Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
File: V9mTMZ3MkpdpQxiyRus29V_xNw4.mft (raw, json)
Hash identifier: VQlYSTTTCHitayfOTFyBYu5MDqrtXUHui5oZ7ZAEP5w=
Subject key identifier: E0:EA:FA:F5:C3:32:2F:F0:12:EF:9E:C2:4B:29:3C:9B:63:D0:56:B3
Authority key identifier: 57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E
Certificate issuer: /CN=57d993319dcc9297694318b246eb36f55ff1370e
Certificate serial: 0194BD4E887557FBC5491DC18F72C87E60FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
Manifest number: 0E1E
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: V9mTMZ3MkpdpQxiyRus29V_xNw4.crl (hash: WSTzyCZdr5Y+22T2OfU/7S4cYBYXrFGxbQ+kmSCGBSs=)
2: VzLG7lyXvVkTshnFEB9kwkc4pkQ.roa (hash: wIvPT3vGaYWNNjOSrAOSHFQIN6FXu9GPlBXc77PLE/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:88:75:57:fb:c5:49:1d:c1:8f:72:c8:7e:60:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d993319dcc9297694318b246eb36f55ff1370e
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=e0eafaf5c3322ff012ef9ec24b293c9b63d056b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8f:f7:a3:91:83:79:a7:71:4c:1c:38:a0:72:
ab:44:58:e4:1a:b3:7f:c9:28:09:02:df:ff:64:a4:
91:d8:b9:d7:70:73:1e:b0:9a:28:3d:cf:9c:57:97:
31:57:86:03:86:b6:e2:2d:99:36:0b:20:0a:d2:6a:
2c:60:ff:e2:29:f8:7f:2d:e0:29:d4:c4:67:67:54:
49:06:9d:87:86:e8:1d:5b:73:e2:54:d0:b3:a3:d9:
f8:be:17:c7:d9:c6:50:3d:b0:bb:1b:07:3d:ef:bc:
cb:f2:6a:ca:c3:18:8e:d8:99:e7:0a:61:3b:94:00:
e5:62:a1:b8:fc:d4:4f:c4:ee:31:b9:3c:d7:aa:bc:
0e:5c:24:c9:03:8f:ef:8d:27:cc:c1:80:95:18:e0:
4a:4f:20:41:b1:60:47:68:bc:51:5f:eb:49:1a:28:
d0:48:b7:03:e3:99:a4:36:3a:7a:35:85:01:f3:70:
74:95:2d:a1:9d:c6:ee:a6:bf:d8:82:70:1a:46:e7:
26:8a:e5:80:d8:e1:33:b6:e7:39:e3:b6:22:c4:0d:
57:7b:76:f6:55:e0:64:aa:c8:7d:ba:90:86:e8:9c:
f5:b8:b5:83:6e:67:7c:5e:e5:3a:6e:b6:65:90:32:
60:c0:3e:79:e7:7c:61:24:b3:08:c3:d6:66:8c:ea:
c7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EA:FA:F5:C3:32:2F:F0:12:EF:9E:C2:4B:29:3C:9B:63:D0:56:B3
X509v3 Authority Key Identifier:
keyid:57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5c:82:62:25:fb:4c:c9:40:d8:35:b2:24:76:6e:06:41:38:
a2:16:36:7e:a1:00:d9:fe:aa:e6:4c:cf:b3:2a:83:ca:e0:41:
ed:18:a0:30:05:7b:d3:6e:cd:53:6d:17:a4:81:83:83:8c:8f:
ef:77:96:d8:4d:6b:d7:7e:5b:55:9a:ec:12:c5:b3:ae:b0:17:
46:5b:ff:6b:d3:10:1e:e0:86:fc:b8:d6:44:ea:61:f7:60:2a:
70:df:92:39:d1:d8:f3:bf:41:04:e6:71:00:dd:f9:c1:f0:69:
53:7f:3e:8e:61:4d:63:9e:cb:d2:3a:4f:ed:74:e7:d6:3d:1c:
a3:8c:e3:3d:7c:ec:38:ec:c7:b4:c8:94:3e:36:91:8b:a3:3f:
9d:37:d0:9c:51:35:84:48:d2:54:51:77:57:5d:5a:50:b1:58:
71:56:85:fc:f4:92:b4:15:f3:50:a3:00:25:76:2a:2b:fe:0a:
21:4d:6d:da:80:89:32:00:a4:dd:a4:13:db:88:8a:60:86:b2:
c2:8d:5a:bb:43:76:cf:cf:4c:f5:9f:f1:94:98:52:c8:f8:c2:
67:09:f0:82:76:e6:80:ec:d6:74:cb:d1:aa:aa:e5:f7:45:ae:
9a:c2:7a:d3:8e:1c:df:92:58:bf:5a:5a:1f:91:34:11:a7:b6:
74:c7:31:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:18:44 2025 by rpki-client