Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
File: 9SMu6AX3jlku_yzKYVORCeWjRn0.mft (raw, json)
Hash identifier: CoHB+66DcjoSi+BxQ1JcP0Nw9vGT7zInrAQM1CoVChg=
Subject key identifier: CF:D3:FA:BB:13:83:9B:21:C4:FA:BF:ED:D0:DE:32:1F:38:96:2C:39
Authority key identifier: F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D
Certificate issuer: /CN=f5232ee805f78e592eff2cca61539109e5a3467d
Certificate serial: 0194BC727EB598EA870AD77BF99F3995C265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
Manifest number: 0258
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: 9SMu6AX3jlku_yzKYVORCeWjRn0.crl (hash: cMefuagLhNx42robLv9mj/lUd8byehemApfoH8YtWJ8=)
2: mUlVQVQA_6DZI0Ul4lrD7MOPmCA.roa (hash: KLYv7255AIBTzhsrUwU5ETXppAJnyWMdZ4HLY5/fahk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7e:b5:98:ea:87:0a:d7:7b:f9:9f:39:95:c2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5232ee805f78e592eff2cca61539109e5a3467d
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=cfd3fabb13839b21c4fabfedd0de321f38962c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:ba:f7:32:9d:e7:59:01:29:83:dd:56:40:
20:39:49:7c:37:38:08:bd:2c:ea:1f:18:df:e7:6b:
02:19:a4:5e:a9:38:31:5c:d5:bd:02:ea:d1:c3:36:
a0:e1:3b:e8:a9:d8:0b:4c:a9:3b:4e:7b:4c:8e:97:
51:e2:05:f8:25:67:c3:03:11:8d:26:12:62:fb:63:
8c:74:22:d5:86:f7:50:bf:91:07:16:62:38:d2:d7:
8b:6f:14:cc:e2:dd:98:19:24:b9:23:50:3a:c7:83:
0c:3e:74:84:b6:35:c7:69:1e:03:7f:c3:92:54:f4:
a0:94:a4:37:30:a0:bd:aa:f0:9b:73:0f:25:eb:28:
6d:b2:55:fe:99:d4:b3:c9:a7:19:43:ea:e5:86:35:
13:96:0b:ba:ab:5e:16:75:47:7c:56:1c:27:7e:6e:
0b:c5:ce:33:9f:81:b6:da:48:60:9a:4c:b2:1c:d5:
70:8c:98:a8:bb:3d:6d:60:2f:c0:9e:e9:5d:45:b2:
be:d5:4f:ed:14:c8:1e:aa:f9:64:77:a2:e6:45:9c:
a4:7f:fc:8a:df:9b:47:f7:8b:5c:c8:ff:2e:cf:99:
bd:60:ad:d4:bc:ae:31:b7:3f:de:56:75:bc:83:1e:
20:ad:5b:15:ea:d1:cb:cb:8e:5c:34:06:b6:d7:78:
45:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D3:FA:BB:13:83:9B:21:C4:FA:BF:ED:D0:DE:32:1F:38:96:2C:39
X509v3 Authority Key Identifier:
keyid:F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ad:fc:1a:40:c4:47:51:31:bc:d5:99:30:38:06:70:94:6f:
a4:5a:09:3d:d5:89:47:19:fe:d2:58:08:f2:c5:a2:70:c3:da:
47:1f:68:72:d7:e2:e2:16:47:f5:71:9b:d2:ba:73:f4:27:6e:
8b:28:a4:fe:9b:1a:1a:e4:68:b8:60:c2:0f:26:3f:f7:13:db:
9a:5a:81:90:2f:0c:87:27:4a:f6:c5:80:e0:0a:ea:3c:12:b1:
82:35:b7:a9:63:44:75:e5:42:cd:34:67:8e:36:c0:21:73:2e:
fe:01:95:e3:b6:b5:0d:68:83:55:a7:c8:b0:8e:4e:bf:e6:c4:
1d:3f:17:82:24:63:9b:7b:69:9f:3d:96:c8:87:f1:7b:8c:1c:
e4:c6:04:af:0c:ef:8c:d2:ef:a0:c0:37:fd:c3:f9:07:c3:38:
fc:9a:6d:9d:45:b0:0b:ce:38:7f:af:70:b9:3c:0b:5c:2a:13:
76:44:69:28:bd:c0:4d:72:69:e2:f5:8e:18:79:f0:2a:35:26:
0f:cc:03:1d:4e:5e:38:45:87:ce:eb:39:f5:50:aa:bb:40:e8:
f1:c5:69:09:a8:9c:e9:98:5e:5d:f8:8c:2d:d7:19:c2:1e:91:
9a:20:6e:6a:fb:53:ea:27:c5:bb:50:d5:6e:4a:e6:9b:50:2c:
dd:bb:99:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:08 2025 by rpki-client