Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
File: 9X3FmWyBeMDeLqIEme696t5AI-s.mft (raw, json)
Hash identifier: nxQ5hB9ffIXg2QncNOrghAnUat/aeRXkifPNYS0WdoA=
Subject key identifier: 1B:04:7C:9C:9E:C6:28:7C:CD:9B:15:B8:13:E9:E5:0F:B9:0F:EF:59
Authority key identifier: F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
Certificate issuer: /CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Certificate serial: 0194BD4EB54BBBA95D1C26D4C6D0EB24353F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: 9X3FmWyBeMDeLqIEme696t5AI-s.crl (hash: W2lLh9uVGPIc3rSPAnP8KP1B6KwfwEU2INA/AlHNRnM=)
2: Ja-1OHflBPV5uzkrzsrUkckcSDQ.roa (hash: 5hTfi5zIdy0pksBzayRUkBZiz92X7DgH1Hnbmun+ujM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b5:4b:bb:a9:5d:1c:26:d4:c6:d0:eb:24:35:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=1b047c9c9ec6287ccd9b15b813e9e50fb90fef59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:1d:e1:ff:c1:fb:c2:bd:4c:b4:9a:32:24:
ee:2c:94:e0:c6:1d:a3:30:9e:28:41:6a:2f:20:67:
a6:86:fe:d0:ea:38:13:d7:49:fd:90:04:2d:94:c6:
ff:48:53:ce:74:4d:09:51:ed:c8:fa:22:55:55:4a:
c1:ac:3a:a4:36:81:1b:d1:cb:68:90:a2:64:de:20:
26:7a:2d:66:32:22:91:f7:c8:02:4c:e0:34:76:e5:
3c:89:f6:6b:59:44:da:8d:f1:8b:a4:27:27:9b:62:
89:b6:78:8b:83:88:ce:83:97:be:0f:ca:8e:91:e0:
af:66:41:f1:ce:86:51:96:6f:08:8a:05:c7:5d:a2:
43:f6:30:3e:fc:44:f7:ff:19:92:06:08:97:f8:ba:
bb:61:58:81:83:20:3c:e5:b5:37:15:eb:65:2d:03:
3d:5c:e6:63:cf:2e:8a:7f:51:1d:33:c4:f7:b6:0a:
99:7e:e6:53:19:51:ee:a3:b1:22:47:b0:7f:97:fb:
80:db:d4:86:76:6d:98:83:1d:ee:be:74:14:c2:a9:
84:d6:5b:6a:ed:3a:88:6e:41:02:11:5e:4e:f8:4f:
a6:6e:5d:97:af:32:bc:2f:e6:2c:c5:08:e6:84:eb:
43:f4:73:0a:83:e8:6a:7d:16:c6:8a:fd:06:8a:3f:
50:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:04:7C:9C:9E:C6:28:7C:CD:9B:15:B8:13:E9:E5:0F:B9:0F:EF:59
X509v3 Authority Key Identifier:
keyid:F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9c:88:91:a8:f3:72:92:de:e6:c1:ff:f8:66:cc:16:66:f4:
dd:13:19:da:a8:ec:b6:79:d1:98:a3:58:ba:be:23:59:7c:75:
b8:a4:0a:51:43:a0:61:d5:99:f2:16:27:2d:d9:6f:a5:39:38:
e7:95:5f:b3:5c:e7:3c:0f:fc:b4:f4:56:d1:8d:cc:8f:2c:d2:
2a:1e:fa:20:f6:2d:64:00:19:1a:b0:b9:3d:60:15:6e:cd:a2:
d9:e0:c8:c9:40:be:c4:d3:fb:7f:c5:fb:b3:87:df:ab:0b:05:
ca:44:5b:28:f4:c7:4b:63:63:c9:22:25:16:c3:ff:35:c5:29:
7a:30:df:19:65:d2:76:47:c9:8e:fb:de:48:1a:e5:4e:b1:8a:
63:50:4a:73:2b:1d:e5:c5:70:95:f2:89:f3:d8:cf:35:d9:90:
c6:62:45:cd:7e:df:31:2b:89:f9:a2:2c:ff:8b:a4:a7:8b:0f:
4f:10:16:50:e8:4e:7b:dd:09:76:f7:fb:37:9c:3f:c4:ed:45:
24:48:2c:0d:57:cb:44:ee:6b:52:4e:b8:88:19:25:17:35:79:
76:38:ed:8f:29:6d:da:20:59:ac:0d:60:c2:b9:ce:cf:b1:f4:
95:1d:b9:2d:de:72:15:af:2a:b7:64:c0:cf:a9:dc:96:c1:67:
e5:85:3d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:04 2025 by rpki-client