Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.mft
File: c9CjqymaZZjTK8dUUAIYiHlbPSs.mft (raw, json)
Hash identifier: Zl9kFPXcOF5xC6yNlcgQ/HbzqUnVpxU9n9ECo+z3bBI=
Subject key identifier: 07:FB:1B:42:5F:96:A7:6F:80:99:F3:DF:17:A5:08:93:21:5A:2C:0E
Authority key identifier: 73:D0:A3:AB:29:9A:65:98:D3:2B:C7:54:50:02:18:88:79:5B:3D:2B
Certificate issuer: /CN=73d0a3ab299a6598d32bc75450021888795b3d2b
Certificate serial: 0194BCA9A1005C81B7219B415BCB47EEDDF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9CjqymaZZjTK8dUUAIYiHlbPSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.mft
Manifest number: 06BD
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: 4wMTuy8fboUuLv8KlxTIZakr534.roa (hash: pBH22tRi52c9WZSzBb0rlZeUN0npss3P8rc3Yf/hlCU=)
2: c9CjqymaZZjTK8dUUAIYiHlbPSs.crl (hash: 97gSBgY4bVoOkKOgNXwTqW5VJlw/gwY7NAxgd7dB4Os=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a1:00:5c:81:b7:21:9b:41:5b:cb:47:ee:dd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d0a3ab299a6598d32bc75450021888795b3d2b
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=07fb1b425f96a76f8099f3df17a50893215a2c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:36:24:60:a9:c1:f0:f1:3b:a8:a0:55:8e:
3b:3d:07:cd:c1:ff:a4:44:f0:25:ff:3c:2d:5a:59:
fe:9b:83:bb:c6:94:ae:69:76:69:81:5a:eb:74:b1:
81:de:c6:e9:f3:17:e2:6a:40:e5:08:ca:ee:13:6e:
d2:f6:69:43:77:c2:a9:0f:2e:18:67:46:f0:e6:4d:
d1:73:2e:a0:75:b7:48:b9:01:b8:02:15:61:87:8a:
0a:8f:66:89:f9:56:2f:72:0d:87:05:af:8f:cd:58:
64:a3:f6:f8:08:98:6e:e7:2c:90:ce:4e:27:48:c3:
61:69:58:f6:b9:b8:b3:6a:3d:0d:51:16:35:69:b7:
a3:d9:46:13:16:53:11:17:16:22:fc:a8:c0:1b:09:
2a:9c:19:0e:f0:de:44:5e:e4:4f:8f:fd:56:7f:9b:
92:72:1e:c4:23:71:9b:fc:74:c3:5d:f6:97:16:81:
82:54:71:ee:8e:cb:48:8f:39:ce:37:9f:db:76:2d:
5b:9f:cc:52:7b:c7:c7:04:ab:e4:03:8a:4d:9e:d4:
d1:6d:d3:8e:a3:9a:4d:3a:08:40:09:53:2c:e0:44:
78:52:cb:08:63:5e:d1:ab:2c:37:fc:7a:34:a8:3e:
79:f5:2d:b1:d5:16:2e:fd:d2:ce:1e:03:f5:e7:7c:
3b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FB:1B:42:5F:96:A7:6F:80:99:F3:DF:17:A5:08:93:21:5A:2C:0E
X509v3 Authority Key Identifier:
keyid:73:D0:A3:AB:29:9A:65:98:D3:2B:C7:54:50:02:18:88:79:5B:3D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9CjqymaZZjTK8dUUAIYiHlbPSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:44:6d:6a:7c:55:20:38:01:9f:ed:69:ff:b9:c1:bc:8c:b7:
6a:f8:75:2c:0b:4d:9a:ad:70:39:a9:c3:63:16:89:2f:b9:b9:
0b:64:76:17:1e:30:ec:ea:a9:f8:34:9f:80:83:0b:11:e5:32:
34:de:43:7f:49:ae:98:69:b5:ca:0a:ce:2f:dc:04:01:a0:ec:
40:20:9c:5d:07:cb:07:20:59:1c:f2:c7:b3:b9:76:fc:b0:da:
25:b6:21:8d:0a:66:91:5d:8a:f3:13:41:18:7b:38:f9:a9:7d:
6d:18:8e:3e:2f:d1:7b:0e:6e:06:be:1c:66:38:1a:7b:a4:4d:
30:16:a3:89:44:09:0d:a3:78:1c:ca:0a:03:b0:96:2c:fc:87:
aa:92:eb:b4:fc:48:f3:01:80:12:0f:d2:29:bc:45:2d:75:36:
e3:2d:3c:68:c2:49:cb:94:c1:c5:74:f7:4f:99:22:78:21:b3:
6b:39:2a:f3:4e:64:18:fb:23:51:8b:39:f4:24:80:89:60:61:
5d:9a:7c:10:21:e8:eb:c1:3a:ef:54:d9:c0:90:84:fc:cc:ce:
da:2a:65:a4:d8:4a:11:43:c4:aa:73:6c:77:86:dd:bc:28:7a:
3d:f5:37:20:a5:f7:28:cf:12:9d:3e:ec:07:7e:8f:f5:20:bc:
32:a4:d2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:34:53 2025 by rpki-client