Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
File: x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft (raw, json)
Hash identifier: nf2wd+RRq+BIYk6nipUjDusvd3F1ol6AJWOIOm7dMQA=
Subject key identifier: A2:1E:4B:D3:92:0D:E5:17:71:E9:79:3D:F7:4A:9F:E5:3E:1B:65:0E
Authority key identifier: C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
Certificate issuer: /CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Certificate serial: 0194BBCE69DADC9F2544607CB1E31FF70531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
Manifest number: 122D
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: FoLZPs7jrCTyiPs4I9l18S1Qr8Y.roa (hash: WOyc3nyHlP8BA5pHAMbDbGZktLqXc6sBTwvRJ/HW9z8=)
2: x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl (hash: GmvUpSEmQ6Uq8mACYpgrjiilCGVb4c/wb0pKZ9tveaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:69:da:dc:9f:25:44:60:7c:b1:e3:1f:f7:05:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=a21e4bd3920de51771e9793df74a9fe53e1b650e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:59:59:2e:b6:58:21:17:56:5b:a6:0e:37:88:
26:b7:4c:84:71:58:6f:a1:fc:8c:de:a0:07:76:0f:
2c:7e:83:74:d0:ed:07:21:31:6f:df:f4:1a:ef:98:
44:aa:07:26:d0:8d:55:17:18:bd:40:0e:60:78:cb:
fa:7a:b9:d5:0a:41:db:c4:9c:9c:bc:ad:21:03:58:
4e:ac:47:ba:f7:07:1f:a6:dc:e9:36:c3:a0:6f:21:
2f:28:0a:d1:df:0f:76:46:9c:b1:68:f5:82:09:cf:
a3:c8:22:e7:cb:7c:5a:d2:d9:6d:2e:d1:e2:ca:85:
2e:e2:e7:a6:13:75:48:ba:90:98:d6:32:4b:8b:93:
b9:b1:55:25:84:d9:ff:ed:be:92:84:a9:3e:36:89:
de:a0:90:d4:b8:56:57:67:8e:ac:7c:2a:c2:cf:87:
6c:48:3f:af:1a:c9:06:82:ed:5f:64:07:73:0b:bc:
56:99:f3:84:b3:0b:ae:5e:60:93:d6:67:1a:30:18:
06:2e:61:d4:96:03:c6:21:b0:2b:93:ca:2a:74:49:
cb:79:20:54:d0:eb:7c:69:0b:e1:15:54:6f:e9:9f:
20:2b:67:96:8c:a9:d0:c3:14:42:ea:f2:be:0b:37:
ea:e7:d1:3b:22:c2:79:3e:5a:9b:5d:56:16:5d:73:
76:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1E:4B:D3:92:0D:E5:17:71:E9:79:3D:F7:4A:9F:E5:3E:1B:65:0E
X509v3 Authority Key Identifier:
keyid:C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f5:e1:eb:cd:eb:d2:d6:45:21:93:01:a4:a9:7f:5a:40:26:
a2:d0:24:76:ca:a4:e6:30:ba:be:5b:5f:f7:8c:c2:d2:b8:3e:
e5:83:15:7a:15:9b:b5:78:55:82:28:0d:41:2a:07:3b:8f:ae:
af:0d:47:7a:35:6b:41:19:fc:07:9a:f8:9c:87:68:3b:c5:c2:
db:ab:96:ce:6c:46:e5:d6:73:0b:24:92:f8:09:10:b4:e1:ab:
62:ff:a8:a5:71:3a:3b:f4:7e:0a:f7:6a:6c:19:e4:34:65:4a:
8e:34:14:aa:eb:35:bf:43:3c:ce:7c:f4:b1:07:54:3b:89:e9:
b1:62:53:cf:91:b1:8d:93:c8:de:09:59:e0:d5:aa:ec:25:27:
69:0c:b3:f7:64:f5:38:74:e2:9a:e0:4e:9c:15:10:c6:86:25:
dc:f9:fd:c3:fa:74:aa:87:6b:be:90:01:d8:31:ed:a1:3d:d4:
b8:5b:d3:f7:9d:9a:42:db:97:f1:00:31:39:df:0b:be:01:50:
52:31:db:27:57:60:9a:49:45:7e:04:01:55:bf:02:54:da:90:
56:43:92:e2:ba:e9:a3:0a:8a:be:da:32:ca:77:59:db:07:03:
42:49:e8:ef:e7:e8:77:50:0f:d2:7b:9a:56:b1:f2:2f:74:8e:
58:72:69:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:42:45 2025 by rpki-client