Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
File: r9rCQfMBCxrkhLwx9YStD50gZzQ.mft (raw, json)
Hash identifier: 87ryiDcz5mNbwUu4eW2zH9HLE1Jc8rU7zBs03EmzPeQ=
Subject key identifier: 1A:78:5D:B1:5E:5A:EF:F3:34:CB:F4:59:E4:82:F7:77:63:C3:37:8E
Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
Certificate issuer: /CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Certificate serial: 0194BD4E67B939ED05465AF2EE8A7B30E43A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
Manifest number: 09F1
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: Pyp3KZhgaPnGJ0klVfWstvZhAaA.roa (hash: 2zE2fETyOiknIdhnDsU5+xLMFz/vO5FngmYcWoMLhMg=)
2: r9rCQfMBCxrkhLwx9YStD50gZzQ.crl (hash: 0H/dlKVn2dyMxq73lONB2c3M/FUGXf38qE18kVw1dfA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:67:b9:39:ed:05:46:5a:f2:ee:8a:7b:30:e4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=1a785db15e5aeff334cbf459e482f77763c3378e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:51:e3:90:88:22:8b:50:f5:16:33:ea:31:
84:a3:43:27:95:4f:d2:7f:0f:ee:1a:3d:c1:42:b9:
da:31:b7:51:e0:71:b4:f1:95:76:ec:90:a1:1d:5b:
26:d3:ea:b9:a8:85:09:b9:3d:f4:3d:8d:5c:65:19:
ec:46:6a:18:33:44:f9:8d:89:19:c4:60:f9:74:ab:
2b:7a:a5:4a:1f:45:8e:73:4d:a7:77:5d:e7:ab:12:
0e:f0:7f:8f:a6:ba:6f:5d:46:a0:af:26:d2:cc:6c:
f5:e7:e3:f8:ee:a4:53:09:f3:02:69:41:80:59:d5:
8c:a0:01:63:44:86:47:d5:4a:9b:28:86:8d:c4:72:
88:1d:80:b4:ff:b4:03:5d:45:7a:2a:87:98:a1:c3:
b2:9b:66:f8:ed:1f:46:9b:a5:78:9a:81:38:67:0d:
3f:67:de:b5:cc:ba:38:9d:12:38:81:05:a8:30:cd:
90:21:84:7a:f1:1b:4d:9c:0f:bf:91:8a:96:23:f8:
e3:e9:db:9d:44:5f:0b:c1:3a:ce:cf:f8:ae:20:9e:
98:5f:7f:c5:fb:b2:f8:1e:73:07:42:9f:67:71:1d:
ab:78:93:9a:92:6d:d6:c1:49:2c:96:8e:50:89:d4:
71:26:7e:e7:3d:71:0d:b4:3e:01:93:00:62:f9:ab:
e7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:78:5D:B1:5E:5A:EF:F3:34:CB:F4:59:E4:82:F7:77:63:C3:37:8E
X509v3 Authority Key Identifier:
keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c3:ca:3c:2a:e0:bf:b4:dc:c2:8d:98:4b:71:a6:7a:20:30:
52:ab:66:ce:fb:cd:84:0a:57:6f:cd:c0:48:99:8c:16:71:ba:
51:a2:90:3a:9a:8a:67:50:39:53:83:00:e3:89:84:8c:fd:87:
73:f0:9b:0f:ca:c7:a0:ed:49:f3:89:7d:aa:8f:4a:d5:94:f3:
45:92:77:ff:7f:35:f8:63:1f:15:b3:3a:40:9d:ae:3b:11:3c:
e6:0a:bd:e3:c4:a1:36:76:06:46:1a:92:06:c5:9a:c3:8b:91:
51:a1:59:c4:53:9b:b1:6d:8e:c2:36:46:73:80:e1:c0:d3:cc:
f9:66:66:d0:13:f8:3a:25:cc:53:66:7e:e1:48:4b:6b:d9:5e:
1d:48:1e:44:92:3e:6f:51:57:fc:16:01:80:c4:a5:93:71:76:
75:a9:e8:95:7d:e8:6b:4e:9e:28:cd:c1:99:ad:ae:59:6d:12:
b1:35:3c:18:e7:f6:46:06:04:07:c3:f2:7a:b4:42:a1:22:46:
22:d1:fc:24:d5:6b:0a:f0:ce:f3:77:5d:56:2c:28:bd:fc:02:
27:da:b8:f2:96:d1:4c:6f:5e:f8:93:47:09:28:5b:94:ff:88:
4d:52:59:58:82:53:e7:a4:75:14:cf:b8:0a:b4:18:8c:71:cc:
76:48:f7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:34 2025 by rpki-client