Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft
File: F9vVrPH5x10YofdQMRFMSPCyM2M.mft (raw, json)
Hash identifier: IjMrtz6eE7+5adZOGI36v8Jcfu7V7EPe4jt9H20p78g=
Subject key identifier: 81:ED:C5:52:22:26:79:3C:C3:8C:90:28:7E:67:BB:9D:2A:48:E5:AA
Authority key identifier: 17:DB:D5:AC:F1:F9:C7:5D:18:A1:F7:50:31:11:4C:48:F0:B2:33:63
Certificate issuer: /CN=17dbd5acf1f9c75d18a1f75031114c48f0b23363
Certificate serial: 0194BC04C6E8F5328147FDA3D7EB0D79CC90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: F9vVrPH5x10YofdQMRFMSPCyM2M.crl (hash: Tw78+UnxvyPV4SdIAvyktMYEgn51GLyH+CqdbCpmLIw=)
2: dWFT9hgaVCYJtdxaSn0ewqM1KWo.roa (hash: tHOIQAagcAGzXqkgG6BKkUp0/ND0gT/kYOrqKoarV1g=)
3: dp3d8NyouQg-8K-HGzN9kV_bfNA.roa (hash: GLpCUVZVMuFtRdyRKpet07ejBXymc1KwigcRGf3bciE=)
4: vdLZKDeZrm1csyvUGvTK17cDwbA.roa (hash: 4FGoBySJOQZoRoh12OiMAMVHk1hvxrm9AdNoXGLJWFw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c6:e8:f5:32:81:47:fd:a3:d7:eb:0d:79:cc:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17dbd5acf1f9c75d18a1f75031114c48f0b23363
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=81edc5522226793cc38c90287e67bb9d2a48e5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8a:47:d0:82:c5:49:98:4c:33:96:50:e9:94:
3c:93:99:d0:2f:c5:2f:89:77:70:8b:6f:03:0b:53:
ae:1f:26:e0:f1:e7:71:bf:98:41:cd:75:51:4b:cf:
e9:b1:2e:a9:b1:a2:6d:db:51:99:b1:c5:2d:14:e5:
a8:86:ed:a3:17:75:0c:14:6c:c1:94:1b:5c:f6:2d:
eb:f1:8e:c8:25:14:6a:46:36:fe:64:59:32:51:34:
e3:dc:a5:5a:93:2a:a8:50:05:78:80:e8:a0:92:79:
96:49:7a:26:a8:59:c5:58:0b:52:dd:b5:38:18:9b:
dd:d9:e7:7c:9b:fa:e4:14:48:da:42:2a:6a:a1:93:
6e:9e:4a:b5:e0:d6:98:3d:cf:e3:c6:66:fa:fa:da:
81:a5:cb:44:5f:2c:c3:a9:c3:d1:e5:ee:4b:3e:4c:
a9:a0:4c:3a:d0:e8:71:bb:63:29:95:8e:ad:bd:19:
1f:57:12:4f:ff:46:eb:2b:66:b5:66:d1:71:a2:50:
6a:92:e9:a7:f3:16:8b:83:3a:bf:fb:9e:ad:d4:2e:
ea:d2:fb:d2:e1:f6:03:17:7d:22:47:62:25:40:13:
af:fd:53:0d:e8:ec:6d:f6:1b:55:69:43:a1:c7:75:
09:3d:6d:4d:50:03:f5:36:c3:de:7d:77:21:51:59:
ae:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:ED:C5:52:22:26:79:3C:C3:8C:90:28:7E:67:BB:9D:2A:48:E5:AA
X509v3 Authority Key Identifier:
keyid:17:DB:D5:AC:F1:F9:C7:5D:18:A1:F7:50:31:11:4C:48:F0:B2:33:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:28:c9:a5:37:07:97:c6:bb:9f:e8:7f:c9:9d:51:d5:f6:ab:
39:aa:4a:96:c5:da:00:c7:df:3f:37:3b:a0:6a:53:b3:a4:e9:
cc:86:a0:85:fe:d4:42:6e:37:dd:73:8a:cc:dd:1a:70:1c:f3:
53:18:83:af:e1:1d:57:07:41:e9:79:4d:6c:5d:d4:84:55:a3:
de:ad:78:e0:7c:13:82:b0:41:09:4a:2e:d8:4a:56:99:64:40:
24:55:c6:e3:f7:8d:87:d9:6f:e2:b9:a9:df:6a:ad:90:34:a7:
f9:ea:9c:18:1d:4c:94:6b:6f:7d:ff:95:b4:89:6a:04:b7:39:
9f:1c:5f:87:df:0c:a2:ad:9f:e0:55:72:da:fb:87:ea:a7:52:
e6:10:c0:99:cf:b7:4f:8b:1e:83:2d:0b:f3:cc:d5:be:26:63:
ee:6f:fc:16:2e:42:5c:83:1a:17:18:16:0b:f2:df:7e:c4:87:
f1:0c:d5:17:71:db:de:cf:5e:01:69:20:e3:4e:14:1a:68:13:
66:b8:aa:9b:96:af:46:b4:9f:db:b1:f7:8f:c6:66:c2:fd:9d:
56:0a:f6:a5:f6:b3:89:f1:8d:68:47:47:7f:1b:9d:f1:fe:65:
f0:47:9a:fd:f0:5e:14:9d:1d:a3:5b:eb:48:8e:50:1a:05:ab:
b5:08:a0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:26 2025 by rpki-client