Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
File: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft (raw, json)
Hash identifier: 4tQFStsWN+5zfv4iR0rdcbXHUCdM4QMREr5sDLvJK4s=
Subject key identifier: 58:23:50:42:23:F3:24:A5:5F:E2:ED:AE:B9:DD:83:1B:D2:AB:E3:E2
Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
Certificate issuer: /CN=f68e231d5551876e15afc6637eab7fca80088391
Certificate serial: 0194BCA9D264A7F6A7F7C7718047E9DB2965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
Manifest number: 12A0
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl (hash: k9tV3RUbvduclLAuYAO/N/OKY80bNALWCM0biy9apf0=)
2: Yj1ZixuYkYbRfQKF1z7pgksE4us.roa (hash: YrNKpDljk4B4Ef1MFB8qPNVZiTFjojjO2XPhpM/1UPY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d2:64:a7:f6:a7:f7:c7:71:80:47:e9:db:29:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=5823504223f324a55fe2edaeb9dd831bd2abe3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:63:0d:d1:56:ba:eb:d5:65:80:c0:5f:f9:
a6:24:41:a3:6a:df:ef:0d:a9:b3:d5:31:95:90:6d:
c8:74:c7:46:ec:83:25:ae:ed:7c:24:85:12:4b:08:
25:8d:fc:70:b4:71:75:2e:49:03:a5:83:2e:42:55:
b2:a8:67:de:65:45:c0:57:c4:25:cc:3c:3d:cd:be:
74:45:c9:20:48:ee:c0:85:62:6e:2b:2e:3c:d1:d9:
66:45:17:4a:29:1e:ab:d7:16:be:b8:0b:64:8e:6a:
b5:fd:6c:b1:9a:42:7a:3a:ae:b6:cc:3f:e7:88:89:
4e:68:ba:ea:a9:0e:cc:71:ef:1c:89:06:61:04:25:
2f:45:fd:12:a6:b4:b4:e4:fd:29:78:f3:aa:bb:9e:
ea:ff:7a:e1:48:63:39:37:d6:a1:fc:ad:ce:7e:98:
ff:64:db:b4:ef:ee:7e:b5:44:38:82:6b:1b:30:08:
e7:80:1b:4e:5e:88:c1:bb:f2:b4:f6:48:a9:75:49:
62:d5:90:74:56:eb:f5:1f:6d:4e:8e:06:a4:f2:08:
e4:1c:dd:5a:45:79:5f:c7:b5:b5:75:6e:7f:f6:22:
57:c1:43:5f:ca:cc:2f:6b:c4:23:90:b1:63:53:13:
5c:40:12:23:58:8d:b1:9a:3d:b9:6a:ec:0a:db:96:
be:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:23:50:42:23:F3:24:A5:5F:E2:ED:AE:B9:DD:83:1B:D2:AB:E3:E2
X509v3 Authority Key Identifier:
keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0d:7a:c5:6f:f5:bf:b5:6d:b0:1a:f3:51:3c:70:72:a3:9f:
47:1d:5d:b1:25:4c:c4:8a:7d:18:65:fc:c3:0e:5c:84:6b:1f:
32:f9:4c:56:57:90:21:2d:4e:9d:05:0a:d0:71:ee:d0:05:ba:
34:29:ec:f0:c0:89:a0:71:41:03:de:1f:31:1e:b3:61:8d:10:
20:74:1a:1c:f3:e8:b4:22:49:62:15:ee:b9:ce:1a:e9:4b:cc:
08:7a:18:56:df:02:48:16:6c:57:b3:b1:9c:01:1c:21:a6:05:
d7:f7:9f:5d:64:72:1b:fb:ce:90:6f:ac:6e:90:6e:6c:88:41:
61:7e:cb:87:23:46:b7:9e:f8:9e:27:9f:aa:ce:0b:bc:9e:8d:
09:72:03:8c:04:d5:d8:5b:5e:55:da:9e:2d:35:99:67:a4:70:
4d:81:e7:9f:d5:53:77:68:78:52:61:6f:1e:1a:50:cb:9f:06:
36:c6:0a:fa:5d:93:ba:98:92:25:b4:6c:0e:0a:07:f5:7e:ff:
88:14:4c:21:e1:fe:17:95:d6:7a:b8:27:b4:0f:d0:eb:c5:7f:
e5:52:e4:9f:f6:63:20:e3:1f:04:c5:14:31:38:b2:9b:9e:15:
f3:0a:ce:c0:07:04:61:de:c9:c3:57:b0:8f:ff:00:b4:33:ca:
ec:e2:72:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:02:15 2025 by rpki-client