Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier: yf2dgX3wxcXlWEm3wsPvCeD6bAZYokFFEKnFwjUcOyo=
Subject key identifier: 82:90:D7:B8:26:88:B4:07:7B:D6:01:84:60:0C:65:50:D5:BA:67:31
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 0194BD855FE832A2189FB5EC24340B59CF34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number: 0513
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: nqP2z3xf1EMDSvt9ykYX84npdFMAXByjaZwxvfIj8Ow=)
2: aXlhDDc0DWfVl7Q_xgzOBRiNhts.roa (hash: jwpQriAejSgg8fZe+dMdWBplCQ12L/z5CRcEVMLQdas=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5f:e8:32:a2:18:9f:b5:ec:24:34:0b:59:cf:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=8290d7b82688b4077bd60184600c6550d5ba6731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:21:43:c5:47:7e:c9:46:0f:95:cd:ea:f9:
f1:42:2a:2c:ce:1a:8b:b5:c4:82:1f:8c:e6:c4:e7:
c9:ba:8b:5c:f7:d1:e5:ce:63:17:5d:0f:48:31:79:
aa:a4:17:fc:65:10:1f:79:37:fb:e3:0e:c9:ba:f5:
ca:a3:b2:1c:57:3b:0c:e3:5c:49:0a:ff:6f:0e:9e:
9d:27:d9:3b:22:d0:d1:5f:b2:7e:a1:f9:05:99:7f:
fd:98:23:68:53:38:29:a1:ef:18:e7:8d:b9:d9:8a:
6b:1a:9d:18:fd:24:d0:7e:8b:c2:92:7a:0d:4b:a1:
1f:58:3f:32:d1:66:8e:5a:4d:da:7f:fc:2e:0f:a0:
a7:db:4d:e4:ea:25:0f:81:91:70:a4:df:54:24:49:
89:ac:10:86:3c:a9:74:c2:ce:61:9b:19:fc:cd:32:
56:44:35:c5:6f:af:f5:73:f8:2b:28:0e:8b:94:22:
dc:a2:a9:14:5b:9a:03:ce:17:2c:c7:fa:be:c0:be:
61:a9:af:bc:e7:b0:82:67:ca:e4:0c:e8:17:7e:11:
d7:93:78:20:9e:03:53:f3:a4:4a:cc:5b:e9:b0:0f:
2c:9c:83:cd:9c:46:75:cb:7e:6a:55:89:cf:92:f0:
1f:48:5c:7b:9e:66:8a:d2:42:db:a1:9f:d6:55:45:
91:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:90:D7:B8:26:88:B4:07:7B:D6:01:84:60:0C:65:50:D5:BA:67:31
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f9:95:86:11:71:6f:7d:88:3b:c2:9e:cc:3a:52:64:d0:97:
43:d2:14:1c:be:e0:31:27:fa:65:e8:71:19:6e:3a:86:69:37:
f9:4f:75:fe:e1:6b:08:eb:12:b1:65:db:32:7a:60:0e:98:2b:
56:d0:12:8c:24:54:ee:67:fd:ea:71:38:4f:03:22:37:55:dd:
5a:86:3a:8a:58:c5:95:7c:42:0a:d5:96:52:67:a2:02:7a:83:
38:59:09:85:eb:ad:2b:19:26:02:ca:50:af:62:62:2b:63:ac:
66:cb:87:2b:5b:cc:ef:5c:ba:7f:1a:7b:d2:10:f9:8c:a1:67:
fa:4a:3d:d4:b4:70:91:d7:b4:15:91:b8:0b:8d:1c:bd:52:0f:
12:53:b9:96:e2:88:65:fc:ef:51:5a:38:fc:00:5e:7a:10:c0:
1f:29:f5:1a:39:5d:77:75:9d:f4:2c:6a:2c:7d:66:88:e8:90:
bb:32:1e:5f:d5:12:b0:e8:9b:f0:02:6b:78:a9:43:f0:7b:35:
cc:dd:df:7d:83:e9:ad:db:dd:20:c3:e6:30:35:42:6d:60:f9:
b7:9f:2f:44:03:15:e3:28:67:7c:37:ae:5d:b5:71:75:6a:65:
48:41:da:ef:7a:47:18:39:a9:67:62:2e:ad:79:56:c4:cc:b4:
d7:8f:9b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:04 2025 by rpki-client