Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
File: W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft (raw, json)
Hash identifier: vkQsPQ1r+QfR0RpX4yDit1invJ0hdVebtVw0dvA7Law=
Subject key identifier: 9F:9F:C0:84:3B:25:6B:30:4D:A7:1D:B6:D4:88:2B:73:90:6E:49:F8
Authority key identifier: 5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51
Certificate issuer: /CN=5bdc41674d65d2af9174b1abace0b371362b4851
Certificate serial: 0194BC05170AD558EBEB9AE09D968D521F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
Manifest number: 09DA
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl (hash: 1AhwtJJfANtFRw+XbjQx9Zi3x75Fb0ZE6fBzv2cU7vs=)
2: WdWyM9k6KcLoz5FUrSgiaxd0SUM.roa (hash: 9FkYuv3N9sKiJBFCLi9r1CgkkKmg2nuXBs/YrWrih48=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:17:0a:d5:58:eb:eb:9a:e0:9d:96:8d:52:1f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bdc41674d65d2af9174b1abace0b371362b4851
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=9f9fc0843b256b304da71db6d4882b73906e49f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:3c:6f:7d:f9:f8:04:a3:18:ce:5e:38:30:
79:93:d0:cb:1a:fe:d4:db:02:7b:30:c2:87:cb:1b:
c6:7a:93:cb:19:4f:db:11:c0:e2:e4:8e:1f:b8:ed:
89:e9:d9:6f:81:9f:f6:65:9a:65:98:47:11:29:75:
40:1a:98:d4:d2:c1:b5:37:65:a7:c2:35:bb:b8:1c:
a6:8e:c4:f1:0b:d9:4e:5a:93:25:c6:02:b7:ad:95:
49:c1:ba:72:39:71:56:f0:47:8a:94:b2:c8:37:39:
a8:67:64:42:58:12:14:0f:87:8f:ed:8a:63:b3:ac:
b1:dd:a8:b0:f1:13:b6:fb:0c:97:9d:82:d9:c5:f0:
ce:e9:f0:63:7d:01:3d:0c:85:ee:fc:56:29:5a:04:
6a:5e:ad:bf:fc:95:17:ea:60:4d:1c:96:20:34:80:
14:37:ac:94:a9:c7:cd:aa:78:a4:c9:d1:87:48:0f:
f5:6f:92:ab:34:d8:c7:43:a9:62:87:37:9e:1f:a4:
33:a1:4c:7e:23:41:e4:e0:06:6d:20:27:11:0c:1b:
5c:e5:c5:3e:7a:0f:d0:b7:e3:2c:cc:61:91:5e:5a:
11:6c:77:d5:09:57:2c:ea:85:a2:6f:cb:56:15:de:
2e:b2:b6:72:b0:9c:1c:04:ec:84:bf:ed:0b:84:a0:
15:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9F:C0:84:3B:25:6B:30:4D:A7:1D:B6:D4:88:2B:73:90:6E:49:F8
X509v3 Authority Key Identifier:
keyid:5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:02:9f:bf:59:da:c2:f3:b7:10:8f:f4:0f:ed:38:39:48:49:
d0:c2:3f:87:09:91:8d:4f:d2:f9:1c:8f:91:15:3e:19:4b:24:
73:2f:ae:12:4f:d3:1d:03:12:e4:22:ee:c1:83:8e:54:44:bd:
de:58:ea:e3:a2:43:44:03:6c:3b:87:79:77:24:69:9b:e5:84:
45:33:ed:7c:64:4c:53:c1:31:96:88:7b:fa:68:4a:17:e6:29:
33:99:35:1f:9d:27:03:43:93:8c:39:68:e1:73:a2:83:c9:e4:
a6:38:8c:9d:a3:7d:dd:05:4d:2d:07:91:46:b1:1f:cb:85:d5:
29:6b:9e:99:fc:ce:8e:24:c1:c6:57:d5:ac:4b:ea:8d:d1:df:
d3:59:54:8d:81:ed:e5:c2:3a:50:25:2d:a0:81:18:b9:37:bb:
85:0d:46:fe:97:67:00:57:0f:b5:88:32:c7:1a:93:96:9c:41:
37:36:a8:b4:1f:57:cc:54:e6:2e:c7:1a:c7:42:64:6a:98:ec:
05:84:bd:24:c2:13:0e:d3:db:5f:59:7c:bd:e1:f0:e6:34:01:
09:a3:e3:3b:27:80:3c:15:63:d9:ff:1e:88:6f:db:6a:94:0f:
34:74:0a:3c:fa:3d:62:39:62:9a:90:1f:48:fd:a4:2c:ef:6d:
e4:cc:14:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:21 2025 by rpki-client