8l6R7d1vYuheU-eU.mft (raw, json)
Hash identifier: dsGyKjgakolo+f5RRg5y03x1qm9swg3b3cHpCSLWO7M=
Subject key identifier: C2:CD:41:F4:6B:74:CE:07:D5:73:77:0E:AD:D1:5C:0F:66:44:CD:0A
Authority key identifier: F5:2F:20:D0:D3:B2:EF:C5:BC:97:A4:7B:77:5B:D8:BA:17:94:F9:E5
Certificate issuer: /CN=f52f20d0d3b2efc5bc97a47b775bd8ba1794f9e5
Certificate serial: 0194BCAA3A3B080702F630CC127743F4B910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S8g0NOy78W8l6R7d1vYuheU-eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: 9S8g0NOy78W8l6R7d1vYuheU-eU.crl (hash: iEHbZ44LNHq1fByAKxhB5FN3xaxUS2IjFYwJ9ctLIRE=)
2: CEOAcQGoF-M49o3FqEoqpthBq7c.roa (hash: o7aWAwYKfU3X1B2JaQq/PQb9tN2IBMnSaEyBCSBzIfk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3a:3b:08:07:02:f6:30:cc:12:77:43:f4:b9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52f20d0d3b2efc5bc97a47b775bd8ba1794f9e5
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=c2cd41f46b74ce07d573770eadd15c0f6644cd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d6:05:4e:93:f5:95:fa:d8:ba:6b:1b:b4:0e:
2a:32:36:03:34:06:96:74:20:3f:f1:7d:0a:1f:d4:
18:f7:70:53:b7:65:00:05:9a:3c:06:6d:8d:0f:29:
cd:61:79:22:35:7c:68:3c:0f:b9:63:47:db:ea:a7:
d4:e1:5e:03:3f:74:e3:9b:89:91:78:44:b3:d9:17:
a1:3d:00:8e:b5:99:5f:f8:6f:eb:58:3a:5a:4c:da:
0a:51:e5:e4:ca:f1:7e:99:f4:f5:ab:af:58:ec:6e:
75:b8:5b:7a:37:0a:ef:5e:36:83:73:c7:3d:32:85:
b9:66:24:f2:d6:97:43:2b:77:e2:44:72:dd:32:80:
85:43:c7:a4:47:20:95:f9:36:c0:cb:be:cc:18:94:
d3:07:9a:51:c4:d3:64:44:c7:c8:78:d9:a7:55:f0:
0f:a7:9b:de:9d:55:a6:f5:82:68:63:68:0f:0f:fc:
12:f8:6e:77:12:e2:60:04:94:09:e7:33:66:7c:78:
18:7a:25:07:f9:88:e6:b7:ed:cf:54:8b:c5:5e:96:
fc:6f:d4:d7:47:2d:0d:e4:af:3b:83:ad:7f:a1:56:
17:ef:54:cb:e1:88:fa:4b:3a:cb:2c:e7:b5:38:28:
0e:3d:ae:7c:66:76:5a:94:04:2d:ef:3f:04:c0:b7:
a9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CD:41:F4:6B:74:CE:07:D5:73:77:0E:AD:D1:5C:0F:66:44:CD:0A
X509v3 Authority Key Identifier:
keyid:F5:2F:20:D0:D3:B2:EF:C5:BC:97:A4:7B:77:5B:D8:BA:17:94:F9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S8g0NOy78W8l6R7d1vYuheU-eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ec:74:07:0f:78:ef:91:58:11:68:7b:e3:c9:32:19:cd:73:
aa:b7:07:15:fc:2e:ee:aa:cf:28:4d:95:5b:57:8b:14:0e:cb:
83:64:42:59:34:ad:23:68:a0:96:85:5e:f5:25:d0:a5:2b:8c:
30:f8:a9:6d:41:8c:a5:74:e4:73:ce:13:e3:80:20:9b:75:a1:
63:41:4a:c7:10:38:32:85:9f:45:d6:5e:da:51:48:07:7a:be:
1c:40:8c:73:e8:7e:77:bd:86:d3:c3:f8:88:e4:96:0c:f2:8f:
4f:69:ca:7c:33:f3:bb:1e:4c:06:0f:8e:e8:ad:41:e7:9f:5a:
3c:c2:e7:42:13:99:db:8a:6b:99:09:3b:bf:f8:5e:fb:34:12:
1a:36:a9:f9:7e:7a:9d:23:36:c9:9e:3d:e5:c3:32:53:95:e7:
a3:fe:6e:c1:2c:70:02:b1:dc:f3:18:4e:62:d4:2a:92:a1:58:
ed:26:02:60:ea:17:63:8a:50:e5:cd:02:ff:f6:48:f1:95:b9:
8e:73:eb:1b:80:9d:69:c1:bc:96:2a:4a:ab:2d:7c:d8:82:d2:
32:7e:6d:b6:16:b1:50:49:d6:50:c6:5d:9b:ee:8d:f0:dd:ef:
15:a1:19:8d:46:5c:4d:94:f3:b5:c4:db:7a:45:16:02:51:74:
aa:9b:77:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:25 2025 by rpki-client