Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
File: 9B_-fSl-5OHU0jM1qatKAIjAJdc.mft (raw, json)
Hash identifier: aozvBXyhKss4HgDuFNzHVhFQpvXgj8TvMDBB3T1yirg=
Subject key identifier: C7:F0:09:8A:21:1D:F5:78:E0:D2:9E:0D:F4:89:2F:CA:70:78:F8:5F
Authority key identifier: F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
Certificate issuer: /CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Certificate serial: 0194BBCDD90BDBEA27BC87CBEBE6BC3B543B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
Manifest number: 09FE
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: 9B_-fSl-5OHU0jM1qatKAIjAJdc.crl (hash: sRFpqqTZ/NfYkmHVFk49wCuJeNP45wfpCTt4QWMewhk=)
2: PRDF7uUUDEgvhpybsRj704dqk1M.roa (hash: 1hJ8QC4+sDAxjl4A67W+QBueyb9hgkEoDhfUwnkhNeA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d9:0b:db:ea:27:bc:87:cb:eb:e6:bc:3b:54:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=c7f0098a211df578e0d29e0df4892fca7078f85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:20:44:0a:8d:dd:c8:06:7a:00:85:a3:22:58:
a4:5a:20:5d:9e:bf:b6:82:55:1c:c9:5f:0a:0e:49:
2d:37:ef:46:06:a2:9e:28:88:d4:3e:ef:d8:dc:cc:
50:e3:26:84:0c:d0:05:62:89:f8:ec:58:d7:aa:51:
19:5f:82:dc:e7:dd:b1:10:81:e6:7e:e3:47:a9:0b:
63:56:e7:51:8b:67:70:26:e8:9a:ff:99:87:dc:b1:
7a:7f:cb:ee:7c:8b:03:91:0e:2d:2d:cf:90:db:ec:
93:92:f4:d7:a1:2f:ef:4b:f4:6c:ea:77:1c:eb:3e:
76:1a:3d:be:61:9a:48:f7:69:2d:fd:fc:60:f4:b5:
40:5d:41:b0:d8:7e:3c:18:49:22:f9:87:98:35:90:
1b:be:75:33:79:17:31:dc:90:9a:ab:9f:4c:46:3d:
cc:00:87:c0:de:cd:85:89:59:59:4f:78:76:39:61:
e5:9a:a9:4a:1b:d9:ef:d3:20:79:f2:f8:da:51:c4:
b1:95:95:8c:4c:48:78:55:5e:c5:4f:7b:93:d7:26:
b1:39:52:7b:2b:3e:92:18:5c:09:19:41:27:27:95:
d8:90:9c:4d:ad:91:fc:f2:cd:7e:95:e3:6b:9d:dc:
19:84:89:6c:2e:b5:a2:15:2d:63:85:f1:66:3e:8d:
ac:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F0:09:8A:21:1D:F5:78:E0:D2:9E:0D:F4:89:2F:CA:70:78:F8:5F
X509v3 Authority Key Identifier:
keyid:F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:74:31:2d:93:2c:ca:a6:e9:4b:84:4d:a9:dc:16:a5:d1:66:
fd:d0:09:8d:d4:43:df:1d:31:c3:46:f1:9e:f0:e1:9e:b0:ad:
0a:0a:5a:7c:47:47:91:7e:d3:20:a5:ca:52:fd:bc:76:5c:2d:
07:d4:02:8a:77:3b:de:5e:d8:42:e4:d4:c6:ea:4c:73:b3:bd:
30:68:d6:20:67:6d:75:8f:a7:3b:67:a9:6b:99:ed:ad:7a:0d:
d3:c7:17:5c:9f:3f:f5:bb:93:aa:1e:f9:ea:67:48:fe:28:c0:
ba:b1:8e:15:1a:4e:2a:50:62:de:d9:cb:6a:58:41:b9:b4:c3:
f4:17:01:de:6e:33:9e:c4:6a:68:e4:18:85:ff:b4:a1:0a:dd:
b4:19:d4:19:0a:13:5a:ca:5a:fe:66:eb:c2:b9:87:dd:69:97:
ff:bd:e9:27:f3:1c:be:0c:e1:ba:53:14:15:38:bc:93:9f:32:
f6:df:d4:c6:7f:88:69:35:e9:54:ba:9a:15:14:17:53:73:a3:
9b:e3:82:6f:b5:fb:ff:27:16:3a:10:cc:2d:d2:f1:a0:b5:f1:
af:c1:d6:2e:2b:8b:7b:1c:96:1c:dd:eb:05:18:fa:0c:52:58:
0c:cf:80:c8:46:cd:87:2e:73:31:7e:50:ea:15:b1:db:c3:31:
da:30:6e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:07 2025 by rpki-client