Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
File: 9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft (raw, json)
Hash identifier: zy5AobbUJYeKjkFF8JybiLigNqtt8iYaUzmnFxZwgQY=
Subject key identifier: 54:7B:07:E1:91:93:C8:6D:1C:89:97:4F:76:0A:3A:A9:4A:03:B8:DA
Authority key identifier: F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8
Certificate issuer: /CN=f6f18c02405742c25377d696cd2a69dcc974bff8
Certificate serial: 0194BBCE8867F1183F5A051987B953FE3942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: 6Rwi5WxIjLb63K0eJqe1EvEuxDc.roa (hash: r7Wc6Mt/nHycECkDV3tNY4uy3f9xC1QAnYnLvp1ogpU=)
2: 9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl (hash: SLvC7bjAgQXjjHq3y3juEodprQURcfzfINFYXJXhVCU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:88:67:f1:18:3f:5a:05:19:87:b9:53:fe:39:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f18c02405742c25377d696cd2a69dcc974bff8
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=547b07e19193c86d1c89974f760a3aa94a03b8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3b:02:7c:c5:83:1d:70:1f:ea:46:65:38:7b:
6a:ce:46:37:25:ef:a7:8a:cd:2e:e8:81:2f:61:a0:
65:07:90:d1:56:11:bd:12:ff:12:52:37:f2:52:dd:
6d:f9:57:b9:80:c9:4b:ad:f5:c9:99:81:df:23:91:
0e:e6:f5:3b:a9:a7:2d:ce:70:02:52:04:69:46:38:
17:2f:ff:93:7c:c5:ae:72:91:be:f6:b0:ad:71:6e:
dc:70:d2:bc:49:ff:23:29:f0:10:a0:e6:01:37:e7:
bd:e2:92:6e:8c:0e:14:19:ac:94:b0:00:06:61:31:
44:06:79:96:0d:b8:42:09:08:6d:eb:42:8a:72:fd:
72:98:4f:59:7e:29:70:3f:3f:f0:8d:db:57:10:4d:
ee:8b:cd:0f:1a:df:99:2d:ef:88:04:06:22:46:9e:
02:0e:63:25:ab:8b:a2:a8:2c:60:48:c2:26:04:ef:
45:88:1f:48:46:55:5c:56:6e:f1:a3:0c:44:99:1b:
c1:8d:b6:9c:ad:19:89:a6:da:33:1a:5d:4c:f2:9f:
94:99:cb:28:d3:d1:73:bf:df:df:f9:19:e1:77:b0:
1a:3e:12:a6:1f:7d:a6:19:98:c6:f0:0b:4b:c2:c8:
51:77:29:0c:0e:d3:ec:dd:3d:1c:ad:c7:42:83:be:
c4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7B:07:E1:91:93:C8:6D:1C:89:97:4F:76:0A:3A:A9:4A:03:B8:DA
X509v3 Authority Key Identifier:
keyid:F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:67:47:ab:2f:25:86:86:28:4a:e6:b8:14:24:f6:a9:85:f0:
a2:aa:67:fc:b0:c1:60:dd:30:26:dd:5e:82:e8:0b:b0:09:67:
51:8e:85:e3:c0:f2:3c:c2:01:2f:38:47:75:c7:e6:7a:fe:55:
8c:81:44:11:4a:ec:06:c6:1c:c5:2b:9b:10:a8:60:6e:0a:69:
42:16:88:3c:de:75:e0:8f:0e:88:27:e9:49:94:77:71:e0:8a:
23:ed:3e:78:37:bb:8b:ed:9c:a2:4c:d9:6a:88:18:0e:fd:cb:
31:e6:87:93:7d:1b:12:b5:45:08:2f:1c:ba:4f:b2:bd:54:cc:
87:39:13:2f:23:d8:f2:8b:db:4b:b2:1a:ea:e1:5c:eb:9e:7d:
5e:26:05:49:b7:74:aa:b7:6b:d9:a0:25:d9:90:2d:fa:50:f1:
85:f0:71:6a:b1:bb:be:0f:e2:af:a9:c0:c7:3a:c0:86:b2:fd:
7a:4c:ae:33:1e:fe:ad:8c:e4:7f:7f:21:70:97:9a:c0:fb:10:
cd:75:46:8d:6d:d4:d0:f0:d1:63:f4:01:89:9a:d6:3f:f0:5d:
eb:b0:79:6d:72:62:46:27:e4:f0:40:8a:85:24:9a:91:f8:36:
b3:63:9b:1b:0e:89:97:df:31:98:ff:db:89:3b:1d:a9:2f:18:
91:e8:7f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:33:59 2025 by rpki-client