
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
File: 9KWwQv5I7rEjvlbb-ejdogweoR0.mft (raw, json)
Hash identifier: XxS2IjLCJyyloB7ghjmW99GpzN8KUCLWvm03rA1g49M=
Subject key identifier: 26:68:7B:D9:FA:94:F5:2F:03:91:E2:F7:26:30:C2:F9:AB:0A:41:7D
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial: 0194BD17DABE0CB423F7849BAA1C2D7BBC61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:44 +0000
Manifest this update: Fri 31 Jan 2025 16:00:44 +0000
Manifest next update: Sat 01 Feb 2025 16:00:44 +0000
Files and hashes: 1: 9KWwQv5I7rEjvlbb-ejdogweoR0.crl (hash: MaSjtV1Wks/fk3z+AykkygseWxqZAZ+151hIxbPg3+M=)
2: BKaKCrIWJLW3Q862BmZ-Z-FQI78.roa (hash: zGv7kfCx9AyBiy/Vt4g16r88DKiDMl7S2RsrkRbPYxA=)
3: U6yxYsRAOLx1rVOUMfl1bHjQTqE.roa (hash: p5afCkYVQi7asNinB13X4z3pkTkHpo8/a9b5lnTy5To=)
4: hlFLNTPKu_nVGF692xwIYmZW2GU.roa (hash: c5Q2Sew+Iis+NOcJWfVvfa4Ocr0QgEd2RYjfl4HhWNE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:da:be:0c:b4:23:f7:84:9b:aa:1c:2d:7b:bc:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Validity
Not Before: Jan 31 16:00:44 2025 GMT
Not After : Feb 1 16:00:44 2025 GMT
Subject: CN=26687bd9fa94f52f0391e2f72630c2f9ab0a417d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:f0:4a:3f:33:19:99:89:27:c7:cf:3b:84:
13:3e:ee:0d:b5:78:f2:2b:12:55:2b:a0:f1:f0:f5:
80:5f:82:89:a0:b8:78:dd:de:c3:03:9d:de:c2:cc:
eb:66:30:a1:43:c5:e4:69:82:ea:8e:64:31:f3:ee:
6a:b6:58:22:e4:7e:52:90:5d:da:a5:22:90:d1:a3:
d1:2b:c0:24:62:11:5e:af:f0:dc:8c:91:39:65:5d:
59:2a:f0:66:c4:ac:40:75:fc:a5:ea:81:cd:98:4a:
3b:9a:6c:0a:fe:73:84:7f:f5:21:85:79:55:9d:6b:
92:d9:dc:56:f5:e7:b3:9f:e5:d7:ea:06:1a:6e:be:
e9:97:45:a8:d2:35:1e:03:6c:00:29:1e:e4:3c:50:
6d:fc:2f:eb:54:d7:b8:67:5e:d0:44:8f:95:a3:70:
f4:fc:95:09:3a:58:98:b4:c2:93:35:55:97:82:e5:
96:6a:63:6b:7b:99:22:1b:c4:7d:6d:1f:5b:25:bd:
50:3d:0c:16:8c:c6:28:cb:22:df:3f:ff:38:65:f7:
71:e2:6d:a7:b2:40:4f:04:37:7c:fa:fa:2d:2f:af:
e4:d3:75:ea:1e:14:e4:e4:ce:cc:c4:1f:0e:29:05:
e1:28:6d:ba:6f:19:df:8c:1e:eb:35:60:e8:24:f1:
14:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:68:7B:D9:FA:94:F5:2F:03:91:E2:F7:26:30:C2:F9:AB:0A:41:7D
X509v3 Authority Key Identifier:
keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:79:d8:d3:67:23:6b:38:02:61:56:fa:46:42:2b:21:b2:34:
a4:53:b3:a4:d7:c7:0f:09:0d:02:50:7c:d3:07:bb:af:89:b7:
93:26:1d:ff:4a:8d:10:59:bc:cc:ff:4d:bb:70:c2:ae:b6:2d:
56:74:c1:ca:cd:1d:6b:9f:cf:f4:cd:49:4a:21:34:51:84:eb:
97:07:8c:53:27:35:03:d9:36:56:68:74:90:6d:d7:73:56:e4:
bf:4e:77:9c:e8:4f:2f:ef:8f:44:25:da:9d:42:94:bc:60:a0:
6a:6d:7a:bd:89:68:7f:36:c6:0e:8a:a3:93:61:1e:c4:ea:4f:
51:89:17:d6:19:1c:64:b8:36:85:05:2e:f1:ff:f3:b5:ea:8a:
10:2f:c6:fb:74:f5:d0:ea:fe:0a:32:a4:60:71:d1:ce:be:19:
46:97:b0:7d:b0:e6:c0:0d:d2:4b:bd:0d:a9:7d:f8:ca:c2:80:
82:68:11:72:51:6a:1b:d9:b5:c3:24:2c:7a:9b:93:a9:b4:87:
f5:b3:52:70:54:cd:ab:a2:98:49:54:59:ea:16:7c:c0:17:91:
6d:e9:b5:fd:e0:45:df:b0:a6:b3:38:60:e4:f3:78:68:35:4c:
89:e7:21:46:32:1f:cf:8f:6b:83:53:79:e8:8b:d7:82:af:2c:
65:3a:ad:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:58 2025 by rpki-client