Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
File: 9fgHODUdz8da-ZaZOikpw3E0ogg.mft (raw, json)
Hash identifier: PI4JUCQ9G6Mg+fT2/exPHzp372Go3tB5a4OahIclRvg=
Subject key identifier: 96:BA:C2:09:A3:2B:E8:96:6A:28:13:DA:11:2C:3E:7B:42:59:4E:29
Authority key identifier: F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
Certificate issuer: /CN=f5f80738351dcfc75af996993a2929c37134a208
Certificate serial: 0194BC3C72545825EFF8AE3E0E1AB9C19701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
Manifest number: 0E24
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: 2Qdf3KbNG5NqoZJX8HW2axOKIks.roa (hash: aZGBYQ1YtddzlVOGQVr+1nQgozPaUhvPhqEz391ISKs=)
2: 9fgHODUdz8da-ZaZOikpw3E0ogg.crl (hash: xO2SRVvJUQWUtNKs27F1vn8zwR4S//R0h5vCS9Ra3Q0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:72:54:58:25:ef:f8:ae:3e:0e:1a:b9:c1:97:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f80738351dcfc75af996993a2929c37134a208
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=96bac209a32be8966a2813da112c3e7b42594e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:ea:77:d4:6f:68:68:75:c9:e2:5c:3d:1a:
cd:e2:b9:e6:4d:79:ab:93:22:e2:a4:b4:36:a3:11:
64:bf:35:bc:dd:cd:8e:55:f7:f0:73:ab:f0:0f:de:
c9:79:34:56:d5:3c:db:83:ea:13:99:af:06:93:a7:
2e:06:f4:c3:40:0f:c3:1e:de:da:af:e6:66:ba:c1:
88:5f:b4:68:81:62:b9:c4:f2:f0:87:eb:76:1f:75:
47:7c:90:62:48:bb:3f:f4:c2:3b:b9:f1:fc:3b:0d:
c4:4d:6f:63:e7:59:fe:0c:5d:9f:93:50:75:14:82:
ba:f1:19:f4:89:a8:da:a1:ba:ff:5e:90:6d:c7:09:
a3:db:96:97:5d:21:29:0e:28:c4:59:da:11:61:7c:
09:d0:90:c1:aa:19:3f:61:ce:85:a2:e1:47:53:14:
d7:0b:2f:f4:a1:24:76:ef:6b:07:e1:73:7f:6f:e1:
2f:72:75:88:02:26:d5:66:9d:03:64:0d:21:0f:cc:
2c:19:a6:d4:5f:b0:91:b9:52:35:b6:fa:9f:78:7a:
20:5d:81:e8:3a:dc:b2:e0:32:9a:b7:07:f9:af:b1:
19:8b:e0:d9:4f:12:46:c9:18:60:bd:74:14:c8:16:
bd:25:0b:b7:41:21:dc:0c:19:46:08:47:03:03:8d:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BA:C2:09:A3:2B:E8:96:6A:28:13:DA:11:2C:3E:7B:42:59:4E:29
X509v3 Authority Key Identifier:
keyid:F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:71:6a:88:1a:38:6c:d3:3f:ef:8e:87:bc:6b:5b:7f:ba:11:
a1:eb:d9:30:bf:0f:62:91:44:d5:ed:62:41:50:1f:7a:64:fc:
9d:99:d2:36:9c:7b:12:40:19:f1:3b:da:11:5f:94:4c:55:55:
8b:77:60:c6:c2:4d:a1:cd:25:af:18:ec:9d:8d:ed:ef:1b:3e:
89:c4:a0:8d:f3:a5:ae:c8:cc:e7:46:13:fa:9d:3b:9d:de:ec:
66:99:d5:00:b8:a4:0f:d0:75:ec:7f:eb:57:93:91:70:a9:2f:
6d:a5:68:0d:e5:b8:82:1a:82:e9:40:ba:ba:c0:be:b1:6d:99:
78:d3:e4:75:90:8a:da:e1:c6:91:4c:1b:64:37:f6:b5:58:02:
95:0e:3f:d1:96:13:3a:0d:02:b0:f7:e2:d2:19:54:8e:5e:0e:
c8:3b:fe:b5:12:ab:cd:06:2d:2f:33:f7:02:c1:3c:6e:dc:51:
f4:52:e6:ae:3f:98:4c:24:54:47:23:58:6d:ff:3a:e5:a7:ad:
d5:f0:17:29:04:d6:c6:ca:1d:49:ae:d6:5a:21:40:75:73:45:
ca:b3:19:85:e0:bf:da:0b:cc:0c:ac:6e:1f:84:66:89:81:86:
3b:16:d0:6c:c5:91:6a:22:0c:5a:a8:97:3a:98:ef:a0:ad:3f:
99:95:0b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:33 2025 by rpki-client