Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
File: 9pGrMkX_iVpy3W_wdDw3e28PiaY.mft (raw, json)
Hash identifier: meowiyVy/V+7rCrIzfXhcroC/qhF6k9NVx9Z1k6YxMI=
Subject key identifier: 5F:5A:70:44:D8:95:D5:EF:08:E1:43:7A:85:9B:CE:05:30:6D:7F:7B
Authority key identifier: F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
Certificate issuer: /CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Certificate serial: 0194BC05334BAB135E62A3EABD23951ECAF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
Manifest number: 0549
Signing time: Fri 31 Jan 2025 11:00:44 +0000
Manifest this update: Fri 31 Jan 2025 11:00:44 +0000
Manifest next update: Sat 01 Feb 2025 11:00:44 +0000
Files and hashes: 1: 9pGrMkX_iVpy3W_wdDw3e28PiaY.crl (hash: sDn7ZC10oBBt05gmMg4aS3mj/dTK2TIx2UBx+yoE8OU=)
2: NNs7_agCq4a5LGK9vlJAbRyPMSw.roa (hash: /RavIGbCYx2zogfJiuXee/WpGjlrh9UdwbzPF7/qVAE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:33:4b:ab:13:5e:62:a3:ea:bd:23:95:1e:ca:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Validity
Not Before: Jan 31 11:00:44 2025 GMT
Not After : Feb 1 11:00:44 2025 GMT
Subject: CN=5f5a7044d895d5ef08e1437a859bce05306d7f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:73:29:b4:eb:ea:bf:86:e5:47:c9:69:5a:
e3:de:89:9e:00:26:b7:56:02:6c:6e:38:7d:02:ff:
10:a8:9e:62:c7:0b:1e:42:15:1f:1f:0d:8b:09:7d:
73:23:28:4c:76:14:c3:6c:89:26:7d:85:87:b4:a6:
24:57:e3:c8:7f:c6:31:70:2d:5c:14:3a:d6:88:1c:
f2:8a:98:17:0c:cc:ce:9f:93:ba:e8:41:c4:0c:52:
8a:3d:ed:73:55:c2:10:58:3b:b5:6a:c9:bf:8f:1c:
b7:a2:68:2e:7a:fa:87:da:a8:45:28:c9:b8:cc:b2:
0d:1f:1e:21:bb:c9:86:86:e9:2d:5c:23:29:8c:29:
3a:3b:1d:ba:c1:19:e9:21:20:33:ac:2e:cb:e0:6d:
c6:52:9f:16:07:d5:5b:9a:f7:4a:87:ca:fa:f6:bc:
16:ff:75:9a:6b:54:e2:fc:0d:aa:89:02:70:e9:5a:
49:31:9f:c1:be:8b:cf:77:b4:1f:c0:a7:60:62:8b:
a8:93:38:1b:02:b8:43:a8:7d:de:45:00:86:f5:d5:
52:c7:72:e1:42:80:36:0a:35:33:0f:a2:28:fc:de:
61:aa:e0:35:28:0a:16:40:27:8f:1c:de:ce:d9:01:
86:47:e3:68:7a:f6:8f:74:3e:90:f3:07:64:26:84:
3c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5A:70:44:D8:95:D5:EF:08:E1:43:7A:85:9B:CE:05:30:6D:7F:7B
X509v3 Authority Key Identifier:
keyid:F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:75:f5:18:ba:6b:52:c4:d0:82:43:6e:6f:4c:0c:55:42:30:
46:3e:78:c5:76:d0:ef:a3:af:4c:ba:2e:4b:b7:12:db:8c:74:
0b:8a:ed:73:49:5e:c3:c5:64:eb:f9:02:df:c7:fb:c0:29:1a:
95:41:96:ec:64:41:55:83:5f:06:66:26:dc:67:82:59:5d:23:
8d:87:2d:8b:dc:49:18:15:82:d2:36:2e:66:e1:60:24:72:7f:
48:06:e0:39:af:1a:97:52:64:7f:f4:fc:31:88:c4:c2:ad:d5:
03:43:3b:43:a8:ec:06:42:ec:5b:30:8f:3b:a7:a0:e5:15:8d:
23:c3:07:fd:2a:d9:89:b9:2f:a9:e8:be:55:fd:69:b8:31:32:
a8:48:26:28:c9:38:bd:da:8c:a2:33:b9:49:08:e9:0f:1d:0a:
68:6a:40:c0:f2:df:cd:d7:b7:ba:f2:18:f0:f5:84:c8:c7:69:
c2:8d:cc:7c:dc:01:b2:02:5c:ed:f2:87:75:a1:d5:78:61:c3:
15:6d:a7:f0:46:97:93:66:90:f6:fb:77:0c:21:6e:64:e6:88:
ac:11:2d:d0:0e:3f:50:d8:5e:e2:e5:7c:32:a9:09:a7:e4:de:
54:58:48:7e:8c:d0:3c:7a:05:e0:0a:51:fa:4e:37:a1:fb:86:
96:3f:42:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:16 2025 by rpki-client