Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
File: s9nxe5jDqWQThWY7jNW3X-HwpJg.mft (raw, json)
Hash identifier: U44tLD+l+Sh62X3fV793SzGllLEhkBYjIv3DBdBTGPM=
Subject key identifier: 6F:CA:8C:9A:27:7A:EF:98:26:D8:BF:7E:2D:8F:44:81:16:85:79:F6
Authority key identifier: B3:D9:F1:7B:98:C3:A9:64:13:85:66:3B:8C:D5:B7:5F:E1:F0:A4:98
Certificate issuer: /CN=b3d9f17b98c3a9641385663b8cd5b75fe1f0a498
Certificate serial: 0194BBCDB6F5230BFD4D0F8979E1C28C33E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9nxe5jDqWQThWY7jNW3X-HwpJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:00:08 +0000
Manifest this update: Fri 31 Jan 2025 10:00:08 +0000
Manifest next update: Sat 01 Feb 2025 10:00:08 +0000
Files and hashes: 1: s9nxe5jDqWQThWY7jNW3X-HwpJg.crl (hash: A25A0ZGygjGXYL2iluw4jqojcoWhQfdV2Ki9lKM2ly4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b6:f5:23:0b:fd:4d:0f:89:79:e1:c2:8c:33:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d9f17b98c3a9641385663b8cd5b75fe1f0a498
Validity
Not Before: Jan 31 10:00:08 2025 GMT
Not After : Feb 1 10:00:08 2025 GMT
Subject: CN=6fca8c9a277aef9826d8bf7e2d8f4481168579f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:b8:6a:01:86:6b:af:3d:18:a9:31:a9:56:
b8:2d:5a:f5:63:7e:f1:e5:e6:e6:9f:20:01:43:4e:
47:e7:08:34:0f:2c:7c:3e:d5:d2:c6:b7:14:27:11:
c2:b7:f0:ed:be:be:68:74:c3:fd:38:b4:17:6c:b3:
ed:0a:04:14:68:e2:36:1f:5d:2f:b3:51:bd:f2:ea:
3b:07:3e:24:94:42:94:fc:ce:01:c9:e9:96:99:ad:
08:e0:79:54:fc:ac:b8:2c:c6:6c:25:55:79:19:a6:
ce:d1:46:bd:05:e7:92:12:4c:96:7c:5d:ea:c0:63:
62:f0:91:a2:73:22:68:7e:ee:bf:45:d9:f2:12:97:
c6:74:d9:a7:e6:41:33:b2:65:b5:ad:03:2c:38:4c:
b2:11:c7:97:03:41:19:9c:21:6b:fe:e8:61:9e:5b:
57:03:85:6f:e6:52:ca:d4:32:b0:5a:5c:65:74:6e:
f6:29:88:1c:3f:ea:f7:8a:5c:36:ad:e0:e1:0c:0d:
82:29:bf:e2:0e:c9:f5:b8:a5:b5:19:d2:c0:d3:f2:
da:86:92:ae:1d:3c:f9:51:77:06:dd:d4:ad:33:98:
32:bb:ba:75:a4:95:18:53:ad:c8:f2:2d:e0:f9:2f:
bc:2a:b1:bc:fd:c9:93:e0:7e:ee:fc:3c:93:0c:d3:
d0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CA:8C:9A:27:7A:EF:98:26:D8:BF:7E:2D:8F:44:81:16:85:79:F6
X509v3 Authority Key Identifier:
keyid:B3:D9:F1:7B:98:C3:A9:64:13:85:66:3B:8C:D5:B7:5F:E1:F0:A4:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9nxe5jDqWQThWY7jNW3X-HwpJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:49:7b:33:3b:43:69:17:f3:13:18:8a:ef:52:12:8c:ae:a0:
85:57:c2:01:ca:f2:3d:d1:75:08:78:22:bd:1d:5c:3a:d2:7b:
d4:45:0e:49:90:58:e1:f7:8b:32:e4:b8:86:7d:f7:5c:2a:5b:
48:8d:83:e8:bb:9b:1f:f0:91:6a:12:44:6d:c7:66:27:ee:f8:
f0:34:3a:49:a4:dd:2b:52:05:d7:98:f2:ec:23:8a:d0:04:ea:
b3:b1:d5:2f:0f:1d:dc:06:64:8c:54:de:b0:2f:3d:43:11:6c:
45:53:97:d3:f0:e2:86:42:6b:c7:9a:58:0c:c0:26:5e:49:d3:
45:5f:e5:c4:18:b5:5e:2a:50:90:53:3e:b2:cf:09:e3:1b:9d:
e0:22:9a:15:a1:d2:f2:75:6f:29:e5:1a:ac:13:06:75:78:c6:
d9:eb:2d:1b:5a:d6:44:7f:67:dc:dd:e2:a3:eb:26:0d:61:0c:
0c:c5:92:00:85:41:c8:9f:10:ec:ac:17:c0:87:58:97:b3:ff:
26:ec:5c:02:02:6e:f8:16:6a:fb:6a:a8:ad:b1:d1:0a:f1:99:
59:da:4e:99:d3:bb:95:55:be:57:6a:a4:30:67:4c:73:8c:f8:
c6:fa:b8:f0:35:6d:d1:6d:39:13:ef:f2:0b:6c:ee:47:26:b2:
7d:4f:c1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:07:07 2025 by rpki-client