Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
File: S9Kz8xprCl18Bpijd5alHXsMtqQ.mft (raw, json)
Hash identifier: PqTT4CdI4H7s4SBAEeVqQqPF4d1IA5CcSTgCG3Fk5hw=
Subject key identifier: B9:16:09:BC:33:33:41:0A:8F:54:0A:43:53:51:A6:27:44:4C:F8:FC
Authority key identifier: 4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
Certificate issuer: /CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Certificate serial: 0194BD1762F53B3892266DD8E1D6A461A144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: Rdx8XfheQK9SaYz_CldryphH9T8.roa (hash: y/tJ0RmbT3dmGd7x3jwaVo6j1E4t/44CEGiNjsjlces=)
2: S9Kz8xprCl18Bpijd5alHXsMtqQ.crl (hash: MEAxHKK3Ua8E9Fxf6lW3fHbnyxBv8HQknsqfiN9TIvE=)
3: fUKc1eWdHmKeTh30S5pWd_dRf4M.roa (hash: GDoe187PYSy+m1pOUWwfwziOM1L2+4EiEEfpzL06VQI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:62:f5:3b:38:92:26:6d:d8:e1:d6:a4:61:a1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=b91609bc3333410a8f540a435351a627444cf8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3b:62:7b:03:e1:a2:fe:26:82:15:f0:d9:d9:
a7:ac:9d:27:fe:23:69:f0:53:31:dd:8a:c4:be:33:
2b:b1:23:d2:b7:0b:00:a5:67:eb:e4:11:ef:fb:76:
fd:98:cc:35:35:e7:f1:83:1f:26:ad:04:46:17:f0:
25:87:63:23:a1:71:02:cc:6f:34:80:96:ea:d6:c4:
5c:db:02:dc:41:a2:16:8e:b5:9b:90:6b:c7:03:ef:
83:ab:dc:02:20:97:ef:35:db:79:e3:f7:ea:52:c5:
0a:e5:6d:11:18:b4:08:c2:f5:c0:70:e6:48:b1:e1:
b8:3f:61:4a:b6:5e:1b:31:08:cb:4e:66:0c:b2:2c:
e0:93:fd:eb:af:46:18:ad:d5:0f:f3:48:a6:ce:51:
08:f5:49:4f:fb:59:92:e7:82:56:ed:89:3c:03:bf:
61:ec:da:21:08:10:a4:fa:19:0e:cf:d3:65:b5:b5:
7f:11:5c:7a:ef:f7:3b:20:4d:61:ce:21:62:68:ad:
5e:2f:9b:a2:b1:d5:7b:0d:b1:18:29:b3:01:1a:ba:
33:c2:dc:c3:be:59:d9:a0:1e:a9:3c:80:df:18:56:
d8:5e:31:39:0c:aa:9e:7b:ef:06:5a:77:8d:9c:7c:
90:bb:98:80:98:5b:d5:44:7d:fd:5e:13:3e:32:65:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:16:09:BC:33:33:41:0A:8F:54:0A:43:53:51:A6:27:44:4C:F8:FC
X509v3 Authority Key Identifier:
keyid:4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:03:d3:76:72:9e:9e:9e:a0:70:54:54:92:86:3b:56:d9:1d:
87:8b:a2:ab:43:97:32:89:93:ad:a3:09:cc:33:01:cf:3c:7c:
48:76:41:c9:4f:17:38:1e:0c:62:bf:56:18:25:83:a8:7a:c3:
e8:5d:4e:86:92:8b:80:87:3d:78:78:5c:81:7d:da:43:ba:6f:
83:4c:e2:93:08:58:23:41:97:7b:81:1f:b9:10:52:f5:23:99:
a4:4f:89:2b:6d:f2:1f:36:c1:31:3e:dc:ad:78:7a:e0:a0:3b:
8e:1f:be:ac:23:f6:d2:fe:c9:08:dd:6c:78:b5:d3:09:e4:31:
fb:85:c6:ab:38:1b:1e:61:3e:f7:04:df:40:12:16:e0:55:f9:
39:1f:58:5f:45:30:53:5b:e2:9e:82:42:78:07:20:50:ce:9b:
ec:97:f8:d2:6e:9b:97:7e:78:7d:09:68:09:90:3f:11:8c:6c:
c4:cf:42:9e:f7:7b:23:a8:f8:b6:de:2e:41:6f:6d:78:da:9e:
f3:04:f2:05:ed:9f:c4:b3:00:56:e4:ee:ae:10:ea:dc:d8:d1:
3c:ae:b3:13:00:08:2c:a2:69:fc:fb:a9:06:5f:d8:20:5d:16:
aa:2e:a6:d2:37:38:7b:e4:b3:77:a5:25:97:2b:6a:08:0b:b5:
ff:dc:3f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:34 2025 by rpki-client