Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
File: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft (raw, json)
Hash identifier: LxnbPuyccMZtUW3Lg8HAAYpkM0fZ/dQLz0/D5nfS7Fc=
Subject key identifier: 7C:0E:08:1F:2C:98:43:3B:89:1C:F1:65:C6:F5:CE:9B:E1:ED:F1:06
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Certificate issuer: /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial: 0194BC3C07A14F4E7A7D117729AB6444279B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
Manifest number: 067D
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: 9-Ze941yMvb9PBtIsJ7Ycnpenh0.roa (hash: mLUd+UrxmldwwslKwjDeIf5bagEinj/YnRBNdn1A2Vk=)
2: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl (hash: kQ/2SmqY94Xqwi9Zk2aZgEaGBjPdqNqsYqvIObSezIk=)
3: dBTi9V6Lj09iolupOZhzala-GHE.roa (hash: XgE5C6MotJsfB/9tY52qQR/CvntbYT/9aocAmt0KwNM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:07:a1:4f:4e:7a:7d:11:77:29:ab:64:44:27:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=7c0e081f2c98433b891cf165c6f5ce9be1edf106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:a2:b7:a9:fd:df:b1:fd:c7:79:b1:9a:40:
8b:6b:ad:bd:a6:76:fb:5f:8b:2e:fe:f4:03:17:7a:
16:73:ae:de:e2:3a:5c:09:da:e9:50:0b:e9:64:c0:
a4:08:77:c6:9b:75:5c:09:ba:2d:de:86:df:66:6c:
61:66:c6:3b:14:6d:e2:1f:91:9d:35:d3:03:30:5d:
f7:51:43:b6:a1:18:27:32:56:90:c9:0e:a9:4e:fc:
12:87:0e:a5:8d:9f:36:36:ef:ea:cf:eb:c6:bb:37:
ba:ee:a8:ad:6e:26:eb:5c:c6:58:41:22:6c:74:6d:
ed:76:42:75:7b:1b:90:c5:1d:63:c5:30:00:be:98:
89:58:c0:b7:ff:e3:de:37:6c:ba:58:20:a2:e2:56:
7c:5a:f6:be:e5:24:dc:c9:4b:ea:f7:1e:ef:67:ac:
7e:48:46:80:cc:0a:53:10:5f:79:a2:9f:b4:8b:ce:
0e:64:48:e9:7c:21:bf:10:b0:53:e6:68:ac:da:9a:
60:b8:88:28:1d:df:5f:4b:25:8a:f8:24:80:96:d6:
31:e5:b3:45:d8:85:64:db:00:c0:a7:69:5a:35:34:
3f:d1:2d:f8:bd:03:86:96:f5:1d:9b:d9:c6:05:03:
65:16:f5:40:bd:38:3c:51:11:2e:5b:ad:9b:61:60:
af:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0E:08:1F:2C:98:43:3B:89:1C:F1:65:C6:F5:CE:9B:E1:ED:F1:06
X509v3 Authority Key Identifier:
keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ba:b0:6d:a1:6d:61:04:83:6d:fc:46:cc:7e:a3:dc:5d:2f:
1b:7f:68:48:32:c2:20:64:4c:79:63:26:18:47:16:4a:73:60:
84:22:56:02:f0:4f:42:fd:ea:f5:76:0f:c7:c9:ac:8b:51:b7:
b0:05:d1:25:d4:1a:b2:ca:10:0b:e0:81:bf:53:57:87:63:9d:
ab:5c:66:a3:d2:57:75:aa:ef:17:c4:07:6c:d7:74:f1:cd:a7:
bc:6e:71:fc:41:18:6c:d3:64:e7:cb:3a:4a:11:89:99:99:b3:
7e:f1:eb:fb:32:01:d2:3f:11:eb:36:76:72:7b:7c:36:79:ac:
02:36:f1:41:87:df:91:c3:f2:10:bb:a0:cf:9e:1d:a4:58:4b:
15:e9:8e:02:01:ed:a1:ab:0d:7e:ca:4c:0a:48:04:b9:f8:3f:
84:a1:ae:b1:5c:ef:bd:8a:57:06:ea:3a:0f:72:64:5e:c0:67:
de:3d:95:15:70:5d:2f:d6:fa:94:76:de:1e:b2:42:f2:73:ad:
98:92:7c:b5:9e:6b:fe:12:88:8f:f9:7b:6a:46:db:f4:b5:99:
11:97:af:1c:c7:1a:e7:af:42:6f:71:c2:a5:8e:85:42:a4:f1:
30:ea:d3:92:18:f3:95:1d:16:c0:18:fc:9a:1b:1f:c7:4c:fa:
aa:e4:51:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:21 2025 by rpki-client