Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
File: M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft (raw, json)
Hash identifier: eT2rKdZtbxRKOEavcUTlHMJvkShVHsioPVOmW7YyQg4=
Subject key identifier: 0F:3F:11:0C:E4:21:0E:88:B3:B2:FE:BA:BF:E5:7E:A3:DC:4D:E1:28
Authority key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
Certificate issuer: /CN=33d2d885477d0280264e458eb071f45d91691520
Certificate serial: 0194BC04A225452A8F676C4DAA29E4E60C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
Manifest number: 1390
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl (hash: T2at1LUVCGysUhajVpUKGhXhR8aC3es9XgyQkzj+iuw=)
2: sK3XQwXTL-mqzvI7V9STOh1mdbY.roa (hash: VWu2Ff9vBiTjacxsepFTzMs84GfrYTJ/rH9rluBzGtU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a2:25:45:2a:8f:67:6c:4d:aa:29:e4:e6:0c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d2d885477d0280264e458eb071f45d91691520
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=0f3f110ce4210e88b3b2febabfe57ea3dc4de128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e9:6f:4d:38:89:90:39:c9:07:4f:72:1a:81:
6e:79:a5:4f:0c:68:3c:fd:d9:25:d1:f2:54:d5:1d:
e9:51:a6:cc:58:75:3c:3f:59:e2:f2:36:cf:c6:ad:
7c:d9:3a:36:be:1f:8d:08:7d:ef:78:fe:d4:05:d7:
0d:f6:bd:d5:a7:a1:f5:f7:1e:28:f9:f3:64:10:10:
73:5c:3b:c8:48:ee:e9:6b:97:b2:51:ca:c0:16:c4:
77:f6:ce:fb:66:3b:7d:ee:d0:7a:6f:76:b2:0f:ac:
05:39:ad:78:53:7b:d6:2f:23:a8:cb:11:51:a4:8a:
35:0b:d8:e0:c7:c7:d4:4e:cf:6e:09:56:44:0e:c4:
ff:f7:ce:32:65:05:c4:a7:99:2c:7d:ec:17:2f:8a:
c7:0e:21:d7:a3:bc:02:02:ae:dc:3f:94:11:de:6c:
8c:e4:99:13:bf:83:1f:28:47:78:c1:b2:da:72:e7:
d3:6c:6a:e4:0d:29:ab:3b:5e:37:27:a8:ac:a5:fe:
10:31:85:dd:71:04:d7:db:7e:3e:2f:bd:89:b4:46:
65:3f:18:3c:84:4c:a0:4d:63:a9:4f:6b:03:e1:4f:
a7:bf:18:b6:f3:05:15:f5:88:67:09:35:20:a2:96:
0c:10:25:07:2e:4c:f5:b3:52:07:78:78:67:65:9b:
6e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3F:11:0C:E4:21:0E:88:B3:B2:FE:BA:BF:E5:7E:A3:DC:4D:E1:28
X509v3 Authority Key Identifier:
keyid:33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f1:d0:23:e3:62:24:e4:0c:a3:9a:15:e7:66:60:a4:b8:22:
cf:aa:be:30:35:46:ae:03:93:78:ec:0b:75:b9:0b:bd:6a:e7:
53:db:d1:8c:75:35:1e:8e:8e:83:76:c6:18:8b:f8:fc:c3:73:
a8:98:14:e6:06:64:2d:30:20:0a:c4:16:7c:c2:a9:68:b2:0a:
6b:2f:3b:ee:89:24:5c:fa:99:45:12:fd:0b:c9:53:fa:f7:f7:
47:d2:c7:c9:a2:a5:86:1a:c3:cb:4a:77:1a:c3:33:66:c8:cc:
79:9a:19:2b:66:52:8e:5f:d3:7f:da:20:84:f5:86:8e:cd:41:
0b:1f:04:fa:df:25:fb:fa:dc:4c:fa:10:ee:ea:7e:46:da:dd:
d5:96:35:38:fb:18:16:2c:8a:94:13:c0:30:66:5f:2f:86:28:
de:ee:0b:da:39:02:e1:4b:b7:df:31:1d:7a:72:29:53:2f:1d:
ed:58:ad:f0:45:b4:8b:b3:27:1f:95:e3:e2:95:be:d2:f7:18:
15:4b:93:cf:e5:9e:13:ea:57:1e:e9:7c:c2:cc:24:14:b2:5c:
6d:6a:cd:31:97:ab:f2:65:de:87:20:d1:30:6f:35:f6:e2:53:
9d:08:60:f4:64:37:1d:0c:dd:ee:a1:a9:88:7e:17:08:91:e0:
5e:70:c8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:16 2025 by rpki-client