Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier: 7nEd6+5TrM8do/cwTpLoYKq+4PhUd00mJVnSdTpeKuc=
Subject key identifier: 72:B9:4E:37:B7:7A:60:9C:9E:07:9C:8B:8C:56:63:BA:3C:91:F4:F9
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer: /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial: 0194BD85A2506743A77F3F0B6FF196315C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number: 040F
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: AtS91WY7t2ZfLA8uqQTaAIheePoY+AvMHskoGaP/JiY=)
2: I5lxuXg8Kfbx7zXSiGma80fdzJ0.roa (hash: H4ThFxj2wgOGFGxz87hZLwfWFdZQqMGoVJJaZVtoaOE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a2:50:67:43:a7:7f:3f:0b:6f:f1:96:31:5c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=72b94e37b77a609c9e079c8b8c5663ba3c91f4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:21:13:3b:0f:ff:79:70:4a:31:4e:0b:de:f0:
a5:ef:92:20:9c:6b:68:71:9e:b5:47:86:23:ed:a7:
ed:bf:33:99:72:6b:8d:60:1d:fa:7c:08:dd:44:2b:
39:a9:0e:4e:78:15:df:d3:b1:98:b2:48:65:36:71:
df:19:2a:41:08:c7:f7:b4:0f:be:3d:28:5b:5e:e4:
9e:8d:09:8c:27:48:89:7d:bc:86:2c:1b:0a:98:ec:
93:9c:c1:dd:50:31:2c:f5:8d:01:db:35:8c:5e:2b:
2a:3e:2c:d3:bf:3b:ab:8a:28:6a:9e:d3:3c:b7:f6:
5a:5e:be:d9:04:94:ff:ef:25:4e:1b:70:2f:73:96:
44:67:63:bb:11:91:0f:fe:f0:50:f2:f7:21:70:ac:
b5:08:4b:62:b6:f7:0d:93:66:79:de:c3:e8:cb:cf:
6f:e7:04:14:e0:37:27:4c:46:3f:00:a9:e9:f7:06:
db:f3:99:de:c5:de:e3:8e:cc:50:ae:2a:7c:ef:dd:
91:24:b9:45:ef:7e:50:e4:47:1c:59:3b:68:cc:2d:
d3:5e:9d:68:fd:bd:30:09:bd:3d:7b:2e:63:c1:77:
d8:96:ec:ba:e9:f7:f8:19:e8:e9:fb:6a:01:15:77:
0d:50:8e:4b:0f:48:e3:49:84:15:d1:b8:96:6a:4c:
79:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B9:4E:37:B7:7A:60:9C:9E:07:9C:8B:8C:56:63:BA:3C:91:F4:F9
X509v3 Authority Key Identifier:
keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:83:60:f7:7f:3c:6d:6b:36:70:95:7e:d8:4e:ce:ae:18:55:
0d:cb:5d:9c:39:f8:4d:8e:74:06:d6:b5:74:18:b1:11:81:08:
db:13:a1:b1:8c:d3:7e:20:34:10:1e:c3:69:43:cb:85:8c:fd:
ec:20:b3:93:69:e6:0c:bb:b2:e5:83:6c:2b:11:d8:67:5f:b3:
f5:94:a8:f4:f0:cc:dc:56:2d:ed:43:c8:35:b5:c9:e4:55:b8:
13:d2:36:2c:c0:dd:c1:3b:df:9b:6e:57:c9:84:ab:b3:63:cc:
e2:15:71:f1:24:5e:95:e4:0d:55:c3:b3:ae:d7:44:32:a2:53:
26:ed:80:21:26:1b:8c:15:27:95:8c:c8:78:cc:da:bf:13:92:
49:bc:c7:7b:9d:ae:6f:43:59:9e:fd:7e:86:1f:ea:5e:7e:71:
c5:d5:34:0e:06:89:89:0a:af:dc:5d:15:90:cc:40:2a:b8:ec:
d2:eb:0d:03:67:41:a5:d3:a8:48:f1:b4:63:d3:91:d3:81:ed:
d6:a3:03:26:3d:fe:cf:c9:24:c0:15:a3:4d:d6:e7:42:13:a5:
fc:45:be:b8:05:1e:f8:02:01:1d:8a:0e:9a:17:ee:a2:9f:15:
1e:6f:be:8e:89:3a:e0:46:67:43:f3:61:1d:88:72:4e:21:d3:
c1:6d:b2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:16 2025 by rpki-client