Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
File: 9Is_DGqHwEW9z_q9kA24iSvnAuE.mft (raw, json)
Hash identifier: ftf3a61Va4l7h9JcFHSxe4801RVhE8p7G0HQQVqDfnU=
Subject key identifier: 6A:88:51:92:D9:53:60:CB:25:10:7F:68:DC:40:29:40:56:FA:D9:40
Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
Certificate issuer: /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Certificate serial: 0194BCAA1BC836F110C19D17A282E6BEABA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: 9Is_DGqHwEW9z_q9kA24iSvnAuE.crl (hash: AbiOU0A87OPdsgqUif7s/ha6OdxfPsz9rX/g99nBhRs=)
2: BtPYtcz-P13eLfIl5S_nsWFCZcA.roa (hash: AdPKPf1Ykq5fdfCWoieMMbPOpxIJgz/ZCBQ0i5sRkO8=)
3: Hg9ZafaXQ8rLTSt-HMnDH0lT2yU.roa (hash: 0HTHXkqvlWJxm74CgwKZLUkDjsOUoGNMgHyD7nKaILk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1b:c8:36:f1:10:c1:9d:17:a2:82:e6:be:ab:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=6a885192d95360cb25107f68dc40294056fad940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:f1:19:c1:52:c9:94:e9:6a:ee:b3:d9:d1:
5a:d8:93:69:e2:63:97:91:7c:36:2a:a2:71:4d:a8:
4e:e1:c5:10:70:9e:dd:65:b4:07:8d:29:f7:11:ef:
b4:d0:05:01:d2:f0:f4:8a:d0:d2:84:56:66:31:3e:
de:68:b5:e8:c2:2c:a5:48:6c:b8:05:55:71:5a:4d:
fd:4f:69:ca:bd:ef:dc:69:38:c3:95:e0:33:d5:b8:
00:79:40:d8:a7:9d:cb:4c:1c:14:24:f8:19:41:99:
bf:da:d7:e6:f6:05:6f:41:bd:0d:4d:e7:b2:c0:71:
41:6c:68:a7:d8:58:a8:9d:10:13:52:44:cb:1e:ab:
a8:5c:35:2c:81:77:18:b5:f2:5c:b4:af:8c:2f:28:
25:fc:51:b1:79:98:99:79:8f:97:55:c9:c6:11:f9:
3d:21:01:64:93:65:e6:73:f5:5b:97:48:9c:27:ed:
cb:1d:52:db:b3:fc:19:99:71:73:11:3e:d6:82:87:
ad:2f:cb:1c:88:3d:6b:ce:1b:68:e9:88:46:a1:fa:
d3:c4:ac:52:d3:73:07:9d:cd:fd:f7:4e:56:6a:7d:
c5:b0:36:49:ad:bf:24:2c:21:51:a6:79:72:53:b5:
2b:04:2b:4a:9f:86:67:72:63:6b:a5:c3:7c:70:8a:
0b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:88:51:92:D9:53:60:CB:25:10:7F:68:DC:40:29:40:56:FA:D9:40
X509v3 Authority Key Identifier:
keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b1:c4:b1:83:c9:65:12:31:7a:65:91:f8:e5:6a:1f:4d:32:
9e:73:5b:22:5f:0b:a8:ba:6d:b0:c9:7f:4d:cb:ee:80:48:27:
cd:93:f1:bf:ff:13:80:0f:d8:b1:8f:e6:f4:78:c5:db:9b:b9:
f3:8d:97:15:bb:61:6e:f5:c9:f8:e6:28:30:e9:39:d6:2c:9a:
28:3b:3c:3e:15:c9:84:c6:0d:e3:27:ad:88:f9:0c:e7:a7:e7:
c2:f5:cc:43:31:c3:77:e7:58:98:78:c9:9a:b8:ee:18:63:ef:
29:e9:3f:29:7c:30:48:f4:3f:78:fd:8e:30:36:e3:22:77:a9:
33:76:1b:0e:c4:57:69:0a:e8:e5:18:15:73:5f:be:90:b8:0d:
8f:45:2a:a2:97:52:d8:87:1b:a0:be:e0:76:73:2a:c8:d7:1f:
3e:b4:90:b6:e3:5f:15:14:27:dc:12:f1:4d:d3:eb:51:64:e9:
bb:f4:5c:6d:31:6b:9b:88:19:89:50:5f:d0:1e:62:58:42:06:
6c:3f:8e:19:54:9e:67:aa:29:ad:29:b9:55:8c:b3:c1:04:c5:
7d:df:e4:da:86:31:a1:0b:04:d3:5f:87:b5:05:e8:95:77:db:
e8:1f:6c:a4:03:1d:5d:72:2a:2f:e5:c2:d2:b7:3b:55:54:78:
e3:73:ae:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:03:36 2025 by rpki-client