Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: sO8GCq/jtQp0RM+29s85klI5EZgRiCMiHlmkNwbkoj4=
Subject key identifier: DC:FA:17:82:BE:C2:03:EE:BF:84:FF:89:73:46:13:3D:0F:9A:49:36
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 0194BC3C92D8B04CEC434228B924DD4FEA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: 1-Rgkx9BsEfikK5eKOgyodd6h4gY.roa (hash: CT7Rp9+Jw7zWR3AQw89KWuUkHEx7Im+IKlsSdQ20Nq8=)
2: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: QnqsmwrmhAOMh+ZGtm+wezJUUOwObJN6UfmO7O2KIGU=)
3: JOUMaPpHTLs0B4CR5_freWlNIso.roa (hash: lQdFlW5I+9SlK8gtAYGtz3jqfCmzmwfXYR3qnMqPbFM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:92:d8:b0:4c:ec:43:42:28:b9:24:dd:4f:ea:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=dcfa1782bec203eebf84ff897346133d0f9a4936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:c5:42:34:8e:31:58:e8:b8:e6:a1:dc:1a:
20:e7:19:e1:4a:d6:67:74:ba:c8:19:1f:d9:a0:87:
06:3d:6b:9c:bf:ee:e1:e4:ab:e9:4c:4a:99:85:81:
fb:12:89:ca:87:ae:2f:1e:1a:d1:6e:69:1b:d0:1c:
74:99:ac:16:46:81:ef:31:d7:5f:a6:09:7b:af:15:
cb:e9:d1:2f:7b:0c:7a:a0:54:4b:15:ec:03:c1:6b:
01:59:3c:ce:43:4d:18:16:ab:3a:aa:e3:47:c5:83:
d2:68:a1:3b:27:09:f3:c2:de:9a:7d:64:32:df:96:
21:5a:ac:8f:0f:fb:6b:2c:99:6d:a2:47:95:fe:d0:
92:88:b2:20:ae:15:ce:6a:11:f7:6f:1f:44:ce:4a:
bc:38:63:11:57:98:af:53:84:52:41:11:c8:f9:aa:
db:9f:c1:26:65:be:b0:05:43:02:55:57:28:b9:5c:
4e:5f:3c:08:91:1c:3d:b7:3d:65:46:b5:1b:64:4c:
cc:7b:c7:d7:db:db:38:48:87:c4:cc:37:5b:f1:3f:
a2:a2:61:85:4a:a2:0c:5e:1b:54:d6:cd:36:c6:8f:
da:49:38:d9:e2:19:ab:dc:c3:3e:6f:32:7f:c2:50:
8b:bb:cc:84:1e:22:7f:d3:7f:03:de:f3:0c:3f:a9:
9b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FA:17:82:BE:C2:03:EE:BF:84:FF:89:73:46:13:3D:0F:9A:49:36
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:64:0d:f3:25:ea:90:e0:98:60:03:fc:4d:ca:8a:d7:e7:dc:
a9:12:78:04:aa:46:21:2c:82:4c:2a:62:44:7c:5d:3e:db:29:
8f:78:6c:cd:33:97:c3:11:36:f2:cb:7c:e4:ea:9e:91:f9:79:
17:a5:37:3b:84:b9:37:b7:2f:62:b8:1b:ea:a6:05:bb:30:d0:
bc:8c:19:41:bc:f0:47:cf:e0:02:52:53:92:9f:f0:ef:c8:5e:
35:29:21:ca:89:21:f6:2a:bf:bf:6f:17:93:f2:38:19:b4:b9:
16:41:bc:49:91:52:1d:83:84:4f:5b:c5:0d:bc:f9:15:6f:d9:
a2:39:03:ee:13:85:22:f3:9e:10:d7:d0:28:a9:d4:b2:bc:5c:
34:5e:74:c1:20:26:19:86:6b:42:10:e0:84:5e:09:80:f5:96:
a7:e0:db:2d:23:85:ab:9d:ad:c1:c5:a4:41:39:a8:e7:e7:f3:
f6:82:01:22:73:84:c1:c6:1c:10:a2:65:e9:09:e7:ab:ec:38:
fa:4f:a4:0e:60:b3:1b:74:05:28:c7:77:af:c5:de:c6:3b:d8:
d6:fa:3c:54:a1:0e:a9:ec:cc:5a:a5:29:a3:2d:07:fb:5e:8a:
f9:b3:a1:aa:3b:03:39:d1:96:31:b2:71:77:45:82:c0:55:62:
2b:9a:39:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:16 2025 by rpki-client