Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
File: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft (raw, json)
Hash identifier: pgErPFBgFExK74khK/a2vOhAp7WDo8Fmts+92f4QQN4=
Subject key identifier: 82:A6:E4:22:48:66:73:78:19:54:3C:B1:F5:95:78:83:7E:14:AC:FF
Authority key identifier: F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
Certificate issuer: /CN=f50e225bfb45218b997719804ea287f1751cf20e
Certificate serial: 0194BC72B1ECEA413ECB90F137A4374C5061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl (hash: /peHLtxR+KuUR3om2KSObI9h2m49nGQd1yYCqaOb1QQ=)
2: tCReBQEfist-xvNAig7wcNT_kFY.roa (hash: eAnNRfWeMAKf3K2opw1l/ihLmhFWT1Klsp1nr6sdAiU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b1:ec:ea:41:3e:cb:90:f1:37:a4:37:4c:50:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50e225bfb45218b997719804ea287f1751cf20e
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=82a6e4224866737819543cb1f59578837e14acff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:82:48:0f:f4:3b:9a:fe:2b:c3:0e:e2:4e:c2:
da:f7:ba:ee:49:9a:ee:eb:41:ea:52:66:70:0f:e3:
07:f3:c5:68:6b:8e:16:87:6b:9a:12:2e:53:b5:92:
90:0e:0f:70:34:0b:cf:f2:54:1e:01:9d:4d:d7:11:
17:59:6d:c3:a1:17:9a:e6:ba:49:b2:0b:a5:78:bc:
58:b3:9b:33:96:0c:9e:58:f4:c0:dd:10:86:a9:4a:
84:df:b9:1f:d8:20:fa:ef:62:8c:ec:e3:fe:32:44:
4f:b6:f5:be:e7:18:92:73:4d:da:55:04:b8:78:d1:
bb:f5:ea:87:ad:fd:20:76:c0:22:88:e2:56:27:d2:
08:52:7c:6e:11:62:7c:bb:d8:87:ea:9b:e3:17:3f:
82:09:96:c8:9e:81:a0:9d:14:09:7b:6d:98:04:39:
f0:c4:f1:c2:36:73:12:2c:8d:de:dd:d6:b5:48:fb:
0d:14:7e:a9:19:7b:98:59:bb:a8:63:f4:51:59:1e:
85:68:19:18:5b:fa:2d:ed:16:7a:3e:5b:5f:d6:68:
d1:5e:0a:b0:50:37:37:2f:f1:82:d8:5e:92:30:da:
33:8a:2f:ef:f2:bc:f5:3d:58:07:dc:b0:5d:ef:59:
dd:f7:7e:1d:1d:46:d1:79:ca:a2:79:1b:f9:20:5e:
c5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A6:E4:22:48:66:73:78:19:54:3C:B1:F5:95:78:83:7E:14:AC:FF
X509v3 Authority Key Identifier:
keyid:F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:db:17:f0:ea:74:20:29:96:bd:42:bd:c8:ac:41:a9:b5:5c:
9f:cc:1f:6e:ef:49:67:1a:17:57:85:01:0f:e8:d7:d2:cf:9d:
c3:dc:44:e6:b0:13:30:43:a0:4f:31:13:a0:eb:c2:6b:88:3b:
40:f9:6b:8e:bd:f7:de:dc:ed:23:0d:d6:83:f3:f7:5f:50:d2:
c2:d9:64:31:31:97:a6:44:5c:22:5c:cd:c7:71:d1:a3:51:aa:
13:38:51:40:17:c4:25:f0:ed:4d:fa:0d:91:fb:20:a4:30:c2:
fc:51:93:80:bd:7f:45:38:2e:28:fd:32:e8:45:94:bf:7d:d5:
0e:78:50:6d:27:9e:71:5b:30:4b:a0:50:c0:78:7c:46:96:2e:
8c:db:4c:7a:e6:ff:c7:13:5c:f0:32:53:fe:b9:ad:f8:c2:7c:
fa:b8:02:b5:49:5f:22:3d:bb:3e:62:e7:0a:29:c7:10:3d:f2:
78:79:2d:9c:34:a8:ba:54:c9:e0:19:4d:f1:b5:22:ee:ac:d3:
e3:14:ef:da:14:f0:b8:0d:32:5d:e6:73:76:fb:69:65:6a:e6:
9d:22:d2:06:45:0e:a0:8f:e2:8a:fd:06:9d:67:64:64:74:4d:
21:4f:d4:ee:91:4c:b0:69:4b:2b:62:97:12:69:31:55:7b:e7:
0f:11:09:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:10:51 2025 by rpki-client