Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
File: E9g7Il3TOGDFHcRKqI218D3BWnQ.mft (raw, json)
Hash identifier: sCfmItXOAUotCosE8PlAIFMJGUHVN71J/tIYKNTxJyw=
Subject key identifier: 88:BF:2A:D9:17:D9:42:F4:D7:37:F8:C9:2B:E9:C0:BA:22:F2:82:3B
Authority key identifier: 13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
Certificate issuer: /CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Certificate serial: 0194BBCDD56B59FE29EE4FA75689CD39E92E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: E9g7Il3TOGDFHcRKqI218D3BWnQ.crl (hash: SjOshZZ5aWfFb4n2BSfMZaLjHinotGwFIgl5pMa2I/c=)
2: _0nt3lr3_kKXDFb2QdlruJJiTpw.roa (hash: fDzyXmX4R4re/mBPEEi78m7z8nswvGcrgLOZa1uhGgk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d5:6b:59:fe:29:ee:4f:a7:56:89:cd:39:e9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=88bf2ad917d942f4d737f8c92be9c0ba22f2823b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:f7:3a:5f:38:4b:ce:2d:91:3a:42:99:8a:
97:25:7b:c9:08:7c:95:85:24:45:9b:be:41:28:50:
23:42:b5:34:b4:90:44:8b:87:26:1b:5f:c0:0e:09:
32:d1:15:b0:db:ae:ba:d9:5a:74:6d:4c:9d:72:a1:
54:b2:ee:81:c4:c5:b7:1f:0c:84:fb:79:3f:f9:5e:
e8:87:32:51:84:73:62:b0:11:6d:a4:5a:af:08:63:
d7:85:a4:0f:80:79:bb:b8:44:ac:d8:9c:38:b0:d4:
a6:68:05:ae:3f:e6:25:20:c9:f7:45:31:d5:a4:40:
da:c3:10:98:02:75:58:2c:68:ec:e4:d9:46:61:a5:
5c:38:85:80:59:be:a9:b9:0f:5b:bc:28:24:1d:d3:
55:fe:6c:6b:d1:a7:86:11:60:60:37:72:09:29:0d:
51:2d:cb:9b:6d:5d:e1:fe:1b:19:8b:79:f9:b7:ac:
27:c4:7e:74:b5:47:06:fe:37:d7:f2:e5:9c:84:7d:
58:58:44:50:58:08:4c:5c:cd:64:1c:4f:68:4d:5b:
3a:13:6c:28:42:91:0d:59:7f:24:14:db:8c:23:0f:
49:c9:a2:f2:f1:39:fa:63:2e:71:9c:d6:9e:9b:45:
ee:2c:db:47:81:49:d6:c8:53:c4:98:97:fe:cd:cb:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BF:2A:D9:17:D9:42:F4:D7:37:F8:C9:2B:E9:C0:BA:22:F2:82:3B
X509v3 Authority Key Identifier:
keyid:13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a5:ab:f6:1c:13:7d:7c:a2:db:5c:70:6d:cc:52:ec:6e:72:
0e:76:84:a1:d6:5e:3b:31:04:0e:aa:e5:19:22:52:83:1a:29:
6e:15:3d:3a:fc:a3:52:1b:9c:1c:2f:13:e4:70:3a:6c:90:f0:
86:d7:0f:fb:f0:3b:c6:15:de:04:d4:ee:9b:b9:bb:57:fe:f3:
8e:08:26:88:6e:c3:5d:d2:b9:08:86:3e:20:a1:80:8f:c4:37:
ec:d5:20:7a:5d:24:53:16:d0:83:7c:d8:ca:27:fa:82:41:f0:
db:4f:7b:ea:08:6a:d6:82:e3:09:c4:96:43:c0:33:3f:fb:7e:
04:38:1f:c9:4f:82:74:71:43:53:14:01:44:81:2e:ae:9f:85:
24:66:5d:db:d2:28:68:ba:9d:a7:cc:bd:d3:5c:24:82:a7:9a:
3d:57:c1:55:97:80:8c:0a:40:75:47:37:1d:12:ed:98:97:31:
d7:01:b5:92:72:db:ad:cc:17:e5:72:cd:f9:9b:1e:30:5d:e9:
42:e1:8a:53:ca:c9:e1:d3:4b:54:7b:37:86:78:51:61:7f:37:
24:c4:cb:4e:38:4e:cb:8c:ee:c0:c4:8e:86:95:94:d3:0f:8b:
3c:f3:21:0a:2a:83:51:7a:49:db:cc:f9:62:9c:b8:b0:a6:22:
f1:44:30:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:26 2025 by rpki-client