Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
File: 9q2iC9mLq990w9Vs14raZu2HoUg.mft (raw, json)
Hash identifier: 5hPGmYSR2I985M1S5WJhpYc07JwKcEbtlXH0F0jhjnQ=
Subject key identifier: 2C:DD:28:3F:8B:27:10:B5:1B:F1:09:78:77:96:DA:63:5B:32:3C:9B
Authority key identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
Certificate issuer: /CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Certificate serial: 0194BC3C51A69AC7FC58C0EBCD48569A6097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
Manifest number: 07F0
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: 9q2iC9mLq990w9Vs14raZu2HoUg.crl (hash: s57CV/zhwW4nKRudCAJDfwq46L3JhmGsRJBYZIFTZes=)
2: iIjePRipe22Xt3i-0k7Htqe5OiY.roa (hash: ZRSy/isYMR/Q32/3YEImTWCaf6Cp+8bokFU0sdfABNw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:51:a6:9a:c7:fc:58:c0:eb:cd:48:56:9a:60:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=2cdd283f8b2710b51bf109787796da635b323c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:6b:38:dc:1d:cf:19:65:33:ec:46:48:e2:
fd:7a:5e:a6:b7:c9:fd:7d:19:95:e3:a2:7f:50:ce:
75:3d:b0:62:ca:74:cb:cc:a2:78:cc:84:ee:e6:3a:
db:22:4c:6a:56:81:ba:d8:6e:dc:ad:53:7f:2a:bc:
e4:6e:fc:5b:c1:aa:69:80:dc:a0:8d:cd:2f:36:c7:
23:83:00:55:32:0f:e4:7d:c1:60:f7:b0:ff:1d:3a:
12:cf:55:10:b1:eb:d6:f5:6b:b9:da:25:e4:e5:58:
47:70:65:09:4a:a7:a8:f5:76:4e:88:f5:b6:49:30:
da:f9:e2:01:6d:d0:1c:56:7f:05:f2:7b:ef:0a:7a:
64:c7:d0:8e:a5:b9:7f:3e:2f:31:e3:06:2f:a6:6e:
85:c9:dd:0b:61:e3:cf:ec:c1:17:ad:17:31:3c:45:
4f:11:52:de:6b:65:14:3b:c3:73:97:2c:5e:6e:dd:
7e:9e:c1:8b:60:30:e3:7d:d8:29:66:46:76:ea:43:
fe:20:73:76:87:9a:72:3b:cc:b5:d8:98:e0:10:a6:
ea:f6:2a:9f:81:e1:b8:4b:f9:37:43:85:00:42:a6:
b0:0d:58:23:54:c8:34:aa:98:4b:67:03:57:90:2b:
b3:4d:f8:38:87:7e:67:a9:7b:c1:0f:d1:84:bd:a4:
7e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DD:28:3F:8B:27:10:B5:1B:F1:09:78:77:96:DA:63:5B:32:3C:9B
X509v3 Authority Key Identifier:
keyid:F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:fc:cc:54:36:47:61:88:b0:eb:1b:4a:ae:3a:b7:14:ab:34:
08:fc:4a:b3:13:41:ed:db:1f:df:1c:63:da:47:b0:91:29:2f:
6e:ea:bc:fd:55:e2:ea:bb:17:59:1b:48:a0:aa:f0:19:03:b1:
1d:69:bb:5d:e0:06:65:68:df:40:38:c6:55:e1:f0:2d:8d:6a:
d4:3f:6b:74:2a:58:1b:bd:34:d4:9d:28:eb:98:a5:2b:7b:5e:
fb:8f:e2:7d:1b:7c:ca:98:a5:21:ac:d0:ea:b1:c2:58:64:9f:
b0:e2:7f:01:4d:0a:ce:03:19:7b:73:d2:ea:17:3e:00:e6:9e:
ef:b9:81:22:46:a8:37:17:a1:07:17:02:3d:7b:4a:91:6f:06:
e6:3a:34:c4:6b:c3:5f:53:9c:8e:32:24:9b:62:f7:e1:53:e5:
05:5b:b2:c1:18:6b:08:1d:5b:a8:82:6d:6a:ea:10:be:4f:48:
13:10:14:08:af:35:30:4d:e4:da:2e:ec:ed:ce:c8:6f:3e:d0:
78:68:0f:14:66:f4:e3:b8:c2:bc:94:90:10:e8:8c:70:77:13:
d7:ec:41:0d:53:07:df:13:e3:64:59:03:68:03:52:ef:ee:5c:
64:4f:44:f1:d7:83:2f:3f:9f:ed:bd:cc:e9:8e:aa:bd:9a:64:
4f:93:47:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:10 2025 by rpki-client