Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
File: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft (raw, json)
Hash identifier: 8fcZo7DWyPwYImfd2fypfx82tXbh9ynpdh27fTXkPjI=
Subject key identifier: F2:07:5B:BF:77:E2:5F:26:74:27:8F:CE:C7:31:FC:23:DB:80:7B:B1
Authority key identifier: 0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA
Certificate issuer: /CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
Certificate serial: 0194BCE0CCFA2837533045CFB321C73F0E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
Manifest number: 4D
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl (hash: kdg9Ka4XZeOgiZem55zrL0jbeTHX1uc7MtgQUGwEAJg=)
2: wD9ir4CCy4E7zOefD7Z-y5RvpRY.roa (hash: 7sn9k3wlZ/27RuueZ6o2qKtcwJI5H5fdnvFFf1ud6xU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cc:fa:28:37:53:30:45:cf:b3:21:c7:3f:0e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=f2075bbf77e25f2674278fcec731fc23db807bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:b2:a9:d4:e2:f6:81:93:09:17:34:17:6b:
e8:17:17:28:27:5b:f5:bb:c9:70:8d:48:50:5a:1e:
ff:6c:f8:0c:41:60:a4:e8:c7:31:e5:fd:41:11:32:
ec:47:1c:17:b7:df:f8:76:c1:95:11:e1:a7:68:4e:
50:a4:fb:52:c3:83:6d:c5:fa:5f:4d:89:ee:70:0f:
2f:51:a7:29:a1:a6:95:8f:56:29:28:12:7a:a4:7b:
b9:e2:8a:c8:d8:8a:e8:b6:b4:33:e5:ae:d5:64:4e:
51:ee:9c:92:df:67:ab:c0:4b:eb:79:03:47:7a:dc:
d5:0b:bf:50:7e:0f:7b:a0:cd:2c:bb:29:5c:71:23:
05:7e:62:f6:37:0a:b1:aa:1d:1a:64:41:b2:e4:c5:
10:f8:a1:90:3c:1f:3e:c8:f7:56:73:e3:fc:c6:d5:
38:81:c3:ab:e0:20:c6:55:5e:89:20:67:08:38:83:
1f:d7:a2:3b:86:8e:c3:37:56:c2:1b:d0:ee:27:d0:
26:23:30:de:c3:88:d4:ca:6a:af:23:77:23:9f:f1:
74:8c:3e:4f:4d:1d:c9:2a:7c:1f:59:16:c0:94:fa:
0f:38:33:40:ec:11:fc:79:f0:8b:22:72:28:ff:ea:
a1:6e:53:4b:33:f4:b4:f1:4b:79:33:7f:3c:ab:bc:
89:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:07:5B:BF:77:E2:5F:26:74:27:8F:CE:C7:31:FC:23:DB:80:7B:B1
X509v3 Authority Key Identifier:
keyid:0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2e:2a:68:d2:dd:e5:78:c6:1b:ca:4d:65:3a:73:0a:d1:e9:
18:10:e6:b1:d6:68:c3:84:62:77:0e:3d:87:25:42:ba:7a:38:
6f:03:0e:0a:9a:df:ba:bc:1a:fc:15:d9:01:10:0a:81:39:10:
c5:4f:dc:2f:89:70:4a:9c:bf:39:9a:bf:38:f6:69:ac:81:59:
70:26:89:a8:e7:10:52:7d:f3:bb:01:5c:c7:5f:f7:5d:1a:d5:
8a:a6:ef:fb:77:d1:f6:60:89:88:44:c4:4a:56:9e:80:8c:be:
b4:ec:7b:31:11:0d:2f:f9:97:81:8c:65:09:fb:95:71:e1:07:
77:14:1d:20:11:3b:24:aa:1e:1e:9b:ee:62:a5:59:47:1f:45:
3d:ec:04:45:3b:91:3c:fa:9c:7a:ad:cb:c1:85:71:06:b7:90:
a6:e4:86:87:20:f0:c0:d0:5f:c2:63:f4:95:2b:d3:f3:89:3b:
1c:76:f2:95:b7:0a:68:71:3b:af:9c:9f:4a:ea:59:2c:80:c5:
9f:39:79:05:a7:65:0e:e1:f8:2b:d3:5e:53:dd:50:cf:ae:26:
6f:79:1a:d6:fe:ad:bc:7a:d4:43:b6:37:9e:a2:e1:d1:b6:5f:
af:57:44:6e:94:20:5b:29:76:e5:83:ed:62:1f:f5:0c:16:0d:
d7:cc:7e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:20 2025 by rpki-client