Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
File: p9nJ2x4fiGAXe__cWPDvzZm5as4.mft (raw, json)
Hash identifier: 4CkqhfPBXgNV0yXl7R84MO/kJqYIPuKMzZneL9dUVPA=
Subject key identifier: 4C:FC:3F:7A:E8:47:7B:FE:D5:5C:C7:A0:CD:D3:B0:A1:C5:17:5D:75
Authority key identifier: A7:D9:C9:DB:1E:1F:88:60:17:7B:FF:DC:58:F0:EF:CD:99:B9:6A:CE
Certificate issuer: /CN=a7d9c9db1e1f8860177bffdc58f0efcd99b96ace
Certificate serial: 0194BCA9D53A7DCDC4EC731CF81859D2334A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
Manifest number: 0C03
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: lC2KQAOisVOwxCnTUOf6nl08y8o.roa (hash: /DfGXFX3mvJ80lD2tCLD0oWxnch4EP1FqZDjENG9stE=)
2: p9nJ2x4fiGAXe__cWPDvzZm5as4.crl (hash: dQBq0yY9pEoxL16L62gMTp4qO+iy0h/fuLu/SgPBO8A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d5:3a:7d:cd:c4:ec:73:1c:f8:18:59:d2:33:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d9c9db1e1f8860177bffdc58f0efcd99b96ace
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=4cfc3f7ae8477bfed55cc7a0cdd3b0a1c5175d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:74:50:0d:dc:02:72:50:4b:a0:95:fc:ad:
c7:aa:10:3e:ed:f9:4b:7f:32:a1:da:cc:18:fc:37:
05:62:40:be:bb:ae:b5:92:3e:86:6d:9f:84:84:89:
7f:9d:3a:23:a5:31:eb:8f:a0:45:eb:18:94:b1:bc:
ea:ad:f7:5e:03:e9:e0:09:69:0c:e5:f0:46:3f:88:
38:56:07:7f:70:81:0d:50:e3:31:fc:80:60:1f:9d:
98:e9:1f:a1:bc:fc:5a:be:29:c5:d3:a8:fb:51:ed:
bd:b0:89:69:7e:52:92:c9:1a:8c:66:ac:e2:a6:37:
97:63:78:57:a4:54:4d:6e:7e:bf:2b:0c:5d:e3:0f:
c4:ed:f4:3f:f1:be:92:65:54:bf:51:d0:fe:bb:e3:
ba:82:51:90:cc:b8:6d:e1:37:40:78:15:97:c7:6d:
c7:af:8c:b9:86:4d:0a:d3:b8:3a:88:73:69:62:b9:
d3:3c:2f:db:3f:ab:dd:b9:60:c0:3c:7b:14:17:05:
10:9f:00:16:48:81:d3:69:5c:8f:8f:e8:01:58:e1:
f5:8b:bd:d9:bf:9f:7f:f3:06:3b:30:7d:33:ed:5a:
5e:fa:af:1b:ab:ac:dc:71:a6:24:0b:14:e4:3d:ba:
82:69:65:a9:8d:5e:55:6e:6f:17:1c:26:7b:48:ea:
5e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FC:3F:7A:E8:47:7B:FE:D5:5C:C7:A0:CD:D3:B0:A1:C5:17:5D:75
X509v3 Authority Key Identifier:
keyid:A7:D9:C9:DB:1E:1F:88:60:17:7B:FF:DC:58:F0:EF:CD:99:B9:6A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6e:c0:94:d7:f9:d4:8f:4b:01:db:c6:b5:85:c4:09:91:26:
95:7d:86:23:6f:42:35:84:03:45:0b:0a:c7:9a:c1:da:50:49:
47:cc:f2:26:e8:67:d6:8f:df:7e:99:03:7c:58:64:de:a1:f1:
b5:97:b9:9d:9f:f1:5e:27:30:9e:41:4c:a3:59:48:0f:35:47:
de:07:22:8b:b6:62:86:ee:d6:3b:33:05:69:74:1e:22:80:4d:
1b:2c:92:33:cb:61:7f:8e:6b:63:64:74:ce:f9:eb:58:7e:d9:
bd:69:8e:f5:78:4f:84:f5:99:ca:5b:d5:01:2c:ae:56:67:d8:
b4:da:ae:31:85:dd:0c:f6:d1:2e:61:82:6e:ff:23:3b:86:91:
79:bd:7d:64:2b:5f:1d:a7:af:d8:40:77:d6:7b:19:2f:a3:da:
e1:2c:6e:b4:4b:d2:89:15:cb:de:bc:d8:a7:d8:90:58:ea:38:
69:da:34:0e:b7:50:f8:88:ec:c6:53:90:d4:35:cd:d4:87:e4:
e7:d0:9e:ec:9b:a8:36:d8:49:1f:82:d7:45:27:44:56:58:a7:
65:1b:81:63:27:0a:e5:14:cc:4d:58:5d:e4:f4:22:78:80:35:
48:9c:16:51:1a:46:e4:09:3a:c8:cc:d7:87:49:d4:6c:35:f3:
47:66:b3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:08 2025 by rpki-client