Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
File: 9WYBbYeCMBKLWOJ51mHBleY5lYg.mft (raw, json)
Hash identifier: f3Re4vYICGyTB++JSMQz5nLj+OU9TqyZiXOJZ5bdugE=
Subject key identifier: A8:9B:58:D2:5C:DA:3A:FA:BD:D5:19:43:84:E9:E1:87:15:6B:F6:D5
Authority key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
Certificate issuer: /CN=f566016d878230128b58e279d661c195e6399588
Certificate serial: 0194BCE0A305BF6B18F17BFE737E9E01D93C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
Manifest number: 03C4
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: 9WYBbYeCMBKLWOJ51mHBleY5lYg.crl (hash: mGtZRCYajp75bG5yNPBPZ2LYhEfpkw2zQJK2Z8IKjvQ=)
2: FK1-eXhRSe8ffp_S_lHbaTgBt8o.roa (hash: isewhw2bUh3V4X01VwpIosa0D4eXIb8LPC/N4oNejio=)
3: d9_S0MdBcLLQhVMY4GIXLkmlz3w.roa (hash: JIdW7E8RpIHlAxf+ndeNBtGoppjXWf7rJVf8yChsf7I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a3:05:bf:6b:18:f1:7b:fe:73:7e:9e:01:d9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f566016d878230128b58e279d661c195e6399588
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=a89b58d25cda3afabdd5194384e9e187156bf6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ee:a5:e5:00:1f:43:05:a4:b5:85:ca:5f:6f:
bd:46:6d:53:62:99:ed:2b:5e:ff:03:8f:02:07:12:
ef:53:a9:49:37:18:5f:30:65:bf:fd:9c:c1:a8:b4:
9a:85:05:cc:a2:bb:9e:f5:6b:3e:ec:95:27:26:b4:
6f:d9:d4:83:1d:9b:b6:b7:f1:d5:77:34:60:cf:16:
a1:b9:11:78:47:33:37:50:c1:62:b2:20:a3:7b:e3:
79:92:3a:37:5a:6f:6d:79:b5:52:1b:49:e2:3d:cd:
ba:ea:79:e5:1b:56:aa:43:46:b2:9b:44:f0:f3:8f:
05:3f:a9:65:af:f7:80:cc:88:bf:c2:be:5f:34:40:
f6:ef:f7:7b:0b:28:e0:32:dd:64:5f:c6:60:0b:cd:
54:3a:32:e7:8b:0b:1b:45:09:6a:4b:ac:c8:5a:57:
0e:e8:03:fa:d6:6c:0b:3f:f4:2e:f1:a7:a5:f8:0a:
35:41:38:2a:04:09:77:87:e4:6e:58:70:c8:17:8e:
5c:ed:bc:c4:fe:c8:ef:fe:85:28:ae:a8:68:5f:cd:
1f:57:8c:89:21:7c:f0:e5:ee:bf:97:f0:6c:41:4d:
bd:00:32:e7:e9:64:77:73:c5:1b:fe:56:3c:06:74:
29:54:b1:b8:09:e0:38:d6:e8:0b:01:15:c5:7a:60:
d5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9B:58:D2:5C:DA:3A:FA:BD:D5:19:43:84:E9:E1:87:15:6B:F6:D5
X509v3 Authority Key Identifier:
keyid:F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:72:3d:40:88:26:bc:9c:b7:e6:ba:42:be:e5:f1:66:d1:e7:
79:f3:46:a1:db:d0:96:ed:07:be:a0:8e:a2:e9:8c:d7:47:15:
b5:1b:93:83:8e:27:89:43:06:1d:31:e7:25:7c:71:5e:37:21:
f8:e8:61:d5:88:7e:5c:b6:05:e8:eb:92:94:a1:ac:4c:2f:f4:
d1:ee:df:78:1c:71:ad:c9:77:b9:e5:4d:86:14:bb:17:65:66:
9f:fa:34:aa:be:42:e3:2d:3c:66:17:ef:a3:84:23:e0:a4:4e:
5a:ea:8d:22:64:d8:9d:da:e3:72:08:13:fc:72:e0:af:7b:6d:
5d:6b:79:9a:59:16:42:88:69:40:b3:e3:ec:c5:5f:dc:77:63:
22:c1:81:ca:27:a8:cc:28:a6:33:ea:de:ba:5d:ef:c3:f5:15:
02:9e:b8:e3:92:43:cf:07:3b:88:fb:37:df:e3:0f:ac:11:bd:
40:18:f1:b5:8c:a7:e6:b1:ef:b9:be:ed:bc:1f:16:49:10:23:
0a:94:8c:90:25:58:b2:49:ab:52:01:f3:9d:8c:57:a5:df:17:
02:f4:4c:11:b1:4e:12:ed:c4:dd:1a:0e:77:39:2c:3b:a3:1b:
32:2e:e4:bd:95:33:e1:c9:a1:64:99:16:70:37:96:49:71:6d:
b3:28:dd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:35:16 2025 by rpki-client