Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
File: 9OQPA5eaP05K052pg7Z7p-YhXA0.mft (raw, json)
Hash identifier: RS07NBjyP5tT49KKVUWfGzGl8zRtfoHb+DHKL0DD6vI=
Subject key identifier: 7B:06:C3:70:F8:47:B4:E9:D4:68:80:93:34:50:EE:A1:74:62:1E:EC
Authority key identifier: F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
Certificate issuer: /CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Certificate serial: 0194BCA97AEF470E590AF4323ABD17460998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: 9OQPA5eaP05K052pg7Z7p-YhXA0.crl (hash: NcafCpYc0DeIX1/tgX/jvRPvDvelsys9Zxfa5yjeTtU=)
2: scYwC-e6lFDetGsqMlwn-CerbGM.roa (hash: zF9JwzHkhXPpsqlzXkaGHeYsm+/OmjpyP3gHhfOOwfo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7a:ef:47:0e:59:0a:f4:32:3a:bd:17:46:09:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=7b06c370f847b4e9d46880933450eea174621eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:83:c2:3a:92:1f:db:25:8d:8f:3d:08:8c:
84:11:c1:c6:8d:eb:58:0f:6b:d8:60:02:ee:b0:5e:
07:ab:56:91:fe:b1:94:0c:59:c3:e1:17:b3:5f:81:
30:2a:f0:49:2d:1c:da:c3:27:ff:f9:46:24:40:51:
44:75:c4:db:45:1a:46:df:37:b6:35:22:48:b5:5f:
50:c2:40:b2:4c:8d:0a:7f:94:a4:2e:c6:db:0b:24:
83:3e:9f:00:67:53:15:df:bd:be:b0:98:88:d0:fe:
d6:20:79:ab:d7:79:da:04:6b:fc:b0:33:5c:39:25:
92:29:88:30:cd:13:92:12:3f:8a:4a:4a:8b:b4:74:
9e:42:0f:e3:07:bb:7f:69:4c:b6:9b:bb:5a:f4:b3:
71:02:71:38:a1:a9:7f:73:e7:ef:49:08:74:10:27:
2b:d7:34:fa:31:f4:19:4f:1c:16:d6:e8:99:e1:3b:
d8:24:ac:ef:03:ec:e1:0c:98:c4:ff:de:7f:be:6a:
d4:52:30:08:4d:80:a9:43:67:38:ef:7f:e1:c8:5f:
ad:98:74:b8:bb:7e:07:f8:f0:07:97:ef:d7:41:9d:
97:a4:dd:79:38:4a:da:64:64:3c:e9:8d:33:c9:58:
b5:0a:02:a6:39:b4:08:b5:4b:a5:8c:53:62:60:f9:
e8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:06:C3:70:F8:47:B4:E9:D4:68:80:93:34:50:EE:A1:74:62:1E:EC
X509v3 Authority Key Identifier:
keyid:F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8f:83:20:c1:c8:30:4a:42:c9:fc:d0:58:43:bc:3f:3b:0f:
a0:41:e3:c1:64:68:73:f1:5e:e8:ee:a5:fd:e4:22:9b:17:e9:
96:65:4b:ab:51:54:b1:aa:6a:fd:eb:cb:d5:65:25:4d:1c:0a:
cc:9b:18:a4:fd:53:fa:92:fa:26:35:a4:9c:51:9b:e2:83:7e:
fd:c3:0f:b5:78:8b:34:56:66:89:66:f4:da:3e:01:1c:ac:bf:
f6:1c:43:2b:37:03:7d:5e:59:0c:c1:60:c8:b4:d8:f5:ce:51:
d3:01:79:a8:99:de:88:60:db:8a:e7:a3:84:dd:4e:27:2e:7b:
6c:00:9e:b6:50:82:9f:aa:b8:30:8a:49:49:3e:8a:d9:ad:da:
4a:44:59:b7:3f:f8:5f:76:3f:d4:d8:e2:16:4a:c4:e2:b7:e7:
71:1d:75:7b:dd:68:cf:dd:12:a9:e8:e5:a5:da:fe:43:fd:b0:
1f:20:06:99:60:85:3b:d5:e3:68:5c:88:56:64:9f:9b:8d:93:
15:9d:b1:0c:f6:19:1b:fb:aa:c1:37:78:99:2c:36:41:fc:37:
69:59:6e:02:77:56:39:a7:34:87:d8:90:e3:ae:e8:5b:e5:94:
78:44:56:db:9e:d6:be:39:ff:05:4e:41:8a:c8:5c:1a:49:6d:
56:ea:e9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:05:55 2025 by rpki-client