Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
File: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft (raw, json)
Hash identifier: 1uUyQp2OL0ojMOSke2atls48keA8d93TICf7PaVodnY=
Subject key identifier: 7B:2E:4B:CE:AF:BE:DE:CC:5F:2A:F2:6F:27:C8:A3:45:BA:AF:02:6F
Authority key identifier: F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
Certificate issuer: /CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Certificate serial: 0194BC0516D421D50CD8BDB54018FFEE49E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl (hash: tJf/vlFNiUPq4dJsRxMmktbZYiZx3YemySjsGm+n81s=)
2: bRo1FpRQdGW3rrEgf9LP2ZyYMbs.roa (hash: ZwgslFPNqU25lgzTk3XOIv2Nozx6fjcmPWKTGmYvfPU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:16:d4:21:d5:0c:d8:bd:b5:40:18:ff:ee:49:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=7b2e4bceafbedecc5f2af26f27c8a345baaf026f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:76:2c:1a:aa:35:c6:4b:8d:c5:21:72:50:
84:08:5d:7c:c6:7a:a2:05:61:80:50:d7:cd:a6:65:
89:14:66:ee:6c:ad:ee:9c:8e:a9:33:b3:84:69:ce:
14:08:0b:a3:a1:2d:23:6b:68:f6:cd:aa:c1:6f:cd:
d0:cf:64:32:22:87:01:92:18:76:53:0c:1b:28:91:
fd:e6:d6:a5:ed:9a:91:9a:f8:23:e8:42:ff:7d:83:
b9:95:88:bc:c0:f2:2a:2f:17:b3:be:dc:1f:bd:6f:
05:ea:de:5c:b6:cc:7a:d7:14:50:74:35:90:b1:15:
67:96:05:44:d5:ad:9d:14:60:4b:8a:52:7e:9b:6a:
ea:cf:1e:65:7b:a2:ce:ab:6b:99:02:79:2a:11:94:
a3:83:4c:fd:bf:a9:14:1f:31:53:bb:fb:8f:35:d6:
ee:e5:53:dd:5f:0b:5b:19:02:f0:94:a6:72:3e:e3:
6f:56:13:2b:81:a9:b7:7c:0f:af:6f:62:a7:38:9a:
f7:44:3a:24:01:94:e6:dd:0a:d5:38:88:5d:ca:2c:
8f:ba:50:33:f9:ee:d4:7c:ee:1c:27:09:cd:4f:e9:
bb:77:0a:eb:14:34:2b:dd:4d:3b:40:ba:bc:04:59:
b4:ff:fd:5c:79:83:70:25:8e:08:20:27:93:c8:75:
71:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2E:4B:CE:AF:BE:DE:CC:5F:2A:F2:6F:27:C8:A3:45:BA:AF:02:6F
X509v3 Authority Key Identifier:
keyid:F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:94:9d:af:24:3a:9f:ed:9d:d2:1d:b2:55:f5:4c:df:fa:a4:
2e:4c:17:de:b8:48:ff:8e:59:f5:b1:8b:37:92:80:0e:b9:46:
cf:ee:ed:f7:ad:d5:00:13:44:34:7d:65:18:dc:5c:6e:01:b5:
65:2d:7c:4d:a7:5f:f3:c5:84:5e:39:3a:6a:8e:af:e7:fe:6b:
18:90:ac:48:2d:3f:2a:e3:6a:fd:2b:02:64:28:0f:14:b6:cc:
13:1e:7a:7d:eb:17:f1:89:cb:6f:26:1c:e6:fb:18:49:22:0d:
56:31:9f:2f:fe:24:ba:58:fd:af:92:1d:2e:2f:41:10:78:c2:
17:c5:30:d3:11:63:55:29:f6:42:24:73:31:14:b1:9c:07:83:
05:47:45:e6:56:12:59:a4:eb:ae:c5:b0:ae:da:82:00:31:8d:
70:c7:00:72:8d:47:ac:d2:4c:b8:98:f6:e8:3d:c6:7d:39:75:
8e:07:e0:fc:09:25:05:a6:cc:ab:d2:4a:4c:7c:a2:5a:d7:b6:
38:6c:3f:a3:2d:e0:2b:92:d7:a2:c5:d4:51:10:29:bb:06:82:
d8:0a:b2:77:ce:9e:7c:19:08:33:90:f7:c3:78:48:80:6e:88:
3d:ea:2b:a0:4a:b8:2c:db:83:dd:8e:e1:54:d9:24:1d:b8:d7:
a4:68:b9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:50 2025 by rpki-client