Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
File: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json)
Hash identifier: yd5nNudQNKGs1QD0I6d79h5KuLAmFfGEmIvtD//TxCQ=
Subject key identifier: 9B:84:2B:E8:02:DD:C2:88:80:A3:DD:F3:1C:DC:71:F9:0D:4E:81:0B
Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Certificate serial: 0194BCA9B9B15D09832E672FD8CF549C5791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
Manifest number: 0D8E
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: 9A9uxaWJLfgumtH4EJ9GGPxGPbfLZZL2oOp02tIDhdk=)
2: JKDoGMCZzjSndX7Ct7p3CxyKJR4.roa (hash: bo2ZyeRjzsKv0IsXJYurWXlAoWDOMikTk02MIFIPMnU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b9:b1:5d:09:83:2e:67:2f:d8:cf:54:9c:57:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=9b842be802ddc28880a3ddf31cdc71f90d4e810b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dd:ea:21:13:99:28:3b:c9:3e:16:5c:fe:76:
0d:38:a7:3f:63:d0:7e:d1:a3:c8:33:ba:8f:48:38:
22:0f:9a:80:9c:8f:08:06:fa:39:74:ef:ec:c2:8f:
65:0e:b6:81:40:d1:48:75:01:2a:d9:a6:1c:61:e5:
5d:f6:e6:26:95:0f:97:27:b1:a4:e1:df:a6:3d:f4:
67:64:cc:6e:c3:de:63:df:46:2d:ba:61:fc:ce:ab:
b0:5b:66:5c:03:2d:7f:9e:df:3f:9d:fd:8e:84:a6:
75:cb:82:29:fa:9d:46:a5:e3:67:16:0c:67:2b:75:
ad:0a:f8:aa:3d:cd:c7:a8:88:2a:af:69:d7:c1:aa:
38:00:d5:94:c4:c2:a0:c4:f5:6c:25:7b:56:50:14:
64:f1:77:28:d4:29:6a:6a:be:7b:3c:a1:ab:46:bf:
ce:58:37:67:c1:86:bb:65:83:e8:14:e8:f4:3f:be:
e1:bb:b5:d6:8f:62:34:6c:86:06:bc:53:9a:86:04:
6c:6e:29:cb:54:cc:d4:c8:9c:f9:c3:ac:87:58:ea:
37:27:4d:79:c6:75:19:ee:93:7d:fa:90:e3:33:9b:
22:2e:dd:61:b3:8a:c0:47:3c:66:b6:f6:44:9a:8a:
9d:be:79:59:ef:c9:c6:e5:51:d8:05:df:c7:d1:32:
0e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:84:2B:E8:02:DD:C2:88:80:A3:DD:F3:1C:DC:71:F9:0D:4E:81:0B
X509v3 Authority Key Identifier:
keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a2:9f:5a:d1:8c:b2:24:3e:79:b1:c8:de:c5:e0:28:33:79:
d5:ad:65:ce:ae:72:4b:5d:c8:a7:af:74:9e:b9:db:c5:e5:cb:
d0:be:28:cc:d8:3d:61:64:bf:32:b4:42:66:16:d9:5e:06:ca:
34:c3:2f:81:3a:7b:48:d8:49:38:52:05:2c:58:be:b1:83:34:
eb:2f:db:3a:e3:d9:df:26:ee:3c:37:45:eb:aa:82:f5:28:5b:
34:b8:59:9c:6c:4b:68:5b:31:99:dd:ce:c7:28:d2:83:e5:22:
b2:04:b9:70:19:6c:13:9a:d8:63:11:10:09:cb:a8:56:90:62:
e4:9c:04:60:5d:87:3d:32:d8:0d:ca:41:a4:52:2e:33:72:cb:
c6:5a:f6:ce:90:6c:19:b8:a5:39:cd:af:fb:39:da:6e:8a:9c:
65:8a:9c:59:9a:9c:28:96:43:a3:39:04:03:3d:bb:a0:be:4a:
de:2f:b9:c3:cc:a1:fc:18:f7:27:55:dd:09:36:72:cb:2c:a7:
e5:3c:33:aa:c3:a5:e8:80:51:17:5c:77:a6:5d:c2:87:a0:32:
fe:cc:17:8a:8e:98:84:c8:f1:28:18:1b:28:0e:59:d4:f4:5a:
cf:cb:c9:15:91:97:c3:de:05:50:a7:a3:09:d1:75:10:a3:18:
2c:60:43:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:57 2025 by rpki-client