Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json)
Hash identifier: LABj9mAbwkATrRFYpNcxU5W6ugQl2fIMybsE0P9GZoY=
Subject key identifier: A0:31:BB:CA:1C:9A:3D:5A:06:52:D9:85:5A:BF:A1:7C:25:DA:71:D0
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial: 0194BCA97E23827DFA7A8211ABFC35F9D428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: zxJ4tdgxH/d0OmpJq4MFdWAFQ66PrP7hP4IpBHrxMMA=)
2: fGeYBTeIqUGlzWkeYCJZuXTV3NA.roa (hash: NVWcI0sfwe5T87MmDN6gYp0EndXzVclJkGdW6buL8Q8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7e:23:82:7d:fa:7a:82:11:ab:fc:35:f9:d4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=a031bbca1c9a3d5a0652d9855abfa17c25da71d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:1c:18:5a:19:5d:96:3a:c5:59:a3:64:1b:
36:83:88:0b:f8:a8:91:54:de:51:a0:61:90:7e:b8:
11:29:87:4a:dd:33:f1:02:5d:2a:cc:c0:9c:a2:b2:
9a:68:38:a8:a1:20:71:df:96:ea:0e:81:71:83:43:
20:5a:88:f2:08:74:fe:4e:82:3b:c1:e2:7e:eb:2a:
20:35:68:81:83:db:87:4e:11:5f:01:ca:90:5d:a7:
85:35:ae:a4:70:21:65:41:92:09:e3:ef:01:5a:36:
6f:b9:e7:8e:5c:71:63:e0:fb:b0:ba:a4:49:24:ec:
58:d9:94:9f:df:39:a5:10:c2:9b:a5:44:eb:fc:5a:
ee:3a:cf:97:97:b2:7a:28:a1:4b:1e:62:ff:11:ea:
6c:b2:60:7b:98:56:a3:17:97:ab:66:6d:05:dc:87:
90:79:17:87:41:6f:48:18:0f:43:42:61:72:31:a7:
7a:9d:cb:d4:30:74:de:35:1e:3b:bd:4e:21:85:74:
68:e1:da:bb:9d:4e:21:30:00:f8:fc:f4:da:1a:33:
df:2c:78:1f:56:6f:ad:50:68:3b:b6:e2:7a:e9:1f:
b3:ef:1d:a5:89:73:ae:e4:eb:52:ad:45:9a:49:04:
d7:b6:b3:2b:ba:17:c6:ea:5b:bf:ff:c9:51:b5:de:
fd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:31:BB:CA:1C:9A:3D:5A:06:52:D9:85:5A:BF:A1:7C:25:DA:71:D0
X509v3 Authority Key Identifier:
keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8a:db:99:2b:77:f9:9b:71:4e:75:51:13:02:aa:6f:f8:eb:
c9:63:ea:4d:d1:53:d3:00:e5:59:59:b2:90:e1:3b:d0:58:74:
f6:ea:1a:c6:02:72:75:66:21:98:90:80:40:77:c1:07:f9:02:
aa:01:56:79:b2:49:24:3d:2e:a4:aa:2e:7c:dd:4c:3e:1c:44:
7f:3b:63:01:fb:d3:0a:07:15:61:0a:82:9f:e0:32:0f:b5:1a:
70:d2:86:25:d7:b5:7f:12:2b:42:f8:9a:61:9e:c4:14:c4:40:
3c:b1:f0:3e:7d:0b:80:f5:51:f8:94:23:62:2c:b9:b7:b0:ae:
44:a5:94:88:58:5b:a8:8d:77:a1:ec:43:a6:9f:c9:ed:2a:a9:
b9:a8:1c:25:d7:ef:ed:1f:90:2c:fe:21:bf:03:b7:d4:60:a9:
1f:67:e8:5d:e2:a1:49:8a:f2:98:87:79:e3:c5:04:14:c9:a0:
21:86:2f:5a:f5:13:16:14:52:bb:ea:48:82:c3:42:5b:ec:98:
46:97:38:1f:bd:85:27:80:51:b6:0f:17:a7:af:88:30:69:3d:
3f:3c:94:19:87:d0:1d:f3:ad:a5:5e:63:37:9f:dd:37:51:c2:
56:3d:e3:51:19:87:7c:d1:53:45:31:81:df:e1:3d:2a:5a:2d:
55:d1:dd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:37:14 2025 by rpki-client