Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
File: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft (raw, json)
Hash identifier: JlMFlsmLNpprbsNAfYHOLD+4vWspNMWun8R5kiOXFZ4=
Subject key identifier: F4:FA:95:DD:EA:0C:5A:00:19:2D:F1:3D:B1:07:48:BC:97:84:60:F4
Authority key identifier: F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
Certificate issuer: /CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Certificate serial: 0194BD4EBB2DBCD92AEE33E23FFA00AFF938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
Manifest number: 089F
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl (hash: UVQ7SDeeLOoNIfFmwtefm0YhY+ZipOGZpnW/6KqM4u8=)
2: JFSPkHUXD6uekiRT14OFUV3SRJ8.roa (hash: d66KNl4Y3abt7U8S0mMyC51IECrPTJ0e2/YrGhdvTTw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bb:2d:bc:d9:2a:ee:33:e2:3f:fa:00:af:f9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=f4fa95ddea0c5a00192df13db10748bc978460f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:02:a2:79:ac:d4:bf:c7:22:f0:20:c6:2c:
5d:85:a5:d7:4a:ab:ab:8d:ce:76:94:c9:08:2f:39:
08:a1:f0:04:b1:d8:25:62:76:82:12:f2:80:d1:ed:
53:45:34:fb:73:c2:e5:4c:9d:58:35:1a:ec:43:d7:
36:ad:a0:7d:3e:c7:80:bf:19:33:47:06:b9:52:19:
1c:50:cf:a8:23:56:4b:46:05:21:3b:5a:73:41:b2:
0a:c1:8b:72:13:8c:46:ac:05:1b:0e:55:6a:e2:81:
88:0c:ec:d4:74:f5:12:8b:65:04:53:57:66:68:8a:
12:07:3a:e7:b0:de:7a:69:f2:fe:9d:0d:f0:4f:fc:
b9:4e:4c:0f:60:57:c4:23:95:0b:88:ed:f9:b9:87:
70:0f:cf:01:fa:54:97:c5:e8:6b:c9:13:81:2e:25:
25:3d:e2:a1:f3:75:17:29:fb:f9:f2:3a:48:dd:e0:
37:2c:90:b7:eb:14:52:a4:4c:b1:ef:29:52:de:e1:
08:2e:c6:20:bd:2f:94:e0:b2:31:0e:85:08:18:40:
37:04:b2:d6:7c:c6:ef:0e:72:75:fc:68:b2:c0:68:
c0:0d:8b:8d:87:9d:60:83:a4:54:61:db:29:b8:05:
9c:c9:b3:22:3b:e0:27:87:1d:29:20:bd:ea:74:d4:
29:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FA:95:DD:EA:0C:5A:00:19:2D:F1:3D:B1:07:48:BC:97:84:60:F4
X509v3 Authority Key Identifier:
keyid:F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ca:e2:d3:87:83:16:53:c9:a4:aa:94:bf:31:22:12:13:ea:
85:0a:48:99:8b:69:3f:92:70:0d:2f:d6:fd:ae:6f:37:3a:cf:
05:c0:3a:cd:70:d4:69:8a:a2:db:70:ee:7a:8b:28:59:53:3c:
3d:18:27:50:49:19:0f:3d:31:ea:15:ce:5b:1d:16:6e:76:a3:
3d:7b:7a:89:b7:2c:14:9f:91:1b:2f:87:85:9e:96:d0:4a:03:
c6:ad:76:7d:c0:50:88:91:4f:f4:fd:c1:27:bc:2d:e6:f1:80:
c1:99:9a:d1:e0:7b:2c:2e:5d:e4:a9:29:ef:82:d6:d2:db:52:
84:15:32:88:9d:b6:43:ab:2a:3e:75:b3:21:dd:5c:de:a8:dc:
a5:4a:8d:dd:b2:6f:88:72:8a:31:0e:d8:ca:6e:90:7e:9d:25:
a1:01:8e:32:c6:84:85:40:eb:91:9b:13:d5:99:94:e7:15:f5:
f9:61:47:e1:54:48:df:fa:f8:99:3f:7b:22:c8:e1:da:f2:ba:
cd:17:5e:c7:ac:54:13:16:50:ef:f3:a3:c1:15:8a:68:5c:71:
a8:43:fc:83:b4:8a:bf:34:11:12:cf:90:40:f3:3c:d5:ae:fd:
d0:09:ba:3c:da:07:48:b6:c6:38:83:d3:2a:47:db:9c:ac:22:
71:61:80:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:54 2025 by rpki-client