Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
File: 1-c0pgMHHi89rubgKB5IFiwvK7Us.mft (raw, json)
Hash identifier: mWREOH2tUXgAIbt650M2fkSluybS+byh+UKn8oWje5g=
Subject key identifier: DF:D9:17:C0:D4:86:4F:8D:34:A6:E5:A3:63:41:4B:99:3D:61:39:9F
Authority key identifier: F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B
Certificate issuer: /CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
Certificate serial: 0194BD4E9A410B6E26A45F4521BC872FDE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
Manifest number: 13E9
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: 1-c0pgMHHi89rubgKB5IFiwvK7Us.crl (hash: Nj5i7i/HAjps8EmcEvzg4jtmCZpCUv1vXMpELzT41IM=)
2: DBBkmAjtiZvJk178YbVOfqGzI3Y.roa (hash: 8eJVP5XAdO67of9omWg+boW49giOURgUcnG9ZjC9lgo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9a:41:0b:6e:26:a4:5f:45:21:bc:87:2f:de:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=dfd917c0d4864f8d34a6e5a363414b993d61399f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8d:ac:3f:12:19:d8:f8:05:0b:60:50:6b:d2:
52:1a:46:81:83:1b:00:96:19:0f:d7:6a:64:55:20:
ea:38:89:2d:68:2b:55:63:f8:57:8f:95:6e:e8:56:
e6:8d:c3:86:e9:a1:9b:d4:7b:c6:98:94:3a:24:9d:
d4:cd:6b:bd:47:dc:26:d7:b3:05:7a:b4:11:f9:10:
ab:a4:68:d7:88:cb:b2:b9:46:ee:3e:9c:aa:1f:4f:
e0:0f:54:25:a8:8e:9a:9e:f1:d9:6f:89:6c:51:e9:
03:5a:de:e8:d1:a0:c2:1f:66:f7:e3:54:07:24:16:
ec:ed:4d:b0:36:22:d8:d3:75:6f:61:99:ee:10:21:
58:56:dc:15:45:36:cc:eb:64:c9:1b:28:4f:e0:ad:
56:35:5a:c0:4c:ad:14:28:8f:4e:ea:40:2b:ce:2f:
2d:7f:f8:4a:dd:fe:cb:f4:85:93:84:fb:89:d8:fa:
4a:1a:4e:d3:33:69:63:52:0b:48:cc:db:77:85:09:
31:04:72:ea:01:8f:a6:2d:45:0b:30:7b:13:ec:d1:
a8:88:e7:7a:15:50:d3:95:d1:10:bd:0e:e8:5a:d7:
52:80:f8:6a:a2:2f:66:02:3c:2d:90:9a:91:de:bb:
95:97:0d:37:01:91:85:1b:eb:81:94:80:a2:6d:93:
59:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D9:17:C0:D4:86:4F:8D:34:A6:E5:A3:63:41:4B:99:3D:61:39:9F
X509v3 Authority Key Identifier:
keyid:F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d5:94:cf:f7:20:89:3e:ae:98:a0:e2:54:00:d6:3d:7d:21:
0f:52:00:a2:eb:63:57:2f:7e:c2:22:ce:22:79:99:b4:66:8c:
59:93:67:85:0a:c8:0d:4e:ed:13:e4:72:17:d1:51:d5:42:2c:
99:f6:1c:85:ca:59:a4:a5:e7:05:89:d9:7d:41:2f:75:53:d2:
0f:1c:d7:bb:16:6b:18:2e:2a:46:10:28:7e:1f:b6:4c:77:98:
c6:c5:de:82:4c:43:69:82:96:0f:3e:a8:cc:6f:de:60:33:da:
bf:28:8c:64:e1:9c:a7:62:74:a4:f5:d5:ac:83:be:f4:48:12:
d8:cb:4a:7f:ae:83:e0:9a:6b:79:0c:53:54:50:2e:74:64:91:
fe:b1:ca:dc:2e:c4:e3:0e:14:83:65:54:a6:2a:d8:cd:3a:76:
8a:4f:16:d8:4e:0d:6b:72:ae:cc:5f:1e:aa:c1:d2:ae:47:fa:
1a:dd:3c:ae:a0:8a:d6:1f:7c:18:af:0e:b0:91:31:19:ab:84:
c1:65:27:65:b8:1d:8c:93:a6:54:c3:d5:44:ee:b7:20:ec:ee:
6b:16:bc:bb:14:b3:d5:c9:81:68:4b:b5:3a:6c:98:ab:19:b7:
af:0f:4e:4c:78:66:80:74:c4:34:9d:45:40:fc:b8:60:ee:3f:
1e:ec:e8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:15 2025 by rpki-client