Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
File: 9BGAp8UWZ-w4dedl8kX5CThhJXE.mft (raw, json)
Hash identifier: WRzB0iznbuziammqaVwcJdrw+6WgFoyyil8TO8KPHlc=
Subject key identifier: B9:F9:3A:4F:5A:EA:CC:7A:7A:C7:8F:A9:0C:78:01:95:D8:86:7B:A2
Authority key identifier: F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
Certificate issuer: /CN=f41180a7c51667ec3875e765f245f90938612571
Certificate serial: 0194BBCE1E8084F242149C21E6CC76B8A094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
Manifest number: 04FA
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: 9BGAp8UWZ-w4dedl8kX5CThhJXE.crl (hash: +MS9d3hYTdEZL/iWXpeDZMQG8cx6HCTNsuNl9IcnJSg=)
2: Fu214pqREiMNysqnZ9A7Q5Jm5yE.roa (hash: 3AsnPktXMzidA1tsY7S+Rc/2XsSBvEXEVlda+G5oNPE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1e:80:84:f2:42:14:9c:21:e6:cc:76:b8:a0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41180a7c51667ec3875e765f245f90938612571
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=b9f93a4f5aeacc7a7ac78fa90c780195d8867ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:4e:15:e9:de:a5:bb:c1:36:da:bb:b8:a5:
97:4e:b8:ba:b5:cc:dc:fa:68:cb:65:3c:2e:ae:6a:
3b:a9:5a:40:1d:0c:b0:ad:0c:5b:0f:95:b0:eb:ea:
31:96:59:e2:d6:2f:c9:17:8c:df:a3:16:95:25:8d:
d8:26:80:32:9c:f2:9a:a4:08:34:39:e5:6f:1a:8a:
ca:3a:6f:c9:21:12:8c:b0:d7:36:33:d9:61:c0:c2:
15:3e:b2:7f:7f:60:cb:1b:7a:6d:02:6d:57:76:2a:
6b:30:ae:cd:d3:fc:80:ac:91:21:6f:13:e6:40:ce:
92:46:a8:1b:e8:e6:3a:1d:54:5b:ca:40:4a:c7:e5:
16:21:da:3a:4c:76:d1:af:75:06:ea:84:1f:b1:a8:
ae:52:a6:d1:eb:5f:b9:4f:6d:f3:ae:bb:ea:55:67:
cd:1d:ba:26:88:2c:5c:cf:1a:38:53:6b:61:fd:32:
45:e2:5e:28:41:ec:ad:3e:f2:86:02:7d:f6:55:96:
d4:bc:07:ab:2a:c9:fe:98:62:a4:38:26:44:cf:74:
8a:5a:3e:6e:d7:51:0e:05:6c:57:93:9a:7b:ce:ff:
0a:d8:5a:a2:f5:ac:e5:a9:a7:1b:6b:5b:44:cb:31:
02:48:da:a7:f6:aa:84:7f:33:8c:22:52:85:4d:30:
af:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F9:3A:4F:5A:EA:CC:7A:7A:C7:8F:A9:0C:78:01:95:D8:86:7B:A2
X509v3 Authority Key Identifier:
keyid:F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:59:77:9f:4b:1e:c6:86:93:38:80:6d:0f:b1:9e:bf:9a:f4:
e8:ac:9f:74:81:24:ed:f5:5d:b4:c8:14:f4:80:5b:ef:23:d7:
d9:da:4d:61:47:9c:f0:5d:8a:86:1b:ca:68:11:36:7f:6b:73:
1c:93:c9:62:cd:36:93:d6:59:7f:ea:92:47:6c:0c:35:e9:5d:
c4:9c:dc:b1:a9:47:e3:45:c0:7c:fe:9a:dc:1a:7f:f1:6a:ea:
ac:c1:2d:17:f9:7a:37:30:2f:91:c5:66:f7:5c:0c:24:d7:30:
e1:da:07:ba:d7:35:a5:b5:92:0b:66:0e:0a:cc:27:3c:3e:dc:
5f:35:5d:51:cc:05:53:ad:29:e4:56:42:16:bf:4f:a5:ed:d4:
27:92:b4:5e:53:e6:83:85:76:cb:c8:98:cf:c9:db:a4:5d:6d:
41:4c:d0:10:b7:e3:bc:ad:c1:9b:86:f4:aa:e1:ae:00:e7:5c:
5d:b0:fe:19:bc:2e:3e:be:61:38:7b:f2:c2:ba:a0:1b:2b:11:
f8:48:37:cc:b4:a5:f3:d3:89:eb:95:d2:b3:3b:2e:bd:dc:62:
bc:dd:43:ca:93:6e:89:1c:69:2c:d9:24:74:3b:d7:4e:d4:98:
4a:f9:86:b0:45:21:2c:ad:00:a4:7e:a6:93:71:30:0d:18:4c:
30:2c:9f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:08 2025 by rpki-client