Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
File: 9px-uGIkrbOECIR97kz8TEADrV0.mft (raw, json)
Hash identifier: THsiRXFD9qLhybAL1RIBRYO06qNbpUunhzUVs0/qWwk=
Subject key identifier: 7A:33:24:08:43:EA:60:B9:76:BF:2D:CB:63:E2:F7:CB:D8:A5:53:D0
Authority key identifier: F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D
Certificate issuer: /CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
Certificate serial: 0194BD177594AB163D25C7EC95A28090D9A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
Manifest number: 0C89
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: 9px-uGIkrbOECIR97kz8TEADrV0.crl (hash: ncOaWcAbhyivcgU8AYETUzHhmPvW8v86mZ1QVufbESo=)
2: YdnfzNQU6p17HNy9eA1Hw53deFE.roa (hash: 2Yw8oKr6x9VyLBdNC/o5JNz+v9yyH0gMbVBwfTOD/GE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:75:94:ab:16:3d:25:c7:ec:95:a2:80:90:d9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=7a33240843ea60b976bf2dcb63e2f7cbd8a553d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:92:f7:8c:24:7e:aa:83:f0:0b:e8:e4:30:
cb:63:2c:07:80:c5:74:d6:42:a0:9b:ec:77:3b:c8:
da:73:b5:8e:ff:41:a8:3c:50:21:d1:3a:2a:ea:ac:
a4:21:5e:29:fc:5d:43:d7:e9:26:dc:ec:4c:87:ab:
88:cd:f8:0a:3c:38:fc:47:a4:db:09:57:12:13:14:
f6:f8:2d:08:70:d5:f2:92:6c:b4:d6:3b:98:b4:99:
0f:45:f7:c1:78:69:fa:ad:8e:20:e2:4d:11:36:a7:
4c:5d:bf:47:6e:11:2e:7b:f6:e2:1f:24:02:86:19:
c7:ad:fa:42:d9:6f:e3:ae:35:6d:b6:be:4c:eb:69:
c6:90:c6:06:26:a2:b4:27:1e:6d:25:5a:79:d6:1d:
23:eb:f5:7c:74:75:ae:31:17:c6:1f:4b:5e:a3:f0:
37:e7:c9:7e:c7:ac:b9:eb:31:f2:3e:72:53:ae:bd:
16:9e:97:62:f7:6c:dc:a2:55:64:bd:68:8f:72:35:
5d:a9:73:be:97:12:e0:b9:47:02:da:37:4e:08:66:
9f:86:a7:07:ff:a9:f7:40:2d:a5:f7:38:f8:ba:13:
3f:7f:42:f9:77:cf:bb:d3:ae:70:92:13:e6:af:ba:
e9:47:e2:73:49:1f:b1:88:86:1e:53:28:fd:85:26:
16:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:33:24:08:43:EA:60:B9:76:BF:2D:CB:63:E2:F7:CB:D8:A5:53:D0
X509v3 Authority Key Identifier:
keyid:F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:46:69:14:d7:b6:fd:7c:47:7a:05:0d:e7:57:a1:ea:af:0c:
65:22:69:dc:ba:f0:22:79:18:4a:a9:fd:81:5c:6c:de:dd:33:
71:d4:e5:00:6f:64:44:ec:90:1b:bf:f8:95:b2:49:cb:17:ab:
ab:e4:a6:ab:f4:5b:8c:42:e4:a9:02:b1:da:81:a5:c4:b9:60:
89:56:f9:55:e2:39:c1:47:60:35:9c:72:3f:62:e5:af:b4:45:
e8:65:91:c6:6d:d0:3c:34:4c:7b:fd:b3:53:10:e2:0f:14:3a:
18:82:c7:dd:48:07:e6:58:01:08:a2:0d:18:35:4c:36:91:8f:
14:ad:fd:ea:b8:da:a9:70:f2:24:65:ba:a2:56:a9:2b:6e:b2:
5a:12:3c:a5:95:0c:b4:d7:30:6a:ec:a0:3e:fd:57:04:a6:0e:
14:bb:68:e8:a3:8f:73:27:91:41:1f:33:f0:e9:17:f7:37:e8:
b2:d9:a1:8a:e5:e2:38:e7:7a:e2:6b:0e:d0:61:39:56:0a:c4:
e5:68:46:4a:13:83:b7:5b:2d:c4:ca:8b:71:bf:90:7a:cc:df:
50:a3:50:86:1b:c3:de:44:ae:ee:28:c8:b6:dd:67:e4:06:bf:
46:9b:29:da:05:27:5d:99:d7:11:0c:b5:06:f7:04:2b:39:dd:
f3:10:ae:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:09 2025 by rpki-client