Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json)
Hash identifier: LxIdeHs1B0fKk5XcjlTomb/B+MpOATXdmEY8eEx4TQ4=
Subject key identifier: F6:9F:6B:36:3E:04:31:C9:4D:71:C7:85:88:E4:FD:AF:89:83:99:E6
Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097
Certificate serial: 0194BD85B903131D45F8ED12D7E260DACBD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
Manifest number: B6
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: OSrPUG+MOqcSSGgGN8R0Bsv4LIt+sXehujekhNZncoc=)
2: EoE17t8PTfrUuXfL9C5ZkqxDhJ8.roa (hash: sAVxmU6pnEn88UNK22PTFUDf8gXcyDueVttcLFRxFqg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b9:03:13:1d:45:f8:ed:12:d7:e2:60:da:cb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=f69f6b363e0431c94d71c78588e4fdaf898399e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:04:76:3c:fa:c0:ad:83:3a:9b:ea:0d:0c:
05:b8:97:7c:ff:14:34:dc:fd:a6:f9:81:6d:6b:84:
f1:e1:25:8d:bd:2f:27:ac:8a:39:ef:f5:44:44:84:
6e:86:24:07:26:a7:ef:8d:1b:e6:b2:f5:7b:b1:a5:
7f:74:c8:cc:1a:03:a1:6a:f0:6b:6f:5e:12:c0:d4:
f0:ed:ac:bf:47:b5:7f:9b:bb:a7:47:2e:d1:42:e4:
c5:0b:a7:b1:de:47:4f:68:2f:6f:85:aa:48:3e:97:
12:a0:49:c8:9f:0b:c6:32:dd:c9:e1:12:a5:21:c5:
72:1b:09:cd:f8:b3:a6:14:54:0a:5a:ad:41:a0:3b:
0f:33:f0:aa:80:13:6f:9e:33:42:86:9c:84:b8:8f:
6a:95:58:03:5f:d2:70:7d:4c:09:09:13:84:45:a1:
59:86:cc:57:40:e9:72:fe:23:fc:10:be:2b:7b:50:
9b:cd:9a:14:37:b3:e8:26:7e:52:05:61:93:62:d6:
fe:2a:74:77:1f:69:b4:3d:82:c1:4b:8d:ca:a2:bc:
39:bc:0b:b6:d3:3c:a8:b2:48:0c:33:e8:5d:c8:cd:
f2:c2:27:cd:99:e2:68:21:dc:51:d1:43:8f:e5:cc:
6c:24:a3:f0:bb:12:7b:d9:33:42:d6:2b:6d:22:b5:
59:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9F:6B:36:3E:04:31:C9:4D:71:C7:85:88:E4:FD:AF:89:83:99:E6
X509v3 Authority Key Identifier:
keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:53:43:3f:51:1d:ae:cf:d8:2c:ec:16:a5:9a:80:94:7e:86:
f0:93:bd:35:b9:7c:4a:2b:b0:f6:97:6c:a2:3f:b4:f5:65:4a:
2d:24:93:11:5c:c8:d0:37:5d:01:cd:d4:d4:20:f3:76:cd:70:
2a:9f:aa:6a:5e:fa:93:39:a2:7f:c1:1c:4f:9f:b5:32:ba:a7:
d2:54:3e:d7:22:f5:af:dd:1d:cf:a9:2c:b9:0b:56:c9:13:5e:
e6:fc:47:46:40:85:18:5f:f4:e6:b2:c2:3a:96:29:4e:83:eb:
f1:ff:ca:16:8d:27:aa:2a:95:b5:08:ee:3b:bf:c3:cf:e3:aa:
99:74:05:b0:0d:47:bd:7b:e4:14:8e:12:a5:28:75:90:6a:a7:
46:0e:92:1e:9d:8c:9e:b6:09:e4:c6:55:62:a6:42:45:a8:7c:
f4:52:ad:22:87:86:ea:a9:f8:fa:10:18:f8:f3:4b:9e:95:12:
87:2d:39:a1:3b:88:84:97:c7:43:af:d1:a7:82:34:26:b1:94:
6c:b9:8e:e8:62:0f:fe:f5:33:24:f1:8e:6a:64:3e:f1:37:53:
6c:a6:7d:2c:6c:40:b0:68:43:6f:99:5a:4b:1b:75:62:4c:11:
db:15:53:a5:bf:2a:fb:ec:e5:02:88:a4:bb:ca:fb:40:a4:22:
e8:06:21:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:59 2025 by rpki-client