Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
File: 9_38M32M4OBe9_e3KvJ-thzUcDc.mft (raw, json)
Hash identifier: T/6lFAzyOVUZmSM6nyJtHmmA+TP+4Wue/LxHZ8xpaiI=
Subject key identifier: 92:4E:BA:DD:DB:23:3F:EB:BE:0D:5E:90:89:9F:83:AA:A4:25:56:A8
Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
Certificate issuer: /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Certificate serial: 0194BD4E91194D3ADF7095F182D731F2418A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: 9_38M32M4OBe9_e3KvJ-thzUcDc.crl (hash: YOWHBddPDt8h1sJ2aEi1NYJ4qKbleDoZ033i+U6LjaQ=)
2: fCHzIX3PF5IX4vTpqhp12B4ANgE.roa (hash: 56hifj5pI9Tipd1DppPjnl4odiFdle6vhykV6J1DFck=)
3: g7wXivy3539LtXi_LoOdOIVbDx8.roa (hash: +5hEq5/dYKWbMKLOksJvPEMNRWQVyUVWOFEW1b0Bio8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:91:19:4d:3a:df:70:95:f1:82:d7:31:f2:41:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=924ebadddb233febbe0d5e90899f83aaa42556a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:f4:f6:56:95:d0:6e:04:2a:2b:3e:3e:3b:
74:e8:de:ab:18:e5:d8:a3:2e:58:56:4f:4f:8d:11:
9d:c7:9b:81:6b:1f:d4:84:d9:ec:cc:b8:0e:4c:86:
44:0d:d8:51:c7:a5:17:6b:27:e3:80:28:c5:d1:d7:
ef:96:4e:49:a0:e2:d1:15:fe:a2:bf:a1:08:f9:37:
57:76:d1:87:f4:19:ce:c6:f5:02:94:d9:54:1b:8e:
21:92:9b:b4:ca:78:ea:e2:50:66:07:ce:cd:50:ea:
69:0a:f5:b2:2e:ae:53:5e:cf:f6:68:46:ec:69:d7:
d0:d8:4f:f9:bd:0a:99:2d:a1:55:74:03:6c:52:de:
7e:38:67:79:0d:bc:b4:99:ac:e3:55:8b:4f:f8:2e:
e4:f6:05:f8:eb:35:02:a7:55:cd:66:be:e2:2b:00:
33:3b:56:50:f3:8b:28:4a:f5:56:91:ea:b9:a8:6d:
e0:d6:b2:90:ab:1c:06:c8:9f:98:52:5a:d7:b7:24:
37:46:59:08:d0:b4:e7:ec:a0:7b:2d:73:af:f3:73:
34:0a:77:12:02:bf:8b:ef:24:52:cd:29:24:aa:b6:
60:17:7a:50:01:6c:1d:e4:70:14:f8:8d:c0:b7:5b:
29:1a:41:a2:6e:ba:57:70:26:f1:c9:e1:c6:f7:0a:
61:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4E:BA:DD:DB:23:3F:EB:BE:0D:5E:90:89:9F:83:AA:A4:25:56:A8
X509v3 Authority Key Identifier:
keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7e:42:4a:01:58:e1:c9:e9:c7:f2:a8:54:f4:c8:24:20:6e:
c7:78:b4:ba:54:ab:a8:c1:49:6b:b8:5b:64:1f:9f:cd:e2:a1:
61:64:fa:7b:27:05:20:b2:71:ea:44:52:0d:98:ba:e2:9f:f3:
d7:d6:5b:e2:0f:6d:88:70:c9:78:a6:75:d2:80:86:05:54:b7:
33:19:d8:5b:db:e3:f8:d0:a4:ad:62:e0:22:0b:4c:7b:32:6e:
fb:d2:56:58:76:48:c1:1b:6f:93:c2:80:c3:f6:c3:62:62:8b:
de:06:99:1f:df:ed:f6:bf:2d:59:46:c5:0c:8a:77:cd:88:6f:
54:83:a8:37:12:81:30:6e:60:04:fb:3d:99:01:f4:2e:14:35:
e2:46:f8:70:48:55:69:60:f8:65:5e:01:5f:cc:0b:d6:22:d5:
5c:5d:22:8c:89:73:8e:10:72:34:ea:d4:0b:a2:ce:c1:80:0e:
e5:90:e9:d6:03:cc:60:cf:08:14:8c:7f:19:3b:5c:b4:3d:52:
fb:cf:3b:18:b2:12:65:f2:6b:57:66:81:12:fa:3d:5d:98:d8:
54:b9:7f:f3:02:81:57:6b:e3:b8:68:8e:bf:7b:97:a6:3d:50:
ba:b7:5c:c0:ea:c7:b9:98:55:2b:fc:9c:e9:2d:9d:12:84:51:
47:3c:46:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:42 2025 by rpki-client