Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
File: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft (raw, json)
Hash identifier: 326ovPYaLcvtJDdlooye7bQT+Xef6NMPzwYI0YxWBNs=
Subject key identifier: 3C:3A:55:BB:B5:22:62:6D:BF:EB:47:EF:C8:80:33:DC:80:89:D7:E3
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 0194BC3C21D75EB9ECA9E350309777A212C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl (hash: uu4w3VN7gnuU7ibSIGqXF07ER2s4alZ3h7rWR4qlrVE=)
2: 8wuUCHDoiO-u5k-EpvGe48eFVvY.roa (hash: 8liREnCtlx6CxZif/A697CMWzrfTg26yY6bw/0u19Kc=)
3: hNWwx7OL-9adb1_PVQj7dLugRbE.roa (hash: a5RZCNYvOxtuFY3pREa+RhVOW1R7dmnnmbvgTvDFgik=)
4: mfbZVdq9U34OeMkxk6hF0I-IiUw.roa (hash: 9EuZ0OPsmGIAQsHl9Riv2eeHyNztmXWvWPcE2dshfNk=)
5: v_OC8AL3Mq1xajaIUc5DePm85DI.roa (hash: a977IGySg5+WWPVlDhFXuD0DqZ/XdGVdujbzn7Y6iiQ=)
6: wHQqsP-wDdlrG8HE-Ibk_6n2osM.roa (hash: PzO0Fj4BmxOXd+Sy5Mgniwv5ZA+rTUEwL2xB1sXxHvE=)
7: yqZvxvM3OQB3j7ZhkxBBM7G76fw.roa (hash: ySnNZMI4aJ2K0py2dKBYDcYAVza5oxn4X5eYVSbGDFk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:21:d7:5e:b9:ec:a9:e3:50:30:97:77:a2:12:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=3c3a55bbb522626dbfeb47efc88033dc8089d7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:b6:2c:70:fb:bf:a6:4c:1a:5a:85:3d:ee:
77:80:52:92:17:00:c9:05:09:7f:4b:c6:20:ae:8e:
85:11:fe:a5:94:01:88:f4:07:ab:15:b3:be:ed:f5:
50:a6:6d:5f:a9:50:fd:be:84:6a:4a:98:be:c3:a3:
7a:07:bb:73:e4:74:b6:39:2a:61:36:cc:00:8c:48:
18:74:3a:59:90:fb:2f:5d:30:74:b3:92:59:69:4e:
41:6a:bf:55:ff:4c:22:61:65:84:ae:02:93:b2:71:
c5:55:b1:d9:f1:63:7d:12:82:1d:bf:c4:99:00:06:
c0:bd:1d:fb:f7:f9:f8:cc:b5:6c:81:8a:bc:1a:b7:
63:16:3c:98:47:c5:bd:2c:04:d9:09:4e:97:06:ce:
a8:80:64:a8:db:13:62:48:a9:1b:a7:5d:65:da:c6:
dd:40:bb:f7:20:eb:05:3f:94:36:85:20:af:82:36:
14:39:7a:d8:e6:da:9a:06:cd:a9:f8:80:ea:de:c5:
07:1e:0c:2a:e5:fb:6c:57:cd:27:e9:7b:d1:c9:15:
ae:63:ad:20:5c:12:37:31:0f:42:c7:6e:3d:3c:95:
b8:3b:ce:5b:aa:ee:0c:88:84:05:b0:2c:e8:d5:c6:
23:f8:2b:05:05:af:03:19:b3:14:bb:d3:8d:bf:d1:
75:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3A:55:BB:B5:22:62:6D:BF:EB:47:EF:C8:80:33:DC:80:89:D7:E3
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e5:43:f4:8c:8c:4f:99:56:07:e1:d5:59:9c:87:72:48:6f:
53:cc:5b:1a:c4:b6:63:c7:f1:67:9b:b6:22:83:d1:1b:be:b7:
51:21:c1:cc:b2:93:88:24:b3:79:37:44:77:31:9e:d8:4e:e4:
1a:1c:29:a0:36:f7:4a:96:8d:70:bb:a3:4e:b7:af:a8:04:6b:
33:d6:2c:5c:11:9d:64:8a:64:73:81:40:a0:a1:e6:8c:05:9f:
50:54:1f:eb:ff:c9:69:a6:5b:3b:e1:27:bd:f1:9c:57:5e:0b:
42:66:f7:a1:68:ee:bf:7b:92:52:18:df:8d:fa:32:83:92:64:
a4:80:20:bd:b0:37:53:da:b1:c0:d0:99:0f:ea:f5:b3:cc:0e:
f2:b1:cc:c1:b2:98:4c:6c:cb:1d:8f:e2:c4:4a:ff:ca:a6:0b:
8c:01:d3:2e:d3:6a:2a:cd:65:65:9f:99:0d:27:08:26:b9:d9:
e0:06:0f:a0:7f:62:43:f8:2b:b4:08:91:56:ed:0a:4d:27:a4:
b2:1d:9e:45:4c:7f:8b:af:23:e3:33:cc:a2:c6:e7:8c:1a:00:
8d:ef:ec:5b:89:08:c9:ee:90:ff:11:90:52:64:76:92:c2:e8:
28:27:70:3c:e9:63:89:22:ba:6c:5c:21:d3:98:ee:be:f7:fe:
f0:29:fd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:56 2025 by rpki-client