Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
File: 9-5cHIBMM_3jPZsIuRn3PTHQttk.mft (raw, json)
Hash identifier: VaqICloyx0jmq/7Hx+LiATptkoDZZcprTii+/KaVpts=
Subject key identifier: 62:65:E3:42:97:AC:5B:DA:C1:91:A1:D4:F1:EF:5F:E7:53:DF:40:91
Authority key identifier: F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9
Certificate issuer: /CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
Certificate serial: 0194BCA96FCBC31791FA5C458E90D3535862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
Manifest number: 08A1
Signing time: Fri 31 Jan 2025 14:00:08 +0000
Manifest this update: Fri 31 Jan 2025 14:00:08 +0000
Manifest next update: Sat 01 Feb 2025 14:00:08 +0000
Files and hashes: 1: 9-5cHIBMM_3jPZsIuRn3PTHQttk.crl (hash: Y6MWMwDwDH8zLr2nDlqM/lXX7n6kL/OXOD2UoZ+YPhM=)
2: VIIA5VZpizTIGxWzHyr_ZNDV3cA.roa (hash: cehPDwufBxU4/kiVLRiGeuXvq0MlYpc57MWfPb+PZlg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6f:cb:c3:17:91:fa:5c:45:8e:90:d3:53:58:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
Validity
Not Before: Jan 31 14:00:08 2025 GMT
Not After : Feb 1 14:00:08 2025 GMT
Subject: CN=6265e34297ac5bdac191a1d4f1ef5fe753df4091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:f3:65:5d:36:c3:15:61:f3:40:44:63:b7:
7e:6e:d7:58:46:50:32:ab:5d:f0:2d:7b:b9:90:d1:
2b:bf:23:e9:e9:c5:58:0a:cd:ea:21:5a:20:66:9c:
53:98:da:1a:4f:c5:60:22:a7:5a:58:fa:d1:56:2b:
5a:d9:c7:c1:46:6e:f9:bd:9d:96:66:af:c9:c3:09:
3f:05:db:50:62:33:12:d5:03:8b:c4:0d:18:4e:99:
87:f5:d5:01:6c:99:94:90:fc:46:2e:cc:fc:d6:00:
29:1a:65:0e:a1:6e:cd:dd:3c:e8:d5:56:f7:04:4f:
de:ed:d4:15:c0:84:c7:2a:27:01:8e:04:cb:39:e5:
9f:8b:03:a1:49:d1:8e:ad:6a:38:c1:ea:38:4f:60:
15:d9:96:92:f6:89:f8:07:b2:b1:0b:81:d3:16:da:
8e:89:af:d6:2f:4c:1b:24:95:03:54:b8:83:83:79:
fc:81:3d:88:21:34:5c:74:59:3a:74:ae:3b:ac:d3:
72:1e:6a:63:2c:ee:8c:eb:17:20:f2:60:ab:6a:03:
a3:67:a9:71:a2:18:56:29:f5:d9:50:2a:9a:74:d8:
ca:b7:b5:a5:c8:98:bb:31:ae:07:56:d5:c7:2f:5f:
e4:ca:1f:63:2b:2d:4e:74:5d:c5:b8:a9:55:dd:e4:
f8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:65:E3:42:97:AC:5B:DA:C1:91:A1:D4:F1:EF:5F:E7:53:DF:40:91
X509v3 Authority Key Identifier:
keyid:F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:46:d6:6d:98:96:03:d5:ff:61:8b:43:ca:d3:85:31:c8:1f:
69:82:57:94:77:55:80:c6:47:b6:27:e0:d6:a2:41:e1:21:06:
3b:f4:4d:6e:ef:b6:20:ff:e6:f6:7b:e4:6e:1a:f3:c2:c3:d2:
7d:f1:d1:a5:fe:da:ae:a6:4a:59:c9:b3:90:a9:98:21:8d:09:
4b:af:a2:79:ad:35:c3:76:70:94:6a:d0:1b:1d:df:2f:74:4d:
f9:e4:86:e9:66:b4:5b:15:43:58:93:f0:fb:6d:1f:29:5e:05:
23:a6:7b:d0:aa:da:79:dc:bf:40:a1:74:96:56:9a:6c:61:37:
25:fe:3a:87:d6:d7:6a:84:49:46:66:8b:eb:60:96:0f:81:f2:
b3:57:2d:f5:47:15:53:53:f4:19:48:c5:d1:08:ff:13:3a:ae:
f6:53:ec:43:ff:80:b3:68:41:8b:e5:eb:7f:e6:76:7b:ce:e0:
5f:a9:1d:3b:a8:f7:6f:28:7e:e7:f3:a7:70:ab:01:8a:aa:e7:
9d:23:52:9a:21:bb:3e:8a:a5:de:72:58:95:7e:88:62:71:1b:
09:d5:d0:77:a7:30:2c:b4:6b:84:e9:28:48:8b:eb:69:8b:78:
5e:72:f1:aa:fe:d3:7a:f9:50:6c:6f:6d:23:d3:2b:88:28:e0:
cf:ee:09:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:21 2025 by rpki-client