Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
File: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft (raw, json)
Hash identifier: crWgf+IPK8eCgg8dnbl0Y1r3gcyZ+32ObaJH9lTEQVI=
Subject key identifier: 44:F1:44:F7:4F:D6:2B:91:ED:5F:1B:FE:2E:63:01:78:E8:A2:92:E1
Authority key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
Certificate issuer: /CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Certificate serial: 0194BC3C9F2FADBF6C03ABFB77FC22517E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl (hash: +z7SUQZRTR1OQgvOANRIt8C9U7SC34nOSCmNPBvmTWk=)
2: b1EekpPHczR9SbF16iWNQ3damig.roa (hash: Fw8tFU/rOTZrNv9R1o3/Px5yWIdWmaPwzJuJsuMKmH0=)
3: eADzDJE6P-qH0r5TYUNn_ncYKzA.roa (hash: PxBgbfMtKG6Jth9+kbRfrbslcA+mMm5JhYaaugK0nGU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9f:2f:ad:bf:6c:03:ab:fb:77:fc:22:51:7e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=44f144f74fd62b91ed5f1bfe2e630178e8a292e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:aa:15:e9:ff:32:c3:2d:5a:fd:47:9b:5b:
bd:54:ae:4f:d0:34:56:ee:51:1d:8a:27:7b:74:0b:
c5:48:3b:bb:f0:53:09:1c:3d:cc:cf:4a:31:8a:02:
e1:1a:e7:f9:02:04:6f:81:00:4c:fd:f6:d3:68:02:
61:c9:03:e6:59:5d:e5:dd:4b:c4:68:68:a5:a4:0a:
1d:9b:6c:d3:9f:70:c8:b3:19:9b:16:78:ce:0e:b1:
ee:38:b6:92:db:da:a6:d3:6d:01:0e:91:c7:b4:55:
a8:e9:0c:aa:85:41:58:77:08:21:74:0d:54:68:55:
4c:46:1d:37:a9:75:f5:f4:a5:63:e0:06:23:88:7d:
e0:91:c5:34:ac:4e:90:9c:b4:cd:32:3e:a7:da:37:
5d:0e:b4:10:8b:66:2e:c8:ec:e4:ab:6b:8e:a2:8e:
b8:41:a6:da:a5:e8:e9:3b:ff:fe:08:83:75:a1:24:
6f:76:f9:64:08:e9:0a:1c:2f:ce:76:5a:15:df:60:
01:ad:ff:52:10:3f:8e:07:5d:2f:ba:e6:a0:90:51:
40:a4:fe:f7:6d:ac:14:83:29:38:eb:d1:21:0b:97:
22:ed:26:50:b2:cc:2b:06:34:6a:cd:ea:4c:55:19:
44:5e:3a:3f:c5:c5:6e:43:03:41:3d:b6:1a:93:71:
26:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F1:44:F7:4F:D6:2B:91:ED:5F:1B:FE:2E:63:01:78:E8:A2:92:E1
X509v3 Authority Key Identifier:
keyid:FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:90:ff:a4:81:bc:55:0a:a4:da:46:45:58:b2:aa:5f:63:91:
88:d5:ca:5d:d4:a6:af:06:1b:f5:72:57:ce:ca:df:ba:52:65:
45:e0:fa:bb:f0:39:95:63:81:4f:b1:c6:05:2f:3a:58:45:97:
df:69:f1:28:c5:55:03:ce:84:12:ae:c2:43:76:36:62:f1:db:
11:e4:a6:ab:1d:cb:65:c8:8c:bf:ca:67:09:7a:af:5e:eb:0d:
82:bc:c0:c6:2b:75:18:70:ec:35:aa:8c:ba:26:63:e7:07:ef:
80:5a:44:c8:32:56:5f:1c:6d:ad:d9:81:39:46:e0:85:b7:ce:
5a:8f:18:18:4a:e3:6e:1c:b9:96:3d:43:3e:44:c9:52:b7:93:
17:03:4c:22:72:ce:9a:f5:8d:72:f1:f8:30:8c:af:0f:73:c9:
c5:75:6f:ba:a2:74:28:7d:cc:f1:c4:75:ff:18:f1:8e:7f:a3:
d9:f0:ec:74:bb:3e:9a:a9:b0:73:57:32:cd:48:57:b8:a7:90:
e7:ba:71:5e:5f:9e:a1:5e:0c:9a:51:46:5a:5d:a9:f5:c9:a9:
48:10:aa:a4:31:9b:5c:a8:25:97:a0:01:6e:09:fd:18:ee:5d:
af:85:98:73:0a:59:e9:d5:52:6c:33:b9:e5:22:9c:a6:ea:58:
1e:49:21:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:30 2025 by rpki-client