Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
File: fG9Mjzo3f0bFUiAJZ4841hVxxso.mft (raw, json)
Hash identifier: 7ZobjpaSKT/HisdlJ4ltWjxaXOOOwKfPMlC2fsOtceM=
Subject key identifier: 09:E4:66:BE:C2:6C:67:13:E6:A0:C0:50:E4:17:48:F5:74:4E:FA:41
Authority key identifier: 7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA
Certificate issuer: /CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca
Certificate serial: 0194BD176CE4EE986AD72816BF54C5175AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
Manifest number: 08A1
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: B7oKCLtj5wVT7Rx672od7NSTVbM.roa (hash: zBd0U1lEA6sR+ArBNpdCg/lk4ok0wNXK1hGjWgT7oxA=)
2: fG9Mjzo3f0bFUiAJZ4841hVxxso.crl (hash: rMSAHFwUTiLwRT92fkidoZnVQJR+v/zejrZdDidXtVU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6c:e4:ee:98:6a:d7:28:16:bf:54:c5:17:5a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=09e466bec26c6713e6a0c050e41748f5744efa41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:91:cb:1c:7a:af:82:2d:48:2e:ab:48:92:b2:
3a:86:c7:4e:0a:4b:94:0e:5e:1b:b8:77:e9:f3:ab:
74:d1:81:f7:a7:6b:cd:89:98:f7:63:52:35:69:b3:
24:1f:90:a9:1d:70:a6:67:b1:63:be:49:5c:7f:3b:
7a:42:98:c9:03:ef:2c:c4:df:bf:9b:4c:82:29:c0:
68:6d:f9:c4:e7:46:db:95:c2:19:a6:72:d9:6a:b9:
08:65:22:e5:e3:40:8a:b6:06:03:a0:cc:51:07:9c:
92:eb:f0:95:e0:e9:d0:12:d5:7c:4f:5e:0a:4b:fb:
3c:a2:d1:e4:58:08:5e:5e:73:65:14:c3:fc:3c:a8:
d4:57:df:05:50:c0:22:a5:11:9b:22:c8:56:7a:aa:
11:4d:11:45:c8:21:c8:cb:5f:32:d6:02:eb:65:0f:
4f:a4:7c:07:70:e7:1a:a0:99:33:ab:44:08:36:c9:
99:8c:a6:02:cb:02:05:ce:41:09:bf:07:4e:0c:bd:
f2:49:74:8a:29:e7:d1:28:1f:ca:1b:ab:91:66:a9:
58:bd:7c:48:69:4b:51:71:c7:a5:19:20:43:81:14:
75:ca:3a:79:0a:98:e0:73:c8:ea:ab:68:6a:36:07:
b5:b4:f4:9a:16:db:8e:44:3d:ba:cd:e8:91:99:f4:
35:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E4:66:BE:C2:6C:67:13:E6:A0:C0:50:E4:17:48:F5:74:4E:FA:41
X509v3 Authority Key Identifier:
keyid:7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c0:bd:23:68:4e:4c:b5:5b:3b:17:17:1b:47:96:60:97:92:
93:d3:89:9e:72:a1:76:60:ff:52:d0:2a:d4:3f:20:3f:02:2e:
b7:e1:7f:8f:82:ae:a0:dd:29:7c:7a:db:af:df:b5:64:3d:8f:
0e:bf:d0:b2:84:af:2a:5a:f8:e8:17:7c:d7:af:fe:cd:65:3b:
2d:8a:f3:20:d7:b0:76:4e:c3:4f:0a:b7:a1:1d:83:69:58:91:
f4:e5:fb:d6:0b:b8:65:cd:8f:e2:72:2a:4b:8c:08:ef:e1:63:
b2:25:67:a4:0b:ec:b1:c0:09:3c:c1:b0:4a:5c:52:9e:47:4a:
46:3b:1c:fb:64:e9:ff:86:98:a1:be:47:0f:c2:11:28:e0:c2:
c6:dc:ff:c3:d9:72:66:8d:41:44:83:80:7d:fa:ec:26:f1:65:
ce:4a:1d:52:41:4c:12:6f:e5:41:9c:9b:4c:67:ee:5a:7c:4e:
e5:9b:a8:e0:2e:c6:bb:b6:b0:ee:71:a8:ef:b2:12:4c:c0:5b:
83:59:08:84:21:35:91:c0:67:2b:1a:e2:2b:80:f0:47:48:55:
30:8d:f0:22:41:40:db:67:03:2f:28:26:ab:1d:b7:a4:41:db:
81:25:69:fd:73:c4:6e:67:8b:e4:65:e0:64:4a:92:13:62:f9:
e0:79:56:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:31:58 2025 by rpki-client