Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
File: k9t6NCzZOS76XNM4lHQcqKW09Cs.mft (raw, json)
Hash identifier: u4A2DR25kct2LGqGrfcrJ5JOkGF7WLjPCxT4ELuJ61s=
Subject key identifier: 93:37:45:63:BE:EF:40:7B:71:C3:C5:01:FC:99:3A:9F:AF:11:9A:F3
Authority key identifier: 93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B
Certificate issuer: /CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
Certificate serial: 0194BC3C88DACD4FA384D2E898DF056BF395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
Manifest number: 112E
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: SboGMTB-9QHWroFpAbYSHcl3CKo.roa (hash: rffHNVeJmra0y8Rg18pTmGMriRjMrSI/KkXaHsDinBM=)
2: k9t6NCzZOS76XNM4lHQcqKW09Cs.crl (hash: IQtFP+bc/cU4pTNkgZna3eV/y/c+EEziXPwPW/Ig0L4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:88:da:cd:4f:a3:84:d2:e8:98:df:05:6b:f3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=93374563beef407b71c3c501fc993a9faf119af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:b9:b1:0c:af:54:7b:85:04:93:e1:43:84:
5e:2b:49:73:3b:49:35:7c:34:17:68:e3:7d:a0:e2:
b7:77:51:b1:4b:65:79:e3:db:d1:07:ac:4c:7f:f9:
2b:d0:3c:8a:cf:fc:5a:85:0e:28:fc:76:c2:72:f0:
2c:3f:23:87:98:b3:24:65:7a:b6:f7:87:c3:71:af:
19:d3:0a:30:0a:43:b4:e6:39:d9:b5:07:d8:58:ed:
22:a4:d8:0f:4c:27:f6:0f:d6:21:45:ca:14:c0:e2:
53:a9:e4:7a:ac:de:4e:61:f9:ca:ff:65:4e:fa:6c:
bb:42:41:2d:9a:60:cd:6e:96:d0:58:eb:91:92:0b:
23:e0:36:21:89:7f:f9:95:13:b6:8c:78:f9:83:6d:
a7:d5:9f:09:bd:65:9d:94:a3:8a:b5:a9:e9:c5:26:
a8:24:f7:e6:07:dd:00:d8:6c:de:b4:c6:e3:86:30:
d2:37:96:06:1c:fe:b8:56:08:d5:3c:75:26:b2:29:
0d:0e:42:f3:7a:28:dd:db:33:1b:0d:4a:97:34:c3:
18:9b:23:5d:17:4d:a7:52:86:9a:cf:cf:a6:0e:a9:
21:06:e7:d7:cb:eb:4a:cc:b8:9b:86:c7:2e:23:b2:
cb:95:7d:31:78:b2:d9:83:1c:d5:8b:98:54:c2:80:
1d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:37:45:63:BE:EF:40:7B:71:C3:C5:01:FC:99:3A:9F:AF:11:9A:F3
X509v3 Authority Key Identifier:
keyid:93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:dc:a2:cf:ea:3f:d4:01:9d:74:e8:08:fc:92:86:17:54:62:
19:e5:7c:91:5f:ba:4c:14:23:42:44:75:09:6d:67:05:20:b3:
ad:d6:5b:14:72:50:36:e8:6d:22:19:33:53:23:88:49:7f:fd:
de:e2:d2:e3:e4:2c:bd:9f:87:e3:e5:9b:d8:57:bd:fd:cd:f4:
ea:78:69:4c:62:95:9c:84:8b:4d:25:38:c2:7f:9f:32:7d:d0:
9d:d4:32:c5:4a:46:3e:af:f8:8e:39:e0:43:72:c3:56:45:0e:
8c:6a:4a:ec:5d:0b:a9:50:75:4a:d6:73:fd:63:16:aa:5c:92:
3d:54:4c:a0:be:2d:c7:20:80:22:00:36:1c:9f:2b:e7:3c:f8:
58:71:89:08:a6:a7:93:14:d9:ef:1b:b8:66:62:50:e1:77:5a:
6d:dd:f9:1e:d8:a1:fe:b0:af:44:a7:69:e7:03:b5:90:f8:6a:
de:33:8c:7d:36:38:08:12:15:c3:05:95:f4:bf:e7:07:0d:09:
a2:bc:75:3c:bc:63:58:6e:aa:c8:3d:b5:f1:6e:2d:f0:4e:c4:
9b:38:80:25:4f:5f:cf:db:4f:64:06:39:f0:7a:d6:4f:3d:87:
fb:d7:77:da:1c:c9:35:bf:b4:99:59:4e:18:75:d3:de:5b:6d:
51:bd:c3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:08 2025 by rpki-client