Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
File: 1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft (raw, json)
Hash identifier: WbPyoLbsEervWKamxkbvZ0Qz03C9HgfFlRdA+y7Dbrg=
Subject key identifier: C9:40:9A:70:02:97:E0:CF:82:A6:0A:C0:85:44:12:38:13:D0:C0:C3
Authority key identifier: FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B
Certificate issuer: /CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b
Certificate serial: 0194BBCE00FC05939F410E6352EC2A957753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
Manifest number: 010A
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: 1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl (hash: 90GsC4ez/7C0eQz0w+Q8X9bQXOxakgYS5Qqcp9ZJ+6g=)
2: 4WhaxzqjOWgHeud8E6-UL9ZN_hY.roa (hash: TZDAudwyFjbRw0tzJmebPVsMRYwl0zqHqWQ1Gp1GXPU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:00:fc:05:93:9f:41:0e:63:52:ec:2a:95:77:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=c9409a700297e0cf82a60ac08544123813d0c0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:e3:b9:ef:2f:51:ff:74:60:f8:16:4e:b9:
3e:fc:e1:17:d7:77:04:dc:2c:c9:66:81:f0:45:49:
13:78:e4:77:a9:44:fc:49:2d:d0:d9:11:f8:d7:a3:
1c:af:28:1e:c3:05:42:ed:b5:11:d6:89:67:ed:65:
73:fe:c5:2d:5e:9b:6f:90:91:3d:d0:1f:00:c9:1b:
70:a7:0e:58:09:55:45:b9:9d:45:ed:67:a3:24:35:
60:82:1c:5d:ab:e4:80:bc:ed:18:cc:bc:60:48:35:
95:46:b5:f6:ea:cd:66:92:42:c7:bf:6e:13:7d:cc:
d5:e6:34:a0:87:c0:af:98:d0:f3:3e:6c:fd:54:eb:
44:a0:44:42:0f:4d:10:ab:88:71:87:7b:1e:d1:1e:
4b:60:fc:27:f7:e2:82:49:65:4c:f2:06:90:d8:51:
df:a8:94:72:41:ba:c7:53:4d:d7:cb:ae:74:da:ba:
1f:e2:ad:d1:51:9e:82:7e:4b:67:01:cf:36:80:97:
eb:71:4c:4b:52:40:36:e7:d6:07:f9:27:22:29:82:
49:70:c4:d6:41:c7:44:ec:0f:06:df:0f:a8:88:da:
98:c1:04:53:02:91:5d:81:4f:d4:2d:59:58:bd:55:
d8:61:81:5f:44:df:68:99:e2:1b:92:03:0d:85:25:
2e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:40:9A:70:02:97:E0:CF:82:A6:0A:C0:85:44:12:38:13:D0:C0:C3
X509v3 Authority Key Identifier:
keyid:FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6c:8f:f7:17:b0:4e:20:c0:cc:af:b0:5b:ee:c1:1b:47:28:
b9:c2:66:f5:28:ce:93:cf:15:d7:9a:12:37:6c:46:53:29:ce:
c0:49:a4:af:0a:d6:f0:87:b9:66:8d:e9:38:2d:22:7b:2b:2e:
22:1e:64:bc:9f:08:c7:41:6a:ae:2c:82:69:b3:95:2e:0c:98:
29:a9:da:cf:7a:74:f8:ef:41:05:c6:6f:95:0d:f9:a2:7c:bd:
47:f4:c0:23:7a:87:8a:bc:85:b7:71:b3:b6:16:54:d1:56:71:
55:33:3b:8f:18:ba:de:ea:91:29:d8:47:f1:f0:f4:66:9f:14:
bd:c0:a1:e1:69:08:fd:3e:7b:59:ca:eb:3d:8f:b9:ab:9b:35:
a4:e5:07:81:4a:fe:2c:d3:89:eb:52:30:be:92:b2:e9:19:9c:
cf:37:3a:9a:6a:b5:83:3d:f9:9d:22:8d:b2:ad:46:4c:a2:1e:
61:6c:95:76:4c:b8:e0:7a:b8:fc:e7:4f:a7:35:e6:ff:e8:31:
6d:9d:ad:ca:4a:c8:2b:b1:c8:68:3d:15:5b:1f:16:e3:28:55:
29:cf:1f:09:14:d4:98:c7:d4:cc:44:40:6c:aa:73:8a:94:1e:
48:9e:67:b7:75:db:a9:d9:32:d8:9c:c9:51:5f:09:29:51:a3:
5a:61:65:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:12 2025 by rpki-client