Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
File: 9dmpKCydJUfFZmNPO6zMvPJYiCc.mft (raw, json)
Hash identifier: 0PieMyUKHNWuJBoW7tTCYi5RyaIPDs/WBbIcjddX8aE=
Subject key identifier: 96:89:CD:DB:59:3F:9B:23:3D:79:69:A9:C4:1E:E8:BB:2D:5A:C1:AC
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 0194BCAE2D39FA8411BA053131AC7001D885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
Manifest number: 0A3F
Signing time: Fri 31 Jan 2025 14:05:18 +0000
Manifest this update: Fri 31 Jan 2025 14:05:18 +0000
Manifest next update: Sat 01 Feb 2025 14:05:18 +0000
Files and hashes: 1: 0u6rq_ZgBFOAUnTJ32IQX-OWYoo.roa (hash: CZV3x54bIwg5eSt+bZXqQSBOder/k5bvuc4W2wCbufw=)
2: 37QCkG1k9gzLrRMVOTELOapS-4Y.roa (hash: fObIS1yLlqyANULO1cGplwcB5m0pXnjdZmigUly+6NA=)
3: 9dmpKCydJUfFZmNPO6zMvPJYiCc.crl (hash: dPBUVegNvzZ2BCVQ0vW+AK+zM72gOg92bgreOqa9XFw=)
4: FhlNf_48Gdn75F5zHxmGWmsf9gQ.roa (hash: HjhvmU8QyInoH3lvaB72fhiAJ5t23FwBkfKdKpw0Ss4=)
5: f8-Ac8JJixA8KUm-UNAScJK5KS0.roa (hash: AKaNbgEKVCwscjWhbkDzbne6a4Thhwqd0rd8KUARx/o=)
6: yZE684PU1B3lT-aKA30arKwyTEI.roa (hash: isFNdgWP0HVp5O76X23OI/gh9YCy0xYVcwqK0QPMZ60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:ae:2d:39:fa:84:11:ba:05:31:31:ac:70:01:d8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Jan 31 14:05:18 2025 GMT
Not After : Feb 1 14:05:18 2025 GMT
Subject: CN=9689cddb593f9b233d7969a9c41ee8bb2d5ac1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6f:36:ee:53:f8:75:b9:78:47:64:8d:dd:37:
10:df:62:83:f3:c1:aa:7c:fb:3d:f9:02:23:0b:51:
30:99:50:ee:0b:3f:00:8a:db:a9:7e:aa:1b:8f:90:
9c:e7:dd:79:09:ee:2d:2e:e3:99:10:4b:41:54:0e:
5e:02:12:62:fd:ee:e7:90:51:27:7c:55:18:a5:70:
99:ce:b9:8f:94:15:78:81:e4:4f:14:1c:04:b3:c2:
8a:f0:f4:55:92:95:a8:83:16:c7:95:e3:98:aa:92:
03:80:71:d2:17:02:c2:f1:4e:01:73:af:64:2e:80:
0b:94:9c:eb:1d:b9:0e:0e:30:bb:8f:83:0c:1e:2e:
09:2e:43:cd:d8:9e:5d:4b:93:34:cc:a7:85:7c:74:
88:89:d8:8d:ee:29:01:b7:e4:73:ad:a7:9a:ef:0e:
14:82:d3:67:54:ff:ea:4a:fb:9b:73:48:7a:52:c8:
79:6b:45:a5:48:ba:9f:e4:af:f6:de:82:3d:9a:49:
67:69:0b:b8:85:1d:03:c0:17:11:5d:43:76:09:84:
33:0c:7a:a3:5e:29:1c:34:e4:6d:6c:cc:cb:df:3e:
ca:93:aa:a8:1d:49:c6:63:14:98:55:8c:f9:84:83:
8d:e1:73:b5:9d:04:f3:2e:a2:17:ff:8b:fa:73:0d:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:89:CD:DB:59:3F:9B:23:3D:79:69:A9:C4:1E:E8:BB:2D:5A:C1:AC
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:5d:0f:fd:03:49:26:30:5f:92:e8:73:7e:a5:dd:3e:2b:5f:
4f:ed:88:64:5e:51:05:67:e4:6c:50:7c:99:3e:22:df:c0:a2:
22:e1:1f:06:d1:78:e4:2c:14:e5:d0:cb:2c:a6:aa:f6:cb:02:
e8:27:0a:00:3c:5a:a4:cf:38:78:a2:98:49:e3:43:7e:90:8f:
48:77:21:f5:f4:da:c4:93:77:ca:36:16:36:4c:8d:05:de:84:
d9:07:b0:a7:70:a2:63:20:90:c5:6c:a2:aa:dd:7e:a0:bd:59:
c2:6a:9b:01:8f:4c:40:05:94:4d:26:7c:a9:f2:21:48:e0:33:
05:ee:d2:1c:38:d4:fa:7b:21:78:6e:96:0a:52:39:7d:2b:0f:
59:14:57:8e:c3:71:f9:7d:c0:17:fa:8f:09:9f:93:a3:e3:82:
c6:d3:38:71:e2:d1:2d:ce:3d:67:bd:e7:84:3b:0b:0b:7d:0e:
49:83:02:56:3d:95:e9:8d:ad:2c:32:2f:3d:39:2d:de:b1:8b:
e8:8a:c8:c0:f4:f1:47:30:d8:b8:8e:f7:05:3e:12:4a:93:f3:
b8:1b:e5:d0:20:b7:6c:f0:f0:77:5a:bd:70:de:0d:7c:3d:5a:
6b:9c:c9:59:b7:21:3d:d1:91:12:04:35:00:44:a2:2e:fa:91:
9d:b6:55:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:45 2025 by rpki-client