Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.mft
File: 9aKrEck1CB9eSaaFyDl49vc9TaE.mft (raw, json)
Hash identifier: APfOdfdBU5lYZ7nHSZJ2oZ70wV7WvCXdcnwE3eyFeGE=
Subject key identifier: 16:F6:8C:AD:6E:51:C7:A5:21:F9:9A:CA:1B:48:99:2D:78:70:FD:65
Authority key identifier: F5:A2:AB:11:C9:35:08:1F:5E:49:A6:85:C8:39:78:F6:F7:3D:4D:A1
Certificate issuer: /CN=f5a2ab11c935081f5e49a685c83978f6f73d4da1
Certificate serial: 0194BD4ED07036E8D5CA5FBBEE9D21318F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKrEck1CB9eSaaFyDl49vc9TaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.mft
Manifest number: 0178
Signing time: Fri 31 Jan 2025 17:00:46 +0000
Manifest this update: Fri 31 Jan 2025 17:00:46 +0000
Manifest next update: Sat 01 Feb 2025 17:00:46 +0000
Files and hashes: 1: 9aKrEck1CB9eSaaFyDl49vc9TaE.crl (hash: mRJkJiQjZT0zkxs3SSQmlq7JbTDp2fr4aXCStUNHkhs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:d0:70:36:e8:d5:ca:5f:bb:ee:9d:21:31:8f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a2ab11c935081f5e49a685c83978f6f73d4da1
Validity
Not Before: Jan 31 17:00:46 2025 GMT
Not After : Feb 1 17:00:46 2025 GMT
Subject: CN=16f68cad6e51c7a521f99aca1b48992d7870fd65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e5:8f:8d:26:c9:76:eb:ba:e4:aa:78:12:1b:
10:d0:5e:cd:be:4e:c0:8e:b0:58:ca:50:60:7f:32:
45:0d:af:9f:b8:5a:f7:47:13:0d:74:56:ed:33:ce:
b8:ee:65:c5:a9:04:81:4b:01:b3:d9:42:4d:05:a5:
2c:3e:77:11:1e:46:8b:5b:e1:b1:72:1a:c3:16:24:
e5:a1:7f:f0:78:45:5b:33:c0:b5:9a:f2:4c:1d:5a:
85:53:b9:d2:b0:d5:53:ee:36:a7:67:34:3d:b4:6f:
3c:25:d0:66:5d:a7:81:fa:f1:d3:66:53:5a:05:97:
6b:89:5d:3b:7f:b8:fe:27:49:16:1b:bc:f5:db:45:
c0:18:a6:ad:bf:6d:52:17:65:32:c8:9f:b4:31:50:
91:86:d0:c7:39:68:e9:c3:27:3f:5f:c5:44:5e:12:
4a:6f:e3:ba:33:45:e3:98:2b:18:c6:8e:30:3d:ef:
b9:58:b0:aa:24:9b:53:c3:7f:b8:f3:4f:06:27:90:
12:0a:d0:22:ed:30:fa:5d:80:97:65:af:b7:f5:bd:
88:08:1a:ed:07:fb:48:88:96:70:65:3d:aa:ee:02:
d4:78:48:c2:17:ac:4d:40:d1:8e:b4:cc:5b:51:7b:
d8:8c:80:51:5c:33:9f:42:29:75:1b:8e:04:5d:b7:
b3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F6:8C:AD:6E:51:C7:A5:21:F9:9A:CA:1B:48:99:2D:78:70:FD:65
X509v3 Authority Key Identifier:
keyid:F5:A2:AB:11:C9:35:08:1F:5E:49:A6:85:C8:39:78:F6:F7:3D:4D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKrEck1CB9eSaaFyDl49vc9TaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:03:c8:db:a0:85:59:08:7e:4a:66:92:00:b5:cc:d5:f5:1c:
ad:e5:63:a1:be:fb:b5:9b:37:e1:8a:3d:2b:e3:c1:1d:2b:e0:
99:07:a5:69:69:02:3b:5c:ce:cb:45:2f:78:9b:67:f6:e3:9f:
73:d2:31:39:ef:43:46:19:8e:46:f5:30:89:94:84:28:75:d7:
99:56:fb:af:5c:e6:42:fc:a3:90:06:0a:1b:11:35:16:1d:23:
29:a0:d4:bf:8e:97:1c:51:1e:6a:e5:f6:6b:73:38:45:32:20:
a3:61:82:74:4b:3f:dd:85:81:a0:33:78:f8:99:45:ec:60:d4:
21:b4:68:32:61:28:fa:f5:d3:eb:a8:16:bf:15:7f:d5:9e:8a:
ba:05:bb:2a:8c:a7:5d:fb:5a:6e:53:a4:e1:7d:f9:24:13:9e:
e1:97:ae:89:34:6d:90:9f:62:97:87:90:ec:4d:55:fd:e3:7a:
3d:2a:82:7c:67:cb:bb:e8:5a:f1:dc:8c:a5:45:56:d4:51:dd:
b3:8b:37:89:f3:e1:88:ec:2e:5c:5a:2e:0d:21:e8:6e:1c:21:
68:60:be:34:01:22:a9:c9:bb:56:8d:17:5c:da:59:cc:b4:c7:
ad:4e:ce:d0:7f:af:e5:5e:85:9b:be:31:73:f3:46:72:f4:39:
11:d4:bd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:52:42 2025 by rpki-client