Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: bCCrFogm1DbZkfYuIYD3/3LLbMzgj9881d83NiY96W8=
Subject key identifier: 84:22:2E:EB:21:46:89:B1:F8:E9:74:53:59:D0:01:D0:B6:63:9E:4A
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 0194BBCEBAC04BC7B76D1037FEC9445EE5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 0C1F
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: 7AUy2Ulqa6Cx23M6xp3pHde7so6aVCriPzeU9hltd1w=)
2: _0wH1BRcgc6tfF99TwNnC3iQ1pU.roa (hash: O+Zelc4oaCgFlSMOLR6IXR0OWFyZm1W0ImLAmE3cggg=)
3: igkLmqGvdo3ZptL2OBtAT5tgBr8.roa (hash: JNS1dghL0HEbj9Q46she80UtZ72vLWiMcXMi6xfr/RQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ba:c0:4b:c7:b7:6d:10:37:fe:c9:44:5e:e5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=84222eeb214689b1f8e9745359d001d0b6639e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:04:71:f8:85:2e:6b:69:c7:4d:aa:3a:a0:
e1:fd:d6:a6:eb:52:7e:6e:1f:4d:39:2c:81:9a:d6:
16:99:66:61:0a:54:5e:75:40:2d:ab:ec:c0:9e:03:
a1:4e:68:6c:da:46:13:54:15:9f:2c:d9:5f:67:67:
d7:db:ca:b9:36:d2:07:bd:62:4a:29:af:12:ff:9d:
db:d2:3e:ca:4c:1d:22:0f:1c:67:fc:b7:4d:dd:3e:
cb:65:36:fc:13:35:f5:2d:cc:8e:5a:67:2e:65:97:
9f:0f:fb:ae:ec:b8:c4:8d:a7:bd:85:1a:2c:00:87:
aa:f7:34:b1:7e:25:8b:df:71:7d:00:89:d8:9d:b1:
5a:01:ef:1a:91:0e:a0:f3:63:72:89:ea:08:91:4d:
a1:33:1b:5a:c7:c3:d6:c0:3a:ca:28:3b:a9:a5:e1:
72:d1:ec:b8:a2:5d:de:3a:04:03:1c:77:e3:27:db:
7a:69:5e:51:a9:62:3b:4a:29:cb:5b:24:10:fa:68:
10:b2:ef:11:19:aa:7b:71:23:de:eb:09:0a:e2:c2:
35:c1:be:30:06:d6:c3:c8:b5:fc:ae:51:e5:53:9d:
95:01:90:0a:5f:63:93:12:54:24:59:1e:2c:26:85:
d8:be:06:e2:d3:db:83:3d:80:52:ce:04:21:9b:aa:
f2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:22:2E:EB:21:46:89:B1:F8:E9:74:53:59:D0:01:D0:B6:63:9E:4A
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7a:27:b2:6c:f2:5f:d5:e5:e9:b9:3c:40:cc:df:4b:2d:fa:
1a:be:4e:2a:62:52:bc:b0:f2:59:7e:aa:97:2d:05:ac:2e:32:
f1:39:af:48:55:9a:8c:2f:6e:39:26:58:69:57:13:5b:5f:17:
43:2a:7d:ff:48:e4:e4:ad:aa:dd:8a:fe:8e:62:3e:10:e0:7f:
90:45:f5:d7:49:25:9e:95:16:e0:ad:02:d7:8a:81:b8:12:8d:
13:7a:0b:68:56:9e:71:81:9c:f1:34:77:c8:a2:b6:17:c3:bf:
6b:ba:39:15:e2:f8:3b:25:89:e1:c7:71:4b:22:24:d9:99:f1:
96:51:ec:a5:76:09:27:2d:05:ed:9a:02:20:06:f1:6d:23:73:
37:e0:1e:3a:8b:c5:04:57:1f:7e:59:00:43:7c:78:c0:e7:a8:
c0:f0:11:fc:33:dd:2c:a1:dc:42:ad:2a:f7:13:b0:96:cf:a3:
0a:5c:9c:2b:8b:04:f0:5a:a0:f8:ff:c8:66:d8:78:89:fb:25:
a3:c3:ad:34:8e:5b:1f:19:4d:01:0c:ee:42:76:98:6d:85:80:
9f:3a:70:bd:a2:d8:d7:a9:00:16:29:20:18:74:a8:81:00:b7:
35:f2:04:51:af:16:13:4a:1b:37:f9:86:d3:b2:87:26:6f:0a:
4b:e8:19:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:29 2025 by rpki-client