Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
File: 9H0DN3zBCPRAkSa5oMIBYyQhxko.mft (raw, json)
Hash identifier: //L630z2u/NHv35p0Da2USYX2zGqwAWY1GxkkwPrQaE=
Subject key identifier: 88:16:83:D4:8E:E8:B5:E6:AB:8C:2F:87:A3:C7:BE:57:5A:97:16:76
Authority key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
Certificate issuer: /CN=f47d03377cc108f4409126b9a0c201632421c64a
Certificate serial: 0194BBCE148A7A4BA339C210D3279CE7344C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: 9H0DN3zBCPRAkSa5oMIBYyQhxko.crl (hash: rDgAQeirV5BRbN1EkLeUXB7LcBoeNCa9pg/b2Y5YRLg=)
2: yhhMqOayivlP0HqWgBqkxI1f14U.roa (hash: w/NNRo63VlTAmPeepIG4fNxKMWjZVte8F0Xs65Wc7u4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:14:8a:7a:4b:a3:39:c2:10:d3:27:9c:e7:34:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d03377cc108f4409126b9a0c201632421c64a
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=881683d48ee8b5e6ab8c2f87a3c7be575a971676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:85:9c:6e:c4:eb:60:64:dc:b6:11:30:17:
e8:61:ed:c5:38:e9:4f:73:3e:67:4f:cf:36:d6:51:
d2:76:58:55:fc:11:68:00:24:48:b3:d7:de:dc:9c:
0d:0c:c6:b8:ee:2c:03:36:2d:7c:29:91:0a:fc:4b:
5d:7e:34:b3:03:2c:91:b9:31:5f:ff:e1:2f:11:83:
68:b1:c9:24:a6:09:e9:6d:dc:bd:1b:4e:dd:55:04:
89:c9:21:9e:4e:39:66:d0:3e:fe:73:97:95:8d:55:
5b:c2:99:43:4c:52:8a:d0:c0:6e:e2:18:85:79:78:
69:90:30:34:86:61:47:f8:26:cb:bb:bf:52:13:b1:
1c:80:92:e2:af:64:5d:80:5d:13:e3:c6:15:0a:d2:
c6:74:f6:46:93:7b:90:03:73:3c:2d:db:42:71:fb:
d0:b0:4a:0a:0e:48:0c:ea:b7:a3:d4:fa:cd:40:37:
e7:81:20:3e:79:be:aa:6c:39:5e:c3:e9:e2:45:c7:
d0:22:f2:62:98:db:3a:a9:44:4f:a1:ca:f1:b9:aa:
c4:1d:33:10:ee:c4:a0:54:89:70:3b:b2:ee:ab:ed:
63:17:7b:32:6b:cf:0b:1c:30:11:26:22:e4:04:2f:
d5:f7:a9:1e:cd:83:f5:3e:6f:f9:61:20:2b:9c:72:
f7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:16:83:D4:8E:E8:B5:E6:AB:8C:2F:87:A3:C7:BE:57:5A:97:16:76
X509v3 Authority Key Identifier:
keyid:F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c5:bd:c1:d5:85:f1:c8:0c:29:26:98:7b:cc:49:b4:32:2f:
42:5c:7f:15:57:97:13:dc:c3:40:22:78:34:6f:78:1b:b4:65:
d1:aa:7a:0d:75:4f:80:5a:23:60:c4:61:82:6e:8a:04:52:03:
c4:21:cd:8b:29:48:0f:36:22:e4:e7:d9:7a:f2:17:e5:9e:bf:
8e:51:47:94:0f:9f:e0:af:60:51:30:14:c6:e7:cf:bd:0d:a4:
cf:c5:e1:6e:b6:96:b7:e2:a4:ba:e3:bf:60:bd:70:4b:c7:35:
a1:00:92:d8:58:49:0c:72:f2:36:ce:46:3f:a8:a0:91:36:96:
02:bc:d3:82:bf:96:c5:0e:63:c2:eb:4a:b1:22:08:b7:fc:77:
17:8d:18:c0:48:4b:40:24:48:2d:aa:fe:70:80:62:c3:e8:9c:
46:5d:ae:8c:af:5a:97:6a:0d:8c:f3:6b:dc:ab:79:64:3a:63:
4b:2f:fd:73:b6:f3:f3:74:a6:fd:42:5e:b6:67:fc:c3:b1:e5:
68:31:c0:ed:87:20:bc:93:68:ec:4e:e0:0d:12:fa:a0:8e:ac:
bc:27:15:3f:04:b2:4e:3a:ac:25:71:31:6d:99:f7:7e:20:f3:
18:7a:74:08:d0:96:97:be:cd:63:67:06:e4:2b:63:20:5a:a3:
f1:22:a8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:00 2025 by rpki-client