Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
File: 9WPabrO3oH_cRSWIMASXDWQLA2s.mft (raw, json)
Hash identifier: QEo+AGoSsULTlgB39/tvfSSBt5brL3N0Lr+SngCkd0E=
Subject key identifier: 21:04:0A:D6:A2:50:76:BA:E6:3D:09:51:3A:6C:FF:D2:58:6C:7F:57
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial: 0194BD8522AC04FEA051491881D0EF156F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 18:00:06 +0000
Manifest this update: Fri 31 Jan 2025 18:00:06 +0000
Manifest next update: Sat 01 Feb 2025 18:00:06 +0000
Files and hashes: 1: 9WPabrO3oH_cRSWIMASXDWQLA2s.crl (hash: A+yIISfCgbMe1ebd70iJftRii7Zjd8RRlKDPzoXvy/I=)
2: h04E6GUTfk7g-nszYeXV5v59Z7g.roa (hash: D0nODnBLfeAlBTbUkjxGcmmT4S/QYeiGnt9Aow5Sjx0=)
3: xJetAjXRbPTX957PRc-ZRikOCag.roa (hash: zIdEISxA+75bDRZATAE0MJ7G/Gr2I74NP3sEuTFZFW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:22:ac:04:fe:a0:51:49:18:81:d0:ef:15:6f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
Validity
Not Before: Jan 31 18:00:06 2025 GMT
Not After : Feb 1 18:00:06 2025 GMT
Subject: CN=21040ad6a25076bae63d09513a6cffd2586c7f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:02:77:52:d2:e6:f4:22:29:9a:76:57:ad:
fe:59:51:23:57:8f:33:ae:1b:4c:11:97:cf:ae:0c:
8c:9b:6e:c0:03:6c:25:f0:cb:09:1e:08:b8:3d:16:
9b:b4:c2:32:65:7e:99:b0:38:94:09:11:aa:b7:1e:
63:06:9b:9c:75:27:33:b4:90:c4:f9:d1:41:c1:c9:
57:e6:5d:72:18:ac:7b:da:c7:57:e4:66:69:b4:ea:
e9:6c:6c:59:ef:3b:ce:e6:4f:c1:e3:3e:dc:17:67:
43:51:60:63:12:e5:4d:36:41:45:1d:05:c1:ca:30:
ce:1b:32:4d:b2:f9:89:6c:6f:24:32:0b:09:69:bd:
0f:fb:35:1c:cb:b8:d6:2a:4a:71:97:3b:73:17:c0:
2f:55:40:e1:f7:7e:a8:54:5a:5e:8c:4e:cb:a3:a1:
78:d3:17:b0:b4:76:0a:0d:69:ef:9f:1d:4f:0c:8c:
53:ce:9e:9a:bf:2e:00:ca:b8:9a:f7:48:93:13:8c:
37:8e:08:99:f0:4e:63:91:f6:3b:9c:a7:e1:2a:47:
bc:9b:2d:fc:90:0f:3a:11:99:45:81:60:8d:cc:44:
a0:8e:95:2d:d9:14:ab:bc:ca:ec:e5:1b:ca:0d:73:
e9:1e:e3:a3:21:01:84:97:88:e1:45:fa:13:8a:f7:
51:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:04:0A:D6:A2:50:76:BA:E6:3D:09:51:3A:6C:FF:D2:58:6C:7F:57
X509v3 Authority Key Identifier:
keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8e:4a:74:99:25:fa:93:0d:42:9f:e2:aa:19:02:d2:d1:0b:
e9:89:53:5a:2e:9a:40:b5:7f:65:4e:58:e6:de:93:c0:29:4c:
99:f4:3d:e0:f6:cc:68:41:66:b8:88:34:cc:df:19:76:95:59:
e1:d2:76:3a:1b:eb:cf:ba:65:58:a4:7f:3e:56:f1:61:cb:1e:
03:3e:47:e7:4e:dc:a8:7b:d6:d4:cb:8a:71:89:f5:6a:bb:2e:
f3:d9:73:04:5d:66:27:90:e8:51:f3:70:f5:2b:a4:5a:27:5b:
8c:67:93:ed:ca:6d:52:9c:85:85:bf:9f:ab:a6:6d:de:ea:e9:
d3:79:cf:b5:03:cb:b1:4b:ac:a5:a2:47:3f:f1:81:d2:4d:d8:
55:6c:b1:64:9d:1f:64:28:a0:31:3d:57:75:92:d9:1e:9a:ab:
39:04:83:36:91:ec:af:5e:94:54:c1:fe:17:79:77:4b:ca:31:
64:3a:e5:de:74:2b:14:b2:27:87:44:1b:06:32:17:94:bf:35:
f3:ae:d0:8c:63:de:c0:14:85:69:3f:1d:3c:64:a5:e6:94:62:
62:14:54:d5:0b:d0:b4:6a:04:25:b9:26:0b:3f:3b:33:1b:c6:
ca:ac:d4:70:0e:b7:2b:ef:c6:cc:ed:ad:9c:38:dc:52:85:a8:
f0:9c:86:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:58 2025 by rpki-client