Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
File: 91sCopx2blsTs-sXapccEt3h1M4.mft (raw, json)
Hash identifier: UZ5rScx4QauROuMln8gFUCD6ONU09FR39cjsSTLo2aU=
Subject key identifier: 22:B9:EC:CB:34:D7:7E:50:98:34:6F:92:4B:BA:4C:25:CD:AE:F6:77
Authority key identifier: F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE
Certificate issuer: /CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce
Certificate serial: 0194BCE08716CC2D3BE88D8A578412989F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
Manifest number: 0FB1
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: 91sCopx2blsTs-sXapccEt3h1M4.crl (hash: tSpuvQd6vIJqRg7mrfVnn7liImg2Wbjmj/o59qC56/E=)
2: IKYkPycoZ16me6Kb0OaEhELdyLo.roa (hash: Um/+K1DsE/fHN8bVJfVKmH+mN7B9+NKyvrFzBu4jUT0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:87:16:cc:2d:3b:e8:8d:8a:57:84:12:98:9f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=22b9eccb34d77e5098346f924bba4c25cdaef677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:69:d0:6c:18:6c:e0:83:2d:5d:55:c8:58:e6:
7d:22:41:64:f0:b7:a1:a5:a0:67:0f:39:24:7d:eb:
d9:ac:63:94:6d:14:d3:ed:97:d8:46:1c:d8:8a:8b:
0d:d4:88:d1:c8:10:b6:32:db:94:72:38:2e:e0:74:
11:85:5f:c8:06:0d:f8:a8:e7:a5:2a:1b:f6:8a:7e:
ad:af:92:b3:ab:91:4a:f5:6a:d0:80:e7:e9:03:1f:
f5:fd:65:43:23:57:50:fe:e8:e3:c9:94:ba:aa:3c:
b3:b8:06:bc:17:bf:08:b1:dd:10:90:40:ea:02:b0:
6c:c0:4a:78:67:bc:33:43:36:8f:8b:9b:0c:b9:44:
f6:a7:6e:85:ad:aa:58:c1:67:d0:47:d2:13:57:73:
0c:cc:f4:37:6e:6d:38:b9:cd:98:1c:e9:09:14:16:
a7:ae:81:7c:7c:b0:4f:aa:14:76:d3:af:92:6a:38:
fc:40:01:9a:51:97:1e:35:2a:8a:2c:19:ca:14:9d:
37:97:d3:2d:bd:75:9f:2e:8a:82:95:5d:2e:0e:c5:
d1:19:a5:87:89:63:07:f0:1d:f4:27:2e:48:7b:0a:
45:60:da:ae:5f:02:90:fc:49:e6:53:f7:e5:ba:fa:
bc:8f:ac:ab:96:3e:4d:55:58:87:48:cc:66:9e:40:
bd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B9:EC:CB:34:D7:7E:50:98:34:6F:92:4B:BA:4C:25:CD:AE:F6:77
X509v3 Authority Key Identifier:
keyid:F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a8:ca:43:94:f9:64:87:44:0c:0f:d7:af:ca:b0:b2:9d:93:
a9:19:34:11:f9:d9:8f:bb:48:df:7e:b9:83:24:39:19:3d:c6:
de:cb:67:e0:6e:fd:d0:7c:98:40:f5:5f:b2:53:1b:28:f3:1f:
68:42:1c:5f:bf:0b:f7:05:3d:6c:52:18:d8:fc:46:93:ca:67:
ab:0d:9a:99:41:be:db:f3:99:0b:aa:ac:aa:e7:be:f9:5f:4a:
05:f0:d5:d4:0f:08:e7:01:69:03:48:c7:79:d6:b0:dc:3c:8b:
35:3b:1c:da:e6:d5:30:91:91:44:c6:e7:08:28:dd:ae:75:f3:
87:44:c6:f4:c9:60:31:34:fd:5e:16:99:17:b4:b9:7a:32:82:
3f:68:4e:84:39:2e:d8:70:07:3a:df:49:11:79:b5:01:30:b8:
f5:26:71:39:af:e9:98:04:42:62:f4:34:60:a3:6f:b9:5b:ce:
01:8d:1c:1d:f2:e9:df:d5:02:db:d8:ed:d5:03:a4:55:02:88:
c6:18:b3:a1:4d:3a:07:fc:d3:98:98:d2:06:8e:e5:b1:7f:32:
e6:19:e2:72:67:e2:60:94:d3:40:da:67:f6:25:6c:4d:5f:4c:
79:58:74:00:24:f8:86:84:e2:5e:c6:db:12:ff:7c:62:59:95:
37:3c:0e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:54:48 2025 by rpki-client