Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
File: 9i4OVeXFow7AS9bcRtFUs-S3tfU.mft (raw, json)
Hash identifier: cO4dzQycTVDSnW9eeocR+UhFgwkFn5W8OdRYa/dfxys=
Subject key identifier: DA:B3:61:F3:19:AA:80:3E:2E:87:6D:9B:CA:53:AF:90:63:40:DE:20
Authority key identifier: F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5
Certificate issuer: /CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5
Certificate serial: 0194BCE0B80B863D9A26F2212D612647C865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
Manifest number: 0867
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: 9i4OVeXFow7AS9bcRtFUs-S3tfU.crl (hash: at75DhXXeLG23ovHst6EI9x7SnEbVffd+HDyPlbuGyQ=)
2: t-NTnv2Ro8nWywZwXpvfbvg95_c.roa (hash: nKK6UB3Rz/fAFcSsBek32u+mXGAo3Dx3MPDp3oR/j+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b8:0b:86:3d:9a:26:f2:21:2d:61:26:47:c8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=dab361f319aa803e2e876d9bca53af906340de20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:64:a5:9a:50:de:a5:12:42:a9:fb:6d:99:52:
61:d7:8b:18:d1:d2:d9:bc:d8:46:eb:a5:92:77:28:
fc:eb:51:92:1d:cb:f8:8e:7b:d6:43:da:f5:3c:b3:
7b:97:bd:34:cd:ff:d3:89:87:db:59:74:09:7d:f6:
40:57:e6:a4:8e:9c:d2:c7:d4:a8:b7:ba:79:db:b7:
ea:49:54:43:e1:ec:99:4f:03:b6:8f:ee:47:95:69:
a8:f1:0c:3a:8d:e1:d1:63:be:3f:3f:bd:ed:73:e4:
1a:67:9f:7f:9a:0b:34:62:47:44:2c:76:58:6b:4d:
ea:37:f5:41:43:52:b8:56:26:b7:70:34:08:f0:66:
4a:76:b3:6d:a7:d9:2d:c3:a8:e1:3c:4d:ce:fb:a2:
29:ea:87:e0:ac:0f:e4:56:5d:7e:df:88:b7:6f:5f:
0c:1d:19:ff:2e:72:73:d2:79:76:ae:f2:c7:22:09:
75:de:63:fd:52:f7:61:8f:59:51:d5:2e:7d:31:23:
24:ee:df:c6:d5:70:ee:73:46:de:f6:07:20:03:b8:
43:f6:9b:1b:e1:33:64:b8:f3:1d:4f:21:2a:97:14:
59:4e:18:63:ea:e0:9c:1d:07:1f:ab:e0:a8:f3:c9:
6e:05:c5:ce:f1:18:c1:ff:92:f6:0e:fa:16:af:d0:
82:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B3:61:F3:19:AA:80:3E:2E:87:6D:9B:CA:53:AF:90:63:40:DE:20
X509v3 Authority Key Identifier:
keyid:F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:69:66:13:1e:96:51:0c:d3:b1:2c:7e:da:2e:7d:bf:c7:a5:
71:46:0b:6d:cb:80:27:ed:24:aa:8c:46:82:95:24:59:64:10:
31:ba:89:8b:fa:c7:11:cb:95:96:5e:dc:a8:dc:f8:06:4a:fd:
e4:2a:56:d0:d2:5f:a2:dc:03:09:30:4b:52:6b:b5:d4:86:bf:
da:03:d9:49:24:f8:f1:af:d3:f8:af:4d:4f:e3:d0:d7:c7:e0:
3b:78:ca:c8:9e:b2:8f:6a:96:4e:a5:0b:03:be:c3:71:70:ee:
88:f2:51:11:2e:f9:5c:82:10:13:bc:06:2c:57:98:30:18:45:
d7:74:ab:e7:c8:0e:67:0b:3a:f0:c9:12:0d:ad:74:34:b4:86:
f1:0e:8d:25:10:c7:62:9a:84:79:4b:e6:78:a4:2f:c1:be:d8:
6a:b5:6a:0d:2e:f1:48:7b:5a:cc:79:18:b6:d6:a5:fc:5d:b7:
7c:b7:dd:9c:97:25:6b:e1:7b:86:64:88:db:07:e7:ff:bc:77:
72:df:dc:02:b9:c2:d2:6a:b8:12:6f:a8:bd:d8:7e:56:d7:f3:
ce:3c:92:43:d8:5f:94:63:d0:40:9b:00:54:93:07:17:16:38:
f4:c5:0e:07:35:82:12:a9:2c:e7:ce:5e:fc:9b:a5:b4:97:d2:
e4:cc:7b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:52 2025 by rpki-client