Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
File: 9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft (raw, json)
Hash identifier: kvGbVkeqd70qV7c9d5kcaqaYUvuKW6g5HdcnXmyJmXA=
Subject key identifier: 34:F6:11:48:9B:33:EB:50:14:71:7E:89:AA:4E:AF:A0:9D:08:A0:E3
Authority key identifier: F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17
Certificate issuer: /CN=f5d412953ac06a7c52cb26796f8806b1bb859617
Certificate serial: 0194BD856C6427199EFDEFC94DF20ACDD7AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: 9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl (hash: k1By/x8mgWDdnPjioNwmh6/ZbIgmx+hCTpDHoT8aVbA=)
2: iZXergsmx3c-YFSPwK1duaC7zXE.roa (hash: ux75uK3r8KWiMZRMZNyHuR7X45YAulKv87yeHOUi7Zc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6c:64:27:19:9e:fd:ef:c9:4d:f2:0a:cd:d7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d412953ac06a7c52cb26796f8806b1bb859617
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=34f611489b33eb5014717e89aa4eafa09d08a0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:e6:d7:ef:85:6d:77:78:46:73:da:ba:82:
66:88:13:70:ee:fa:6b:a9:13:5e:4d:5d:13:9b:15:
bd:a9:d4:33:e6:78:67:96:07:9e:4d:9d:cd:71:d9:
08:3d:4c:5c:00:d4:d1:59:49:9c:c1:8e:65:35:4b:
25:e0:fa:a4:bd:53:82:77:4f:9a:04:a6:34:64:9b:
a5:fe:94:c6:82:e8:47:d9:a7:36:5c:9f:97:9b:c8:
94:1d:3b:c9:5d:03:bf:c2:2d:41:ca:08:d4:3e:30:
76:fd:f0:97:56:13:a2:db:89:32:bb:ba:9d:eb:a0:
c4:61:7c:1b:4d:75:7a:13:5a:b7:14:69:1d:15:7a:
18:eb:33:79:9b:a0:66:66:53:31:d7:73:ca:2f:d1:
6c:40:a2:fe:96:7e:04:c6:4e:87:1d:3a:f8:ca:16:
24:92:ba:6a:fe:96:cf:21:8d:4c:43:02:07:4b:92:
35:02:4c:4f:0f:88:95:df:a3:60:19:1b:0d:4f:07:
33:d8:dc:8a:62:23:dc:5a:6f:33:5e:79:9a:e6:56:
08:c5:6b:11:04:45:f8:c1:1d:39:3a:3e:b2:4c:e5:
f8:90:c3:34:f8:f6:fb:40:ae:c9:e5:11:90:49:ec:
ac:af:06:71:e5:1f:55:ec:78:ae:09:df:1b:78:f3:
69:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F6:11:48:9B:33:EB:50:14:71:7E:89:AA:4E:AF:A0:9D:08:A0:E3
X509v3 Authority Key Identifier:
keyid:F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4d:52:cf:95:e4:93:5d:b1:2c:90:c4:c0:19:2d:0d:4d:cf:
2f:77:1c:84:ba:75:a6:cf:c8:68:e9:31:aa:3b:84:a8:b4:e0:
29:f6:f8:e2:4b:c2:3b:63:34:bb:eb:2e:de:9d:38:fd:3f:f1:
1c:2f:b7:b8:68:b9:34:b7:19:12:b7:01:c2:22:87:29:ba:4b:
28:0e:d3:f4:14:da:24:de:44:22:8f:87:aa:92:ec:09:bc:7f:
87:b6:21:e1:fa:ff:3f:6b:00:a7:ea:cf:f7:f9:36:e9:04:3e:
78:22:08:df:e1:07:d0:51:9f:f3:04:f7:17:bb:f1:f7:5b:f6:
8c:2f:5d:dc:43:75:a9:69:36:39:c1:0b:9d:48:fc:d7:ea:83:
d8:dd:46:da:54:e9:fc:c3:ef:3f:da:47:e4:8a:e1:a4:80:32:
2a:2e:12:37:cd:5e:0b:07:ab:39:60:ef:28:dd:de:81:1a:9b:
a6:8a:72:1b:49:e8:c4:02:c0:c6:e5:9b:2d:58:d2:94:eb:c6:
59:27:f8:63:20:68:57:8d:24:5d:bf:a5:66:1e:c9:54:62:b4:
5e:e4:52:60:57:0b:33:1f:72:c8:9b:a9:26:8d:16:f2:24:fb:
7e:ee:a4:de:82:90:c3:9f:66:dc:2b:66:7a:db:80:25:cc:65:
4e:5e:5d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:20:31 2025 by rpki-client