Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
File: 9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json)
Hash identifier: UksHvNrnuRm2TeWBpaKxXa6xuX8HHbkouiOMkVikUyQ=
Subject key identifier: AF:9E:6E:46:B9:5E:04:C9:BA:9A:CA:71:99:49:BB:8B:7A:F0:85:BD
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 0194BC72B1BB081B28DA878A0ECCB0185A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
Manifest number: 0721
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: 84Ad1KJPc9jhr8WAEOEs6s8tmPc.roa (hash: UeaLHRP7oFc/d7B28fPSHAmNwBiXwzZTNmEOfITVZrU=)
2: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: +BGNqZbup0kPLGiUx8xdO62GYGG59k5cUseEH/Wu500=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b1:bb:08:1b:28:da:87:8a:0e:cc:b0:18:5a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=af9e6e46b95e04c9ba9aca719949bb8b7af085bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:c3:4c:2c:f4:8f:fa:41:0e:64:eb:4d:d0:
a5:f0:c3:46:93:03:ed:e3:25:46:58:04:9b:37:d9:
2c:8b:ea:77:c9:5d:77:9d:3d:b5:8f:ae:59:28:d3:
61:60:24:ab:b7:27:09:c5:78:d5:06:61:1e:0c:2a:
77:c1:c6:b6:f9:a4:ac:94:16:00:76:4b:d0:31:9f:
19:29:80:e5:10:03:fc:42:13:23:62:00:51:d8:08:
2c:5e:87:ba:93:00:a1:f8:a6:4d:b1:1c:d4:4b:46:
b1:27:3f:9b:b8:7c:93:43:c6:b8:d9:63:66:c6:bb:
36:a3:95:51:1a:db:b9:59:b7:6e:f6:95:e7:7b:7a:
a4:c5:80:9b:9f:a0:a1:dd:56:fd:a4:60:0c:19:dd:
0a:9f:29:f6:e6:18:a2:6d:1b:2e:4e:62:21:d9:e2:
25:1b:ec:33:79:a9:6d:50:f5:1b:ad:d3:e5:e0:40:
52:7e:af:01:34:a8:76:f5:99:5c:65:78:1f:10:a2:
bb:8f:54:d3:28:4b:00:af:aa:57:f2:05:32:e0:9e:
60:8b:af:f1:e5:3f:98:96:d5:76:18:e3:d5:ca:74:
75:9a:85:6a:a3:15:4d:8c:6c:49:78:72:dc:1e:35:
0d:c2:85:f7:a9:3a:f1:52:8b:f6:5b:b2:d8:e6:ce:
dc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9E:6E:46:B9:5E:04:C9:BA:9A:CA:71:99:49:BB:8B:7A:F0:85:BD
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:49:68:e0:db:30:09:cd:ca:f0:24:e8:2d:a1:f1:3a:5a:95:
d0:89:d4:fa:6e:07:31:e2:a0:3c:99:0e:22:c2:e3:41:e6:06:
66:f1:cd:14:5f:13:ab:95:da:ce:b3:8a:2d:ef:cc:43:10:c6:
c4:b8:f1:b5:a1:4f:b2:c8:75:ab:f6:9f:e0:3f:af:0b:c1:05:
a1:77:cc:8d:00:f6:17:65:91:cb:76:48:f2:2a:87:d1:9a:c5:
24:4f:b5:8e:74:0e:12:3f:6a:06:81:a4:ed:12:4a:81:b5:0b:
03:72:e2:49:fa:cb:cd:82:96:b8:c0:d8:f6:fa:db:f4:cc:88:
7b:fc:a3:e1:32:8d:45:ee:2e:20:3c:99:22:06:10:8d:11:c8:
ec:c3:7a:74:c1:e1:04:f5:9e:dc:b6:4b:e2:46:bf:f8:3d:72:
0b:f6:37:a0:d7:47:21:eb:d3:43:8c:59:36:d9:39:14:2a:2c:
bf:d6:53:e4:ef:09:74:f7:50:7b:e1:ff:54:2e:00:1e:3c:98:
96:24:02:0e:19:83:3d:d8:94:35:1f:15:22:fc:07:f2:b7:c1:
48:96:a0:db:d9:3c:55:de:7a:32:c6:54:11:54:8a:dc:29:79:
41:b3:11:b8:12:a6:17:ed:2a:5f:8d:48:3b:54:31:cf:99:f4:
4b:9b:38:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:18 2025 by rpki-client