Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/1T9rmtMLZVX6WlTn6xUrK_QS8iY.mft
File: 1T9rmtMLZVX6WlTn6xUrK_QS8iY.mft (raw, json)
Hash identifier: uNEE5LooFRLCb6/+iAQJewU6Lf3OwwAdQg5+wjKKGHE=
Subject key identifier: 09:F1:84:88:2C:E5:85:3F:5D:E3:F9:AC:1D:FD:9F:F3:92:1B:7E:3A
Authority key identifier: D5:3F:6B:9A:D3:0B:65:55:FA:5A:54:E7:EB:15:2B:2B:F4:12:F2:26
Certificate issuer: /CN=d53f6b9ad30b6555fa5a54e7eb152b2bf412f226
Certificate serial: 0194BC3C0F5910E232E6D2DF9841D39A237D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T9rmtMLZVX6WlTn6xUrK_QS8iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/1T9rmtMLZVX6WlTn6xUrK_QS8iY.mft
Manifest number: 0351
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: 1T9rmtMLZVX6WlTn6xUrK_QS8iY.crl (hash: 2gUP7oLtPPm+EcyvteO6gQ+Q5I/sOVCDkHGQAbhress=)
2: ygeNrsucj-rGn8JTBcNIhnNtCcU.roa (hash: KBkElyIB1u/4stezxnXDGq1lV/mlLUiRmV5TkOx/9qs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0f:59:10:e2:32:e6:d2:df:98:41:d3:9a:23:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53f6b9ad30b6555fa5a54e7eb152b2bf412f226
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=09f184882ce5853f5de3f9ac1dfd9ff3921b7e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:2d:8d:2c:2e:38:08:10:48:54:8d:ea:25:
2c:04:f3:4e:37:d8:c7:ce:3a:75:5a:f6:61:02:0d:
0c:3e:e0:f6:b2:62:84:85:21:36:51:99:95:12:e1:
8e:03:fb:98:78:28:d5:bf:03:29:08:d5:1c:a2:7c:
64:71:62:d5:76:e5:0b:2c:7f:3c:65:8d:9a:8b:23:
b5:8f:5e:89:c7:51:38:0d:49:e3:c0:4d:fd:56:f2:
20:0c:fc:30:92:06:86:df:ea:a9:9d:69:57:c0:a0:
92:c1:b3:17:01:8d:12:f1:b5:60:32:b3:fd:96:52:
17:6d:68:9f:13:b8:9f:bd:60:a4:5b:67:04:6a:8e:
e8:16:f8:5a:40:a5:c3:56:f3:da:6f:78:28:23:0d:
59:8e:bd:0f:35:95:41:60:f5:83:0e:95:6c:2f:94:
02:64:8f:dc:e1:8f:0e:83:1e:74:ba:05:92:b0:a4:
78:32:92:09:ef:a1:c6:1d:c5:12:63:34:92:4d:dd:
4a:ab:2f:81:97:99:6b:16:ec:6f:b9:8f:63:c2:08:
d2:23:57:da:67:7d:42:25:51:66:dd:f9:2d:56:96:
52:3a:65:b3:f3:84:fa:8f:b7:67:f1:b7:6c:e4:94:
84:f6:29:82:9a:00:2c:b6:17:8f:64:7d:59:0d:bc:
e8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F1:84:88:2C:E5:85:3F:5D:E3:F9:AC:1D:FD:9F:F3:92:1B:7E:3A
X509v3 Authority Key Identifier:
keyid:D5:3F:6B:9A:D3:0B:65:55:FA:5A:54:E7:EB:15:2B:2B:F4:12:F2:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T9rmtMLZVX6WlTn6xUrK_QS8iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/1T9rmtMLZVX6WlTn6xUrK_QS8iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/1T9rmtMLZVX6WlTn6xUrK_QS8iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:cf:cf:22:97:a0:af:70:4b:55:67:30:a9:8a:f9:43:77:6e:
81:b4:52:e6:3c:38:cd:89:3b:fc:39:06:36:f0:63:c3:e8:ab:
48:f2:25:b4:b6:a7:94:4d:b6:63:28:ca:bf:e3:b5:bd:94:fa:
48:63:40:e1:20:25:cd:c1:c3:e0:b7:8e:4e:eb:07:02:2b:0a:
9a:3b:aa:fb:a1:ef:29:a3:23:6d:7b:35:0b:c8:d4:14:1f:b1:
14:e6:fe:ed:c2:65:14:e5:0c:d7:f5:18:ee:ed:f9:57:7e:73:
32:7e:97:3a:54:3c:d1:75:2c:7e:e4:b2:f9:0e:ab:da:17:76:
30:d7:c5:96:8b:87:92:de:46:e1:4b:33:e2:37:d1:9e:4b:0e:
81:76:cc:c3:8c:98:10:40:4f:01:0f:c8:ee:85:4c:c4:13:d9:
d8:ce:ab:c5:a1:f7:c7:a2:3b:08:33:be:7c:26:79:01:3c:de:
08:7b:b6:99:2b:fd:e7:ab:5d:44:a9:09:a2:0e:ff:16:36:7b:
66:b9:1b:0b:fd:47:62:e9:d8:a2:e7:c2:e7:47:44:4d:c9:39:
78:a5:d5:96:a5:ce:e8:11:99:26:a6:d3:f6:f5:0d:05:dc:24:
48:22:92:c7:6d:1b:f2:53:a3:3b:f7:af:8c:88:2e:39:e4:cc:
ee:85:7c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:56:00 2025 by rpki-client