Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json)
Hash identifier: kTd13A+dlFOHcxp3M8dI9ullIVB7ZieaOKRhguj8A60=
Subject key identifier: 86:59:C8:CF:F2:85:5D:F9:30:9A:39:63:58:9D:7A:8E:55:E6:DD:DE
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 0194BCE0B20FDB16B9357CB58F4972AF3A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
Manifest number: 09D7
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: IYzcAOylkCK_uA0fvPBTfE72Jds.roa (hash: XQ1t48LGVut2zt47wAPz576NQbtokdUjwVpHgvtQ414=)
2: S8jwzJXqaGDrFqYz8TPGTLOpyKI.roa (hash: gRr2rHAmRoGzxwaMIEjOoOiSKnzn+32RoUUGqW95mP0=)
3: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: p8SbZuEo6hSItWvCGUEmJbdKxwX2EaJAZmwLBmAoG3s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b2:0f:db:16:b9:35:7c:b5:8f:49:72:af:3a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=8659c8cff2855df9309a3963589d7a8e55e6ddde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:96:59:e9:47:7d:59:ae:06:6d:31:d2:65:02:
a5:95:ac:11:fa:c5:02:8a:1d:dd:d6:7e:23:29:60:
ef:30:d0:0d:b5:0e:45:38:20:f8:20:c7:40:7d:ea:
e8:30:e7:c8:17:a0:e8:80:8c:07:93:81:69:c6:d8:
bd:6d:76:a9:66:ab:a0:5e:b5:6d:30:62:33:b4:e1:
f1:7e:ca:a1:e0:33:36:55:f0:9c:b0:f6:c8:2f:28:
e2:4b:56:41:dd:0a:6e:19:8e:67:07:86:fc:46:2e:
42:01:89:2a:4a:fb:63:db:d3:40:9c:1a:37:b0:d7:
34:0a:17:ab:83:73:37:94:ef:5e:e6:38:cf:8a:83:
f7:84:51:f1:5f:ba:6c:0f:78:10:1a:cf:4d:6b:96:
de:3d:38:5c:87:7a:a8:96:2d:a8:72:a5:f6:c6:ee:
61:a9:57:c5:c2:4f:3e:70:c2:7b:53:e6:c5:67:24:
b6:67:88:2f:de:ba:e4:87:a3:90:bf:e8:a3:ed:56:
c4:d5:c8:c7:ff:bc:8c:7e:5a:42:a6:5f:de:c4:6f:
58:4b:2a:07:76:13:44:9a:f3:3e:76:e9:6c:bc:8c:
67:2d:0f:50:d7:55:cc:7c:a9:51:a2:29:cf:66:86:
8f:d6:34:15:4f:ea:6d:69:51:a7:cb:18:c5:b3:cd:
bc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:59:C8:CF:F2:85:5D:F9:30:9A:39:63:58:9D:7A:8E:55:E6:DD:DE
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:92:41:ef:06:d9:71:34:48:da:20:4a:83:ec:48:7a:cc:ff:
79:a2:28:0e:d1:0d:57:61:a7:13:93:ea:c0:20:a9:ec:11:6b:
cb:03:00:77:b6:2a:c3:bd:8d:4f:d8:2a:d5:c6:09:69:dd:71:
99:d5:7f:02:a0:75:39:06:c5:38:98:33:5d:f2:e6:85:92:2c:
fd:5c:bc:6f:cb:54:45:9d:27:06:2a:8e:67:5e:fd:df:c7:fc:
19:11:02:1d:71:8f:b5:12:2f:6b:46:b5:bc:0a:77:c0:53:7a:
dc:61:c1:3c:c1:5c:3c:9c:d9:6f:dd:34:38:7e:96:1b:95:c3:
9a:69:4d:ad:f7:01:35:74:4f:8c:b2:ee:f1:b1:bf:11:ab:7f:
ae:0b:c5:f8:42:f7:1f:5e:a0:a3:19:aa:f7:6f:da:c9:4c:65:
39:aa:dc:52:1a:b5:76:24:83:b4:7c:3a:b8:03:26:08:d3:5e:
92:b8:66:c1:36:cf:67:50:99:a1:cb:db:6d:4e:ed:08:2d:dc:
83:4c:0b:0a:dc:98:6b:dd:06:f7:86:f8:55:a7:9c:42:6c:d9:
96:47:96:51:ea:d8:09:65:18:19:68:2d:4c:1c:3e:a7:41:49:
72:63:d5:d7:3d:80:17:bd:a6:9c:bd:63:ae:c4:28:3f:fc:76:
84:be:df:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:05:33 2025 by rpki-client