Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
File: 1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft (raw, json)
Hash identifier: 3hCsB0Sde3OKlyxDounukrfwa95A8Prsi8lskz42KF0=
Subject key identifier: 6F:43:C0:23:20:DF:54:7E:20:4B:93:1A:6B:C1:BD:97:27:CC:6C:85
Authority key identifier: F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
Certificate issuer: /CN=f9629775283733a45c454b8d7be5a66df0db1a17
Certificate serial: 0194BD17E531463CCCF7A3B152DA43EDA572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
Manifest number: 0D38
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: 1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl (hash: GqLzqc6TPCvzEtxEgn1doiPXITBzxDhrQk8Eo/z4ZLk=)
2: NHhXoxxdMNakey6qmBeac9wJBd4.roa (hash: +reJ5PfpdsvDjpTAS5jPNWl9ybmFWN+FQOCbnBXMIy8=)
3: iobCcR3UyoYrtXm2S8hRWxvM3zg.roa (hash: 3usXJWbHzs8K4G1qHJnvLDQutknaGmUnq2D6gx78C1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e5:31:46:3c:cc:f7:a3:b1:52:da:43:ed:a5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9629775283733a45c454b8d7be5a66df0db1a17
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=6f43c02320df547e204b931a6bc1bd9727cc6c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:52:2b:f6:93:a1:91:62:df:65:95:d5:6f:
f3:b3:54:fe:1e:73:77:e1:9e:20:e7:d5:29:59:2e:
25:89:ab:2d:ec:6a:9e:54:4e:b3:6d:68:9c:9e:60:
09:f0:40:09:bf:b9:9e:91:d7:fd:2a:90:5e:81:0b:
94:f2:ef:ee:e7:e4:a2:19:f7:48:9f:52:53:eb:85:
d9:e6:24:83:49:34:ec:bd:60:54:c2:65:85:76:5a:
ff:53:8d:c5:2e:c1:ce:c9:c4:1c:9b:82:15:9e:48:
e4:38:fc:f8:41:89:00:27:a5:97:16:cd:9c:0e:8f:
24:44:09:79:64:fa:1c:c1:d3:7a:14:9f:c0:28:ee:
7e:4a:c5:b2:f6:f7:0c:c1:54:0e:28:80:a1:40:59:
b6:97:16:bc:db:01:3b:84:e1:52:12:e2:ed:98:c7:
02:7a:35:cb:c0:89:28:cc:c5:a7:7b:53:82:07:6f:
93:9f:f3:06:a7:94:db:ce:ec:73:73:1c:82:59:a8:
2f:cf:c2:d9:63:44:2d:69:ae:79:59:c3:3b:f0:0d:
32:47:06:17:12:7b:a6:39:b6:0f:a9:eb:d3:44:7c:
b2:99:58:92:55:ab:71:e0:ee:d3:7c:1f:9b:b0:34:
b6:38:8f:e1:2c:be:30:65:21:cb:5a:8f:83:b4:b0:
60:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:43:C0:23:20:DF:54:7E:20:4B:93:1A:6B:C1:BD:97:27:CC:6C:85
X509v3 Authority Key Identifier:
keyid:F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fa:29:8f:39:7a:b1:83:e9:57:ba:76:66:3f:a7:13:f5:c3:
21:a3:7a:a2:b3:74:ad:17:81:8e:66:a4:20:41:c6:21:fd:cf:
37:6f:d2:e1:76:e8:5a:0d:f3:05:9a:a2:82:33:ec:0a:24:04:
57:7e:88:fe:b8:74:8d:a7:d1:9d:33:9e:97:2d:09:cf:18:47:
87:27:7c:6a:8e:86:92:74:eb:15:bd:25:c9:ee:08:be:10:21:
34:81:b9:c8:54:c2:d9:63:40:2e:f5:44:09:ed:be:4e:eb:0c:
65:eb:67:f1:46:45:39:f7:bc:c7:97:77:17:12:2d:95:43:3c:
bc:d0:d7:f6:0e:7e:41:bc:dd:82:b7:ad:f4:58:b2:be:fb:13:
9a:7e:fa:09:69:9b:45:9d:dc:8d:41:31:89:2f:af:8b:e2:0f:
f9:2c:12:94:73:be:ec:08:fb:9c:74:44:c2:d5:2d:21:5c:c4:
bd:af:cc:9f:a6:1a:ff:cb:8e:72:94:23:03:cb:fd:ab:9d:a2:
a0:06:a6:1b:8d:b6:ba:f3:b3:b3:18:86:f1:d6:4a:65:c3:2c:
3f:10:93:d7:0a:0c:ec:05:49:97:cf:56:10:ce:6f:99:74:72:
da:7d:d6:4d:79:ac:db:28:1e:fc:ae:33:b9:af:41:28:22:40:
f9:b6:b1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:23 2025 by rpki-client