Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: hFmYsoif3UZEcd7kbCHN5IwlrywCou7CQMK1sbz1Ti4=
Subject key identifier: 00:2F:71:86:54:34:07:CE:5F:C4:10:57:A1:45:AE:D3:FA:54:01:BB
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 0194BC052F238F4C5C9A3F56F8B2123E08BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 11:00:43 +0000
Manifest this update: Fri 31 Jan 2025 11:00:43 +0000
Manifest next update: Sat 01 Feb 2025 11:00:43 +0000
Files and hashes: 1: 1-q7Os-ag3LFo7MgF8ZfJghgVfgc.roa (hash: AkqR6A52qHHQpKh+paJEwg0UF7zLNR6BUjxPJEPXBuc=)
2: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: R86HGEYvXgwJnPeIyFW7M997rL9oSNAXWCJDwPStQUI=)
3: X2IXuMlNGoAcrvL_ko43_QrEupI.roa (hash: tb+ePbzsjMAZQXem+oOzrudhMucziUuIqtpyErKmVRI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2f:23:8f:4c:5c:9a:3f:56:f8:b2:12:3e:08:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Jan 31 11:00:43 2025 GMT
Not After : Feb 1 11:00:43 2025 GMT
Subject: CN=002f7186543407ce5fc41057a145aed3fa5401bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a2:cd:42:0d:46:16:75:88:ee:f4:bd:ee:04:
19:28:e5:d3:e9:9a:9b:16:72:ca:2b:eb:55:d0:09:
db:86:71:43:e9:5a:41:c9:a5:a8:58:ce:46:2c:1d:
85:be:25:fd:c5:f6:92:43:93:40:42:2e:9b:f6:9b:
02:4b:33:c1:37:de:da:04:d3:a6:d3:c8:6a:eb:cb:
19:b5:68:9a:24:de:8a:62:ba:d1:53:d9:6c:03:04:
64:2e:7c:f6:74:81:e3:df:91:7f:64:03:db:5b:7e:
d0:bc:dc:f8:57:9e:48:c0:67:1a:db:e9:a6:0c:44:
62:4a:e2:88:ff:13:49:47:3d:22:1c:a6:ac:83:74:
19:23:36:ef:3f:83:12:d2:46:b6:dc:ac:20:4a:f0:
3f:95:65:09:d0:b4:32:28:5e:d3:9c:99:f2:23:7c:
0d:0a:59:73:d8:65:4c:f6:b9:0d:5d:90:cf:18:d4:
f8:16:2b:10:6d:32:c7:1b:42:a9:1a:82:36:b9:15:
be:75:d9:35:71:8f:00:a3:f7:8b:a0:67:b3:ad:bd:
a3:8a:4d:34:63:02:b4:c7:05:d6:4e:ee:3c:22:d8:
64:b6:91:37:34:48:34:8e:bc:a2:4a:5a:40:d9:c5:
7d:9e:cd:87:8f:b4:b6:52:79:41:97:2e:2f:3e:3f:
46:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2F:71:86:54:34:07:CE:5F:C4:10:57:A1:45:AE:D3:FA:54:01:BB
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c2:f2:eb:35:21:02:6b:04:20:36:80:4a:ea:8a:55:67:53:
2b:b5:85:e7:ac:f3:25:1b:58:60:49:92:7d:13:9b:ad:c5:68:
60:9e:76:e6:00:26:6e:d3:62:c2:6e:76:01:8b:ad:31:5a:23:
75:6f:fb:c8:0c:3a:80:5c:72:3e:d1:22:45:97:da:d5:51:c1:
c2:38:3e:90:0e:62:62:b6:a7:4b:31:a6:ee:54:5f:4d:24:1e:
e8:ac:10:c5:10:bc:24:dc:55:10:8b:ef:8c:41:f5:02:6a:01:
ce:91:da:f8:00:e2:3a:a9:4d:48:22:b4:03:61:da:a4:38:1b:
01:c4:a9:23:36:18:e1:ad:a1:94:c2:0b:fc:b4:6b:73:34:8b:
0e:c8:3c:bf:6f:72:88:ff:b9:57:d9:08:05:6f:a9:e8:31:be:
a1:cd:0a:3c:dc:cd:a8:fd:73:ae:27:40:1d:1e:e7:af:66:88:
75:60:af:67:58:2d:ad:53:70:e7:f5:c5:a9:05:c4:27:a0:9d:
36:32:e7:92:f9:3c:06:ca:e3:90:b9:a1:d7:83:71:29:8a:ee:
8d:b6:e3:55:bd:c0:47:f4:f3:38:e4:8d:7c:fb:44:fb:7b:47:
52:fa:c3:c8:35:84:59:8d:15:77:b5:14:f9:e9:69:ca:97:ca:
b5:2d:d5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:14 2025 by rpki-client