Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: u7hVVIDFuekmP0RPjS+HjuPfDPWJTjFWMX+ADSyImn8=
Subject key identifier: 5F:C9:87:28:EF:5B:F8:89:5D:A9:63:42:80:BD:E3:F0:46:ED:97:AC
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 0194BBCE8710D0DB34FA504A026100A1D3DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 05A5
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: q/tEqpJ26TnLDOpsslJOvx1VmniGt1wk25SbFLyJaEk=)
2: UDIr7Vq2PCUxH-_0XwBbpbKATWw.roa (hash: UYUs+F/DqN2VeFPscjP3XMb/LrOdKx6NTNq37FV037I=)
3: u0FRx2j9PY9XanBbcgTrVe_Co_s.roa (hash: 1340NaWcsmaESfpzP0gVpyoyLiK505bktgSP6n8xPII=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:87:10:d0:db:34:fa:50:4a:02:61:00:a1:d3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=5fc98728ef5bf8895da9634280bde3f046ed97ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:48:c3:e9:e1:a6:b4:60:8a:a5:65:08:82:
2c:ee:31:3a:d7:bd:48:fb:1c:df:ae:5c:a5:4e:e4:
d1:58:96:e9:67:27:50:93:fc:ee:82:87:45:82:d6:
c7:b7:c4:fd:c0:9e:63:b0:f7:fe:05:c1:26:d4:ec:
c4:22:1c:ad:0d:46:dd:a7:31:d2:ff:67:60:d3:75:
51:75:63:57:d0:97:7f:bd:69:85:42:61:05:05:e6:
8e:69:9a:d4:c0:9b:80:7f:b6:cc:cc:ef:2e:eb:e5:
67:38:a5:0a:89:20:90:6b:2d:c1:ec:4c:9d:5d:62:
4e:d3:80:a0:c2:d1:6f:30:eb:e2:0a:15:af:00:27:
da:ec:06:39:7a:39:bb:f3:2f:da:26:78:12:d3:58:
eb:87:d5:31:6a:8f:e8:e1:40:99:db:d7:72:a8:5c:
55:b8:e2:b2:cc:99:16:82:1f:8a:4d:50:b1:7b:02:
00:31:a7:7e:bf:5c:0f:fd:73:81:9f:25:e4:57:d0:
25:0a:a7:c5:ca:db:c4:fd:2b:40:31:eb:87:7e:8d:
2c:f2:fe:1c:7b:fa:36:21:92:39:7a:2f:84:43:ab:
ef:a9:58:76:ec:99:70:74:7f:7f:77:05:11:34:ff:
b9:4d:1b:1f:71:89:2e:07:46:67:57:28:e7:64:dd:
84:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C9:87:28:EF:5B:F8:89:5D:A9:63:42:80:BD:E3:F0:46:ED:97:AC
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:21:56:c2:37:23:bb:21:30:4c:3a:69:a4:40:ff:e3:60:e8:
a1:55:b2:ca:ef:4e:c3:d1:c5:ec:a0:c0:ee:e8:d3:45:13:1d:
fe:35:6e:3c:df:ae:3d:4b:d8:e4:d1:b6:c5:9b:f1:74:4c:a6:
22:98:13:d5:a8:58:a1:70:b8:4c:87:f4:bf:2a:3c:86:72:bb:
80:49:a8:af:18:3b:14:30:10:3f:3d:24:5b:85:c1:46:6a:6f:
71:c2:40:f7:7a:bb:87:11:6d:77:13:77:c2:01:35:31:e7:0e:
f8:94:37:9a:09:2c:64:7f:8d:ab:bc:a0:89:44:d8:46:d8:56:
ac:9d:ba:cd:00:22:39:02:53:d2:7e:49:ec:1d:52:2f:55:ba:
2d:06:c5:a0:51:20:2d:16:f8:1e:5c:cb:32:63:92:78:97:97:
2d:f9:14:00:f9:bf:a3:ea:d5:41:96:03:b4:c1:57:94:15:59:
f6:1c:a6:a9:7c:09:46:a5:eb:9d:6e:28:67:b8:be:29:d9:dc:
1a:77:b9:7e:d0:0f:ff:03:19:87:cd:d2:83:c8:cb:a6:43:d9:
cf:b5:b9:19:5a:7d:9c:f4:cd:2b:d0:11:31:6b:37:d4:18:96:
87:68:8d:70:39:42:21:c5:34:26:3d:6a:a7:f8:d0:a0:6d:51:
71:4b:f1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:26 2025 by rpki-client