Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
File: m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft (raw, json)
Hash identifier: JFnhHcPHj8cyltVg9sGdxv0A6NC9xlhtgwbjIfMpANQ=
Subject key identifier: D7:1B:EA:8C:A2:BD:37:04:28:39:D4:08:F6:A1:75:A9:B4:99:F5:E0
Authority key identifier: 9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5
Certificate issuer: /CN=9be4717112fec119f6cfcace7cc4434fb47df8f5
Certificate serial: 0194BCE0D9399DA9DB523B8BD7581D8ACEF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
Manifest number: 0F7D
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: QEBRn3jAI_lp2ryrgLPg_-qD0_w.roa (hash: 4DrVU+ddF+HESS/HTUefXV0kpzIAWWdGYlZL3aihd10=)
2: m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl (hash: /U1INIKyWW4QWFk+nYOCvsLxoZoTrEqK+cNVfuvnFOk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d9:39:9d:a9:db:52:3b:8b:d7:58:1d:8a:ce:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be4717112fec119f6cfcace7cc4434fb47df8f5
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=d71bea8ca2bd37042839d408f6a175a9b499f5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:bb:6e:cd:af:a3:a7:83:aa:f6:8b:73:79:
0f:08:c8:5b:2e:28:14:ce:79:88:fd:18:d3:c3:b5:
05:14:b7:79:ea:08:26:51:be:e5:7b:94:c1:5a:3f:
4c:4c:47:83:aa:9f:22:32:77:19:1c:70:de:f8:33:
30:1b:84:c7:6c:26:03:db:51:d3:50:01:ba:59:14:
e1:b5:69:3a:60:77:72:65:57:9f:ea:d7:0e:8c:6e:
3e:52:75:36:da:d2:6b:55:87:1a:d8:e9:f2:5a:22:
72:99:76:18:f8:04:96:74:93:9c:ce:11:61:50:0c:
f8:22:26:0d:89:98:b0:73:e8:60:63:2f:7c:ff:4a:
a3:37:a7:cf:f3:a0:ae:10:99:2e:20:c1:c3:f3:24:
25:30:5e:80:12:36:de:42:52:c2:cd:7e:e7:53:7c:
5b:0a:a7:f3:12:e7:94:a2:d8:9a:53:56:47:9d:21:
bb:01:b9:a3:8f:4f:e7:48:6a:a4:f9:a1:a2:16:99:
b7:d7:8c:36:dd:86:3c:ff:78:17:8f:2e:5a:37:66:
10:1e:fe:d6:07:d6:47:54:dd:f3:a7:20:56:25:77:
d7:97:7d:cd:a3:58:e8:46:d4:ba:7b:53:bf:8f:28:
65:14:8e:5b:59:57:79:7e:74:e1:eb:ab:15:8e:63:
73:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1B:EA:8C:A2:BD:37:04:28:39:D4:08:F6:A1:75:A9:B4:99:F5:E0
X509v3 Authority Key Identifier:
keyid:9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:98:46:d1:46:c0:b1:95:02:5c:df:e3:a5:4c:57:8e:45:12:
b8:7a:c8:ba:ad:71:4e:ef:79:05:64:cf:af:36:14:c0:2d:6d:
78:04:da:ae:55:95:59:df:79:df:3f:ec:81:2b:0a:fd:50:24:
36:35:b2:0b:d7:dd:d2:37:48:7a:ca:41:7c:36:a2:86:9b:f3:
f4:db:b5:ba:ac:f4:9c:1f:98:89:f5:f0:b4:07:02:2f:5c:0d:
39:95:6e:4d:9e:8e:e6:31:f7:a2:d9:13:68:8c:ef:de:0d:98:
bd:91:f7:b4:cc:33:59:19:8b:14:91:b3:78:b1:45:37:23:d3:
70:f5:63:5b:84:9e:2d:8f:0a:88:c0:0a:5a:74:21:04:45:ea:
e8:8c:20:52:c8:2e:e5:ac:62:86:e1:c3:ec:0d:46:49:93:18:
f6:be:14:75:2b:4e:9f:c0:6e:18:eb:a1:ff:4f:36:48:37:fa:
c2:3f:21:58:85:38:3a:25:8f:c2:2a:2a:6f:bd:99:4c:4d:2d:
53:99:bc:f8:7e:bc:4a:52:97:37:e3:c0:56:7c:6a:fa:5f:78:
ba:95:a2:c7:09:0f:1d:d1:cc:f0:6e:12:87:09:81:ba:7b:65:
3e:bd:1d:cd:bb:51:6a:0c:2a:ca:0c:c7:e5:c6:a2:03:bb:4c:
0d:cd:e9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:15 2025 by rpki-client