Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
File: 9QG54gYW1oa0BdqQavpZdjUGNkA.mft (raw, json)
Hash identifier: vIKuStxqc8X6xRvJQX1umc5aKURBvqZQTa+ThAvBkLc=
Subject key identifier: 29:FF:45:8C:58:90:8B:24:44:35:E9:B6:B0:E4:80:0C:A9:07:03:0F
Authority key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
Certificate issuer: /CN=f501b9e20616d686b405da906afa597635063640
Certificate serial: 0194BC72D88DFD4BD4D25A8395987155C90C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
Manifest number: 1166
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: 9QG54gYW1oa0BdqQavpZdjUGNkA.crl (hash: txTDHhOVBr+Wue5n8khiS9gvD9ttOBLQBpYnHGSoiFU=)
2: VBSMUM2E1eY-HeRIXiGsI4i681A.roa (hash: 9hPqZnbB+hAnaLIqMz7J1BKYjhJ96B3SoRz8LPWNz7c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d8:8d:fd:4b:d4:d2:5a:83:95:98:71:55:c9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f501b9e20616d686b405da906afa597635063640
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=29ff458c58908b244435e9b6b0e4800ca907030f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:84:b7:a6:f4:06:03:6a:7c:84:41:bc:77:
5f:a5:97:dd:d1:1a:1f:05:48:a8:a1:ae:db:93:31:
20:6b:96:b2:b3:53:2b:af:f9:72:78:28:44:1c:b3:
06:b2:ef:6e:b7:c4:7e:85:26:a5:cf:59:59:33:f7:
9e:30:a8:3b:35:6b:f2:6e:85:2f:88:3c:5a:81:5b:
af:a5:00:ec:ee:d0:71:49:36:1b:6c:ca:00:b7:9e:
e7:e5:40:33:6b:47:cc:91:f1:82:35:fd:c3:ff:85:
d3:ca:c5:db:27:eb:83:03:be:7d:95:3c:3e:59:16:
76:e0:4f:0a:3d:4b:49:67:52:08:4c:a3:b6:56:f7:
8c:b3:91:32:8b:90:65:0b:da:32:46:5f:01:24:5b:
49:70:a4:1c:27:6b:04:75:c0:b8:f7:eb:0a:ea:0b:
c5:eb:6c:86:8a:3e:53:83:07:b5:81:ee:33:9a:89:
8e:f6:67:7b:55:53:ae:31:db:9a:00:ba:a5:64:aa:
36:90:a3:d1:a3:5d:df:0b:b6:6d:b1:1b:6c:47:84:
a7:48:9c:17:97:76:5b:e2:50:1b:77:af:2b:fb:53:
9f:1a:76:50:98:b8:d5:ba:f2:69:84:77:14:6e:d1:
e0:26:5e:ea:17:b6:51:4e:0b:92:52:52:c8:c0:4b:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FF:45:8C:58:90:8B:24:44:35:E9:B6:B0:E4:80:0C:A9:07:03:0F
X509v3 Authority Key Identifier:
keyid:F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:82:17:0d:7d:43:b4:dc:b6:17:f0:7a:3c:4a:27:18:1f:54:
e1:30:ab:cd:9a:15:9a:6d:bc:26:b3:54:31:f3:36:ea:39:09:
35:31:a6:0b:d2:13:4e:e2:30:77:b3:bb:75:b1:32:de:d4:ea:
72:e6:31:c7:50:39:fd:a4:00:85:60:51:01:51:d3:6f:bd:62:
77:38:b9:16:26:2b:51:e0:ee:36:ec:88:dc:59:f3:ae:72:78:
95:0e:51:57:3d:f7:0f:19:05:b4:a2:42:65:6a:9c:26:3c:33:
9f:9d:87:7b:9b:c5:92:2d:73:d0:3b:3b:12:28:e7:33:ce:80:
52:92:1c:8d:1c:65:b6:1f:e2:ef:13:fe:8c:cd:e8:49:72:63:
26:8a:75:23:b2:db:78:53:ea:e4:65:39:18:e8:50:34:cf:e2:
c9:8f:6a:30:d0:bb:35:a6:cf:89:fd:78:c2:79:3b:66:7f:10:
79:bb:a7:4d:be:5a:f8:81:38:12:02:f9:a3:26:6b:db:e8:8e:
35:44:df:c7:be:c5:5e:e7:82:ea:d5:27:50:81:00:fb:a8:7a:
3b:ac:5c:15:9a:3a:da:9c:9d:9a:d5:0d:b7:9c:42:e2:f0:df:
93:d7:a3:44:18:ac:77:f6:64:00:39:21:2a:44:45:cb:42:11:
d0:7a:62:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:54 2025 by rpki-client