Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
File: p9368Tt9vgXaoytYeLi2gCQEWXE.mft (raw, json)
Hash identifier: AE8F9OVYlzwMUTx8Pf5GoJG/zw6XDmRGECJvKGEy4BQ=
Subject key identifier: AE:75:2F:25:19:F8:B6:ED:8B:10:0B:C8:4D:66:7F:04:A7:4C:BE:36
Authority key identifier: A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
Certificate issuer: /CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Certificate serial: 0194BCA978ED47B73F398CF4CF8ADD906909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
Manifest number: 0BB3
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: DYV8rTZS8uCurZHOoqW-jfWMmWg.roa (hash: oTQ/SBogFSvxJCfk7V0vkU2XYqnVHjZNfcn9byEW2aE=)
2: LwjuDBy22G2-Q-2JO3jMhOy1eNU.roa (hash: lEUkgsAO72uMMjQemqqZ36mEX8JKjX4GaMbgSM4hzTI=)
3: p9368Tt9vgXaoytYeLi2gCQEWXE.crl (hash: IbfmirUZF7wyWS8JiZGL7bXT4oWLj3fgRI2bUwnjaas=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:78:ed:47:b7:3f:39:8c:f4:cf:8a:dd:90:69:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=ae752f2519f8b6ed8b100bc84d667f04a74cbe36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:e6:2a:87:3a:60:4b:86:e1:d0:70:ab:b5:
d2:db:08:ec:55:1d:4b:62:41:63:00:d1:54:f6:13:
6e:f0:be:ea:2c:35:23:2a:83:f3:bc:b7:8b:5e:1c:
a6:ea:3f:4e:20:71:53:16:69:9a:45:df:49:8e:b0:
cc:4b:5f:73:9f:96:b0:0e:a6:d5:3e:01:71:38:13:
a1:40:ad:97:f9:43:b2:32:5a:b9:0c:2a:5d:0d:ea:
23:d2:b4:9c:df:56:b0:59:c2:90:87:cc:8e:70:9b:
b2:f0:24:83:40:ce:7f:ee:a8:ee:9d:52:70:2e:1a:
cf:03:8d:f4:92:65:ee:03:07:c9:46:93:39:1f:cf:
da:25:91:a9:20:f7:1b:20:66:56:f8:6a:2e:e3:dd:
f3:e3:11:44:34:cd:b5:97:e4:6c:56:0f:b5:4f:75:
52:e4:07:36:38:d2:97:a5:68:a7:67:9f:e3:92:59:
ae:36:58:f5:62:cc:65:5f:b7:d2:14:71:37:99:1a:
74:23:cb:a7:7f:d7:f1:72:f8:5b:fd:cb:65:03:4c:
03:ba:02:1b:87:e6:fa:ee:ff:56:00:bd:be:12:1c:
7c:db:ee:8d:ae:ba:38:b2:3e:5d:aa:75:d9:c0:08:
4a:6d:64:52:0b:e5:a3:fd:9a:51:b0:42:4d:cf:bd:
d7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:75:2F:25:19:F8:B6:ED:8B:10:0B:C8:4D:66:7F:04:A7:4C:BE:36
X509v3 Authority Key Identifier:
keyid:A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:45:00:d8:0c:23:4a:e8:45:99:6b:6d:0e:a7:9b:85:04:bf:
6e:2c:3e:90:9c:27:bb:6f:6c:67:f3:7c:6a:df:b0:76:95:18:
4e:63:6b:75:78:5c:26:e7:51:c7:eb:ea:09:5d:d4:bb:ac:16:
d4:2e:33:70:3b:4e:6d:26:33:98:5a:68:f7:d9:1b:50:0f:6a:
39:55:18:1c:1f:31:5e:11:be:f1:e8:e2:b6:e4:ae:ec:3c:f7:
a2:55:6d:98:b8:b6:32:ca:37:b3:dd:8e:96:fb:22:df:1a:da:
81:61:98:c1:32:f6:8e:7e:9d:da:95:09:6c:70:93:1a:62:80:
07:84:57:93:54:63:fc:3f:f9:04:21:db:d4:48:c0:fa:04:e6:
92:fa:eb:91:5f:18:15:29:ae:93:f0:61:79:f0:79:2f:e3:4e:
de:fc:4a:f5:d7:2a:1e:96:bd:59:16:37:2f:8b:02:c5:fe:40:
ce:98:2a:66:02:b4:2d:c3:3e:05:de:2e:b7:c8:9b:72:63:f1:
2d:67:cd:1c:ee:3e:c3:32:4a:f3:04:4e:0d:72:0d:29:60:a9:
de:92:04:dd:a5:22:ff:23:b7:ff:c1:36:54:a4:ab:e0:45:96:
cb:e1:99:d4:69:9b:aa:ef:29:a0:9e:d6:53:6f:29:b0:c4:28:
6a:9c:ed:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:30 2025 by rpki-client