Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
File: S91CzNE9f4p8PtpbVQLY1ty7vhE.mft (raw, json)
Hash identifier: qpLWnQywyHwOyjOs09F6xn4GSXR+Q5kFjt7uPFzdD40=
Subject key identifier: E8:7D:B8:09:1D:20:8E:C4:5C:DD:59:D6:9E:46:47:E6:BC:0B:64:9F
Authority key identifier: 4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
Certificate issuer: /CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Certificate serial: 0194BD855C47CBBA3BD307C7D1219F706D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
Manifest number: 09D8
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: S91CzNE9f4p8PtpbVQLY1ty7vhE.crl (hash: FlXS5zivjJNZi5uEZvG+jBvHR2kYQK+CwayKqzy4dMQ=)
2: oa49XCli4BnhzjMFZt__xzBFHcY.roa (hash: tJwIQtT+Kk475hshkks2qpfV9lu0TNlB3mE3lLaKnow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5c:47:cb:ba:3b:d3:07:c7:d1:21:9f:70:6d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=e87db8091d208ec45cdd59d69e4647e6bc0b649f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:23:fe:99:5e:a9:4e:44:27:41:a1:a4:6f:
04:2d:7f:e4:57:0a:41:07:9a:4b:cf:d9:87:a8:8f:
43:22:af:18:e0:47:a4:fc:17:d4:ea:f5:0b:97:52:
4b:94:ae:43:90:5e:9a:cf:5b:b1:2b:58:4d:8b:bb:
b3:2b:4f:97:67:50:04:17:67:ab:a2:08:14:3f:bb:
32:5e:bb:16:24:6d:9e:b7:d0:b3:7a:98:e5:61:3e:
6c:a3:f6:0f:aa:5b:a4:5b:63:93:a7:22:25:9f:99:
c4:c0:1d:35:36:e0:1e:f2:6d:3f:ad:3b:92:53:36:
04:af:52:8c:1b:b6:f6:67:2d:26:25:74:79:1b:2a:
e4:f6:e3:e8:8f:4c:27:30:b5:b6:8f:7a:85:aa:40:
a6:86:68:0b:75:38:72:5a:60:d2:1b:d4:56:d3:48:
91:d0:da:89:6d:be:d9:96:77:90:70:d3:bc:24:65:
d7:97:35:00:b6:4d:6c:f9:83:d7:aa:c7:8b:43:4c:
b5:1e:47:4e:ad:de:0c:d9:3d:13:99:2c:54:ae:92:
ae:c7:2f:9e:03:41:02:e0:90:c6:ba:fa:7a:3f:99:
27:f5:92:b9:7a:93:e9:ff:7f:8d:df:03:a2:bb:18:
dd:7f:ab:2d:7a:96:9f:f3:05:77:b1:cf:4f:05:c1:
07:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7D:B8:09:1D:20:8E:C4:5C:DD:59:D6:9E:46:47:E6:BC:0B:64:9F
X509v3 Authority Key Identifier:
keyid:4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a1:95:95:6d:98:99:20:2f:0f:16:1d:9b:04:eb:7a:e1:d7:
24:81:bd:66:27:90:4d:6d:16:25:f9:22:04:fe:a8:f6:3d:6f:
cc:5d:5c:d8:58:57:ed:38:98:21:d0:e2:f2:d0:a8:39:46:94:
bf:6c:8b:2a:56:55:4a:3f:85:cb:59:b0:a4:b6:11:5e:1f:46:
a3:4c:0f:92:ca:af:96:69:dc:94:79:02:57:bd:46:b0:a1:a6:
2e:98:3f:3f:1e:f8:5f:16:9e:cd:53:7f:f5:7b:05:f3:8a:b0:
c5:4c:bb:06:63:54:08:36:3e:03:3f:d6:f7:39:78:42:9e:d5:
b0:5e:90:b0:0f:29:16:ba:5a:62:d7:f2:00:de:92:c2:c0:5b:
0f:c1:8e:ae:ea:f0:6e:0f:00:3b:0c:dc:c7:b1:0f:69:1a:b7:
92:c6:14:ff:3b:b6:ac:0f:69:80:2f:1f:6c:ee:6a:16:d7:6e:
3e:97:03:af:af:3a:c8:18:aa:13:6b:61:73:58:b2:f9:d4:81:
9f:69:c2:64:a5:7d:df:9c:b7:d4:31:33:4e:e9:d5:bf:33:5b:
19:b2:2d:56:f7:a7:96:e7:1b:64:f5:1e:1f:fc:9e:e2:6e:5c:
5b:9a:98:ab:5d:2f:3e:5a:c0:15:e1:a1:cf:14:84:73:71:40:
ec:19:f5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:44 2025 by rpki-client