Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
File: 9naIfyLs2o0HSBWgvPkfr4GUKr0.mft (raw, json)
Hash identifier: CRJPGnk/qNi6uuIH9leAszZK+DvfC8dbvJx/pJtkYOE=
Subject key identifier: AF:06:B1:4B:78:3D:FC:3A:95:48:D0:99:73:CD:9B:33:CF:72:43:15
Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
Certificate issuer: /CN=f676887f22ecda8d074815a0bcf91faf81942abd
Certificate serial: 0194BCE08C75402B069C9A608DCED5168D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
Manifest number: 06F5
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: 1--aJOHbG2HarYQRIFHME9kGdrI8.roa (hash: e0PFqEIF1I8KQrFh+AG+JLWzJuU3cKKiEgrK5TdCBkw=)
2: 9naIfyLs2o0HSBWgvPkfr4GUKr0.crl (hash: e9p+8+u4+GGE3APQqCb6AULrEwFcz1h4yAe1QzPKhgg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8c:75:40:2b:06:9c:9a:60:8d:ce:d5:16:8d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=af06b14b783dfc3a9548d09973cd9b33cf724315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bf:a3:ac:49:87:2d:ab:74:61:0a:8f:8f:f0:
56:89:a3:85:96:70:31:80:8c:fe:dc:1b:74:7b:a2:
3b:bc:5f:d0:07:0a:4f:50:21:1a:e3:8e:65:31:b3:
d8:70:cc:f5:b9:05:05:05:22:c9:a2:94:25:85:6b:
54:60:ff:43:62:85:b4:2f:c8:08:22:b0:a4:e0:a9:
9b:70:85:32:b7:19:be:cd:2c:8d:92:15:e0:69:ed:
f7:7b:80:71:f3:3e:94:07:e4:34:fe:fe:ee:e6:83:
53:9d:c5:9b:cb:42:5a:75:bd:8d:47:5e:05:a7:e1:
bf:10:7c:ec:7e:ee:18:e8:c1:35:f9:8d:05:f0:7e:
49:ca:87:34:c6:a8:ac:38:1b:b2:e9:c7:6b:f8:98:
9f:3d:a9:9c:87:ae:cc:8c:4c:a5:e4:59:49:f6:38:
ab:19:90:fc:7c:5d:1a:70:0b:cf:91:95:a5:fd:36:
45:c3:68:f5:5a:6c:b6:6a:e6:11:61:66:f0:b0:2d:
4e:60:35:67:b9:7c:34:6b:4b:18:55:06:db:b7:01:
ba:5a:5b:21:1a:84:7b:1f:fb:55:7e:78:43:8c:a7:
1a:42:1c:6c:92:5c:b2:d3:9e:0c:ec:7b:aa:9b:7b:
ad:e8:83:aa:91:73:1f:59:cc:c3:52:f9:7c:50:c7:
d1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:06:B1:4B:78:3D:FC:3A:95:48:D0:99:73:CD:9B:33:CF:72:43:15
X509v3 Authority Key Identifier:
keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:a4:1d:01:ff:75:e1:97:68:5f:7b:5f:67:8f:ae:d6:60:ca:
42:b3:d9:73:f0:43:32:7a:fe:c4:16:ea:ac:6e:3b:83:c5:94:
df:af:4c:bb:e6:12:37:76:58:01:2e:6c:40:c5:0c:64:2a:63:
ab:f3:ed:e7:a1:1e:5b:76:19:5b:6e:03:3e:69:53:9c:42:ce:
ce:c0:61:90:42:1d:8f:09:8d:cc:25:10:8c:f0:ee:1c:63:ee:
db:65:42:23:ca:01:cb:ba:cb:cc:ec:78:f9:75:96:d4:b4:bf:
2c:e4:82:d5:e2:e2:72:e6:18:c5:68:9d:4f:3f:9c:f3:7e:06:
71:92:91:25:81:68:91:23:1b:fe:7a:ec:c7:67:6e:c8:05:77:
e2:e0:0c:c8:b7:c8:ca:b0:3e:cd:9e:d8:27:44:8e:1b:f5:d4:
7a:a0:d7:8a:c1:2e:38:cb:3b:88:50:1a:39:5d:ef:21:35:35:
7b:79:4b:13:e7:fb:79:08:33:af:e0:c4:cb:5a:fe:e9:64:66:
1f:3d:0e:c5:95:19:5a:a3:79:aa:f0:3d:c5:de:f7:29:35:6e:
ed:75:56:4d:0a:b4:58:cc:3d:32:ca:b8:cf:47:b8:dd:d2:c4:
19:44:4c:b9:c2:0c:77:f1:83:fc:37:0e:56:ea:74:05:7c:2f:
e8:cc:52:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:34 2025 by rpki-client