Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
File: m9_8i9uESXC44oubS-bywG39eYU.mft (raw, json)
Hash identifier: B6fF63hz9QX19k5kfactUV1k38xbKPkfC2VzHTZCZZc=
Subject key identifier: 4A:DA:09:34:4C:B9:47:8B:FD:EB:55:47:07:26:C7:6B:A7:CD:57:36
Authority key identifier: 9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
Certificate issuer: /CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Certificate serial: 0194BC73022F88FE40044AC40A0C10088DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
Manifest number: 1205
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: QAk6JCs2jjSqyiQ-YA0VdOCDCeI.roa (hash: FpR2ZM6Bp7jsZvcIkRbwo6z9Bs9HecznXsZ9i9f2MH4=)
2: m9_8i9uESXC44oubS-bywG39eYU.crl (hash: 7wosuaVqMRmkHz/S3FDeoDaD5W/YDR3J1UNVxBxL89U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:02:2f:88:fe:40:04:4a:c4:0a:0c:10:08:8d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=4ada09344cb9478bfdeb55470726c76ba7cd5736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:24:80:0c:f9:f3:32:99:de:b9:b7:2d:82:
34:74:84:fe:ce:1d:99:7a:25:9a:0c:c0:40:0c:e8:
90:aa:e3:ef:7b:fb:81:9f:78:5a:1c:10:63:14:38:
78:21:14:ea:45:8e:1c:4a:c2:2b:68:7b:4e:fa:2c:
d0:0c:33:46:e8:dc:24:fe:ab:48:da:aa:81:06:45:
a0:2c:45:5d:a7:96:1c:0d:4c:72:4b:9e:b8:25:b1:
c1:8d:1d:4a:62:15:45:52:e9:50:de:61:7c:16:ff:
75:94:e0:cc:3d:c3:df:b4:4d:be:75:a3:5c:e1:fa:
a5:fd:86:11:1b:2c:38:04:3e:93:b8:7f:67:6d:56:
7a:09:aa:cc:18:67:f6:de:ea:a8:ad:02:de:87:01:
67:1e:c1:4b:a0:fa:2a:a3:0b:31:db:09:ac:79:f7:
2e:22:0c:4f:b2:48:e9:0a:45:ae:e3:55:cc:12:67:
58:3c:66:0f:21:2b:f4:14:0d:99:03:64:ee:f1:ff:
4a:2f:e5:4d:8d:bb:bc:a4:23:2f:44:ef:33:37:32:
34:83:1b:15:df:f7:00:5a:0d:b4:da:56:0d:71:35:
84:73:d9:fa:a2:62:6f:5b:c6:15:5e:54:15:2f:a5:
d4:94:87:76:43:a4:8d:9a:3d:9b:e1:89:61:f9:77:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DA:09:34:4C:B9:47:8B:FD:EB:55:47:07:26:C7:6B:A7:CD:57:36
X509v3 Authority Key Identifier:
keyid:9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3d:64:35:56:e0:5b:61:9d:6f:39:c4:45:48:0f:ea:02:ae:
ac:42:ee:ca:97:47:af:b0:eb:9d:46:46:d6:05:b4:2e:ce:78:
38:c0:54:b0:e0:b4:db:7b:b4:15:0b:74:bd:85:61:01:9c:be:
f8:d6:cb:c8:0b:95:25:ef:64:e1:c7:fe:f9:ae:d4:7c:e8:9b:
40:b5:d1:15:de:45:55:85:93:01:a0:6a:82:91:06:07:cd:8e:
04:31:0f:7b:91:1f:41:90:2c:5c:a7:5c:4a:b9:19:2e:19:ba:
30:b8:41:10:c8:50:e9:7c:b3:b5:a3:2c:85:c1:b9:06:8f:a4:
f5:43:5f:aa:07:5a:52:cd:71:be:48:08:e6:7d:10:54:7d:13:
8c:5b:24:7d:63:2c:d1:d3:d0:6e:55:07:7f:c1:7a:14:fc:fd:
4d:21:23:91:59:31:55:05:41:ae:c4:d9:f4:d6:66:a6:08:57:
e2:dc:3d:7b:a9:63:b7:c0:0a:7a:56:13:bd:30:a1:8c:6f:52:
a3:f3:3e:d9:14:4b:7a:89:a8:73:89:25:8e:f5:ae:49:bb:fa:
67:d4:ce:5e:40:a9:1a:e3:23:85:3f:73:c3:62:17:bf:1f:50:
cf:8c:e5:c7:59:e8:e5:3b:64:f3:01:2c:e9:e3:5d:0c:32:f2:
4b:f6:8b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:38 2025 by rpki-client