Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
File: 9f3nK_WgC97E0e_dfQICnueeRyA.mft (raw, json)
Hash identifier: qzpxRKHOPiECsumtyikLPk3VUEKqTJnGELmr8FXfzk8=
Subject key identifier: 9C:5B:D3:60:3E:52:0F:63:B9:0D:9E:CF:FD:43:54:0F:75:EF:E8:50
Authority key identifier: F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
Certificate issuer: /CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Certificate serial: 0194BBCE94961484928F167083210EE6DB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
Manifest number: 07F4
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: 9f3nK_WgC97E0e_dfQICnueeRyA.crl (hash: pCZGeIT3QX63kHbRIhC5LkmKIgrptTYYBej+iTBsTVI=)
2: VwdOphY_UgRaqYf3Kg3b6kzwRf0.roa (hash: RncMvUV6R6LkD/qjU1iWGPE4PHApbhUX2ZP/1640Hn8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:94:96:14:84:92:8f:16:70:83:21:0e:e6:db:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=9c5bd3603e520f63b90d9ecffd43540f75efe850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:e9:60:48:17:a9:99:b3:51:70:04:e7:9b:
27:ce:67:1d:2a:c6:f2:33:93:e8:af:d9:86:e2:df:
c6:19:3c:a6:6d:29:67:e9:c7:c4:e8:fc:e7:06:0b:
08:a7:20:27:c0:c7:a4:f3:94:ea:0d:da:ab:1c:e2:
d7:8d:d1:48:66:36:de:76:41:9b:ad:2c:92:73:06:
ef:29:79:89:b9:ce:74:b8:f5:d2:b7:17:8a:34:3c:
ca:06:e1:45:80:28:22:f4:62:72:8f:99:b0:d3:d8:
f3:a8:17:2f:9e:2b:e1:e0:fb:98:13:75:9a:3b:26:
6d:07:32:a5:d3:5d:98:d1:ec:33:29:6f:b9:6d:5b:
cb:90:e7:15:12:f6:f8:0e:15:0d:f2:a0:dd:44:e7:
22:fd:52:04:b4:8f:d4:ee:68:f4:0e:48:92:6f:6f:
c9:cb:bd:0a:26:d5:84:98:d0:ba:c3:77:e3:9f:5c:
1b:a2:4e:e6:cd:44:c3:12:e9:4b:40:e8:ba:69:a0:
d1:4b:f2:c0:fa:ea:93:dd:8b:c4:87:9c:3a:17:2a:
4a:99:65:e7:b9:32:6c:75:54:87:de:24:67:98:cc:
20:29:70:9b:c0:b7:20:82:7d:09:22:3f:82:5b:55:
73:5d:c5:5a:ec:88:2c:3c:01:c6:10:eb:64:43:d4:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5B:D3:60:3E:52:0F:63:B9:0D:9E:CF:FD:43:54:0F:75:EF:E8:50
X509v3 Authority Key Identifier:
keyid:F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:81:2d:32:77:d5:27:53:b6:0e:81:0d:d7:6f:7c:de:30:b6:
40:61:fa:3e:d8:15:90:6b:ec:7d:d7:60:26:af:95:fe:8a:c7:
f5:81:28:57:8d:e0:3b:0e:3e:e3:57:b0:78:be:49:77:90:1a:
95:32:5e:67:93:f1:ee:ae:39:4c:ee:c0:2e:91:c5:28:a0:8c:
61:6c:41:fd:17:32:46:dc:33:30:5b:20:fd:8a:58:f5:ed:6a:
a7:4c:36:55:3e:e9:05:7d:a4:88:37:d3:21:67:6a:ee:be:76:
cc:5f:76:1a:0d:91:f2:df:ba:f2:31:49:85:81:14:42:b8:ce:
b1:a0:be:68:ef:0a:aa:ea:10:42:e6:ba:27:cc:db:51:3d:4f:
e2:df:a5:40:84:ff:6a:8e:fd:15:17:93:da:7b:3d:7c:05:ce:
c1:40:60:08:42:21:d5:32:fe:1f:14:b8:fc:70:0e:aa:83:3e:
c0:99:99:4c:49:55:69:1d:16:c7:dd:62:dd:0d:40:fa:a5:34:
8c:dc:fe:24:6e:f0:ec:44:3a:9b:25:7e:39:ef:d2:83:8d:19:
39:ae:d8:5b:8a:15:77:71:31:32:a0:c5:a6:7f:a7:a6:b8:1b:
78:7e:4c:68:11:48:da:9c:52:68:6b:35:32:95:0b:3e:43:7d:
35:0e:22:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:16 2025 by rpki-client