Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
File: 9kixVYLTS9UXCp3RO4EyW6uuXjo.mft (raw, json)
Hash identifier: 39uVaNupoGv5Oe8hZmFMEJGlk3ZpQzI6+/ZEXXDNfcg=
Subject key identifier: F7:46:16:BB:3E:9F:15:78:BB:2A:4B:0F:12:B0:3A:59:A0:83:29:27
Authority key identifier: F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
Certificate issuer: /CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Certificate serial: 0194BD17E36F1439DB30D7CB0876A2B4F21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: 9kixVYLTS9UXCp3RO4EyW6uuXjo.crl (hash: DwC49DwAgdk4l/COxv8ldj6qHQhIlsWDpeMrABVGExE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e3:6f:14:39:db:30:d7:cb:08:76:a2:b4:f2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=f74616bb3e9f1578bb2a4b0f12b03a59a0832927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:02:9e:60:5b:d0:cd:aa:8f:ce:c9:b9:bd:
b1:eb:dc:bb:c6:51:02:f2:c3:59:0f:26:ba:76:df:
8b:d5:18:a7:6a:f2:e4:22:f0:ff:e1:8b:af:85:15:
86:31:83:32:cb:33:29:7e:8b:d8:71:d5:f4:94:21:
da:3f:ca:ff:21:e6:77:d8:2d:c8:f6:1e:f6:13:a4:
d1:2a:a6:9d:63:f2:11:7e:44:7f:56:00:5f:43:07:
a8:dd:78:7c:1e:4d:7a:bf:30:e0:9c:13:7b:6f:fa:
d5:e4:8e:11:c9:bb:6c:d9:91:b2:a7:c5:17:5c:85:
e1:04:12:3a:2e:1d:b9:36:35:86:b0:67:a3:5d:d4:
d6:64:44:bd:72:4c:8b:57:f5:03:0e:6c:20:16:3b:
89:ce:04:b3:b0:2f:a5:ad:21:09:3c:59:07:b2:20:
d2:23:c2:84:90:71:d5:f4:66:7c:e2:45:1b:54:68:
70:14:76:1a:39:13:90:0a:5f:7a:75:32:8b:5a:ba:
25:90:0a:ec:fc:63:08:19:3c:da:2a:a7:58:74:e4:
2d:30:7a:84:a0:1e:c4:79:e2:ce:38:3f:a8:34:d4:
43:ea:04:b7:1f:7d:14:16:22:28:90:45:cc:46:e2:
6a:ff:fb:78:c1:85:4a:f2:2f:b9:05:2e:6c:0c:46:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:46:16:BB:3E:9F:15:78:BB:2A:4B:0F:12:B0:3A:59:A0:83:29:27
X509v3 Authority Key Identifier:
keyid:F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5e:b5:bc:59:cb:de:13:4b:63:74:8b:62:14:b5:5a:20:73:
16:0a:99:56:d1:63:62:a0:17:f9:4c:13:8f:65:76:8a:97:13:
88:ae:9b:60:6c:5a:d5:05:46:6f:86:8c:f4:27:4b:28:2d:d7:
af:37:f9:36:ae:52:11:63:34:fb:04:1a:ae:66:20:ca:f4:06:
f0:84:c8:61:7c:e4:ac:9f:1d:bd:ac:05:2f:72:fa:78:03:51:
79:7d:3c:40:09:f8:8f:77:80:72:97:95:26:4a:62:47:2f:78:
f7:60:5e:2d:5d:23:1e:c3:2c:d6:0e:30:91:34:03:48:a9:7c:
c0:15:fe:73:29:5b:52:7c:a0:c9:d3:19:81:12:3e:ee:bc:aa:
bc:2f:17:fc:f9:3c:44:5a:f8:e4:d9:58:ce:a7:0c:d9:2d:c1:
39:0d:47:fe:ee:f3:84:b2:31:6a:2a:a6:1d:a9:88:e2:35:05:
72:87:41:6a:5a:6d:10:7a:59:33:41:ae:3b:5d:7a:91:da:ed:
10:b7:24:15:24:54:bb:5d:d1:61:66:0c:6c:6c:f7:d2:74:09:
52:36:01:1a:36:9c:48:70:31:10:e1:56:c9:c3:49:f5:a8:48:
20:76:a5:c0:67:13:fb:75:f2:f4:21:9b:2b:d5:c7:f3:1d:e7:
a0:c0:d2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:32 2025 by rpki-client