Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
File: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft (raw, json)
Hash identifier: ud4I8pAeW0oq+xXMmKPGVGZTuYgtvjYQoWKpNiX0k/8=
Subject key identifier: 81:CB:71:EA:0B:DC:72:84:BA:93:34:2E:DD:60:E3:C8:46:80:83:82
Authority key identifier: F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
Certificate issuer: /CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Certificate serial: 0194BC3CB809F83662988300B7C6DE9264EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
Manifest number: 0B0A
Signing time: Fri 31 Jan 2025 12:01:23 +0000
Manifest this update: Fri 31 Jan 2025 12:01:23 +0000
Manifest next update: Sat 01 Feb 2025 12:01:23 +0000
Files and hashes: 1: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl (hash: wGVwx4Araw0JpOEmEX+E7q1ANIYcxArZGavvemgCxN0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:b8:09:f8:36:62:98:83:00:b7:c6:de:92:64:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Validity
Not Before: Jan 31 12:01:23 2025 GMT
Not After : Feb 1 12:01:23 2025 GMT
Subject: CN=81cb71ea0bdc7284ba93342edd60e3c846808382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:83:41:61:93:3d:f8:d4:ae:e4:67:86:77:
85:a8:4c:8a:75:e7:56:d0:bd:9d:06:d1:b7:f1:4e:
13:75:39:cf:9a:56:88:fc:f5:c0:5a:39:75:93:1b:
78:fd:b5:5d:44:33:29:44:31:07:a1:13:1d:81:fc:
22:fe:ab:57:79:8c:04:ef:97:0a:fe:e0:2f:1b:57:
73:f4:fc:f4:b1:92:04:d7:d0:ad:38:1c:57:0e:9e:
db:01:2a:fe:cc:43:ba:8b:14:e2:3a:7a:f5:e6:5a:
3f:0d:28:33:9b:21:ee:fa:94:b3:78:be:d2:77:65:
bf:6c:1a:6e:f2:90:d3:40:0f:7d:e6:46:cb:ca:8f:
d5:04:67:2c:82:9a:ab:5a:e3:7c:4c:3c:a6:74:f8:
b4:ab:58:03:84:07:3d:22:94:16:01:38:6a:60:e0:
19:66:9b:0d:55:46:86:a7:92:e1:f3:52:78:c0:5d:
79:de:a7:8c:2d:39:81:50:2e:b2:53:ef:c4:ef:99:
1f:3c:e8:c8:bc:48:7a:b8:1c:40:48:d9:17:d8:86:
0a:4b:12:20:56:7e:07:2e:0d:0f:f2:6d:37:d7:73:
58:c8:a1:ca:be:04:90:ce:ed:ad:d8:ef:a0:e7:8f:
19:ee:b8:a2:1c:1e:f1:fd:df:65:29:f6:01:2f:f2:
8a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CB:71:EA:0B:DC:72:84:BA:93:34:2E:DD:60:E3:C8:46:80:83:82
X509v3 Authority Key Identifier:
keyid:F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9c:3c:9e:60:44:c4:b9:4e:2b:27:1c:7a:56:c0:3d:29:8e:
b5:4c:17:65:3e:ed:06:6e:e3:a4:f3:01:26:d1:3e:60:9a:18:
f7:ec:e9:6c:d1:d1:0e:03:2f:85:70:1a:8f:90:3d:26:52:70:
e7:15:a7:e9:87:b4:a7:b5:a8:33:f0:59:7a:f7:ec:9b:d0:33:
ea:e4:cc:f3:5c:7c:9a:ad:65:6c:98:e8:62:88:35:19:4f:2e:
1e:e1:27:28:c0:b1:c1:6e:bc:41:3f:7a:d6:36:57:60:83:0a:
ca:a8:e4:b7:29:ed:9e:3a:4e:b6:6f:df:e4:4b:ec:4d:82:77:
63:a8:bb:00:c8:60:2a:f1:08:1e:49:fa:2e:5c:d7:c2:fa:31:
ab:26:68:af:e4:e8:c3:2a:ef:a5:76:d8:fb:d8:6f:e7:e9:4b:
05:43:89:86:e3:a3:30:aa:4f:87:27:76:4a:4f:78:b0:bb:24:
7c:c9:b6:28:69:d2:d4:23:c3:af:ee:47:ca:da:cc:c1:73:7c:
a2:7d:36:79:0a:c4:2c:48:0f:ef:b8:80:18:f0:21:7d:00:2c:
23:29:cd:2f:9a:7f:e8:e9:76:a9:88:c6:1e:9e:ef:b1:59:fb:
b4:93:8b:11:9e:15:48:f7:d4:6f:70:e3:9f:81:d6:16:f2:27:
e9:51:56:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:49 2025 by rpki-client