Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier: 830Xfyg5dwpzddF4cDfp2sjZv9fnXRt2W0TKFtAoqYE=
Subject key identifier: 9E:F3:8A:96:20:02:2B:C3:FD:BC:2B:AA:F6:BB:D0:90:7D:17:E6:6C
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 0194BC3C4351C0D652851ED33F9D225EE723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number: 0738
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: VILguiC7iHWD6ebFSAesDsrdbVg.roa (hash: 2CxqWs5jAcOV3iThXoM/hqNhxs0B3tJYR4ZNQm7z45U=)
2: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: XJbPPoyKXpXUZE5zRZuJIoSIHTaSObqMepUzk5YoMRI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:43:51:c0:d6:52:85:1e:d3:3f:9d:22:5e:e7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=9ef38a9620022bc3fdbc2baaf6bbd0907d17e66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ae:87:46:f4:a1:13:7f:02:78:4e:7b:e5:4b:
4e:65:c2:7d:ef:b9:2a:77:ae:fb:0a:7d:82:13:a1:
41:69:ab:cf:26:d8:17:5c:ae:22:23:4f:54:41:20:
8e:fe:8d:5a:6d:c3:e9:69:59:c9:c0:c7:2a:3f:fe:
68:2a:65:2d:cc:62:bb:3a:e6:72:d7:eb:fa:ef:2d:
b6:fa:4e:fb:13:15:a4:ff:6a:dc:cd:f4:8f:f9:13:
da:3c:b8:cf:68:fc:e7:3c:4e:16:52:92:ab:fa:ff:
11:b8:b5:1e:7c:30:67:55:70:e3:f2:71:bc:b3:0f:
61:a9:61:ff:10:69:0f:04:52:7b:2d:ff:55:44:16:
94:5b:66:ee:bf:4c:64:aa:02:2a:8b:f4:05:a1:11:
ff:d4:2e:c3:aa:09:08:a4:08:00:c0:56:eb:cd:f7:
b6:65:24:4d:06:39:db:fc:0c:ae:75:f7:94:c7:e6:
b4:2c:c3:a0:95:23:7d:02:d4:ef:ff:08:9c:9c:7e:
da:93:44:42:4b:b7:33:da:89:0b:20:9a:4b:54:83:
67:0e:8c:74:03:0b:7a:00:73:14:02:e2:67:04:13:
b9:ff:53:35:61:66:b7:f3:c2:28:09:a5:fd:d8:00:
47:3d:7b:b4:6a:b6:76:4a:52:9a:5c:ff:4e:f2:1b:
8f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F3:8A:96:20:02:2B:C3:FD:BC:2B:AA:F6:BB:D0:90:7D:17:E6:6C
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:39:a7:bd:77:99:98:4a:fa:53:64:b7:8b:c8:d2:b8:d5:a8:
7c:06:ea:e8:9b:e4:c8:bb:29:7c:59:d9:01:30:0c:35:09:7f:
56:36:b5:d9:97:42:00:8c:b3:37:84:39:74:f6:7d:d6:57:80:
65:f9:e1:ec:83:ac:c1:b5:11:4a:b7:35:5e:66:21:31:1f:93:
74:d2:37:64:39:b1:dc:a0:0c:fa:5c:92:b0:83:c3:8d:a2:24:
e3:4c:d4:50:0a:b2:ac:a8:75:f5:5f:2b:26:e4:38:66:9e:1d:
55:45:f5:4a:1a:26:90:54:03:72:50:9e:60:ff:af:30:0d:75:
74:39:eb:d7:b8:23:aa:c5:a7:8c:80:cb:1d:f0:f9:ff:c9:ea:
c3:05:fe:6b:a8:f3:89:95:27:00:a5:8b:d1:f2:5d:39:db:44:
e2:c3:61:dc:9f:2e:e7:36:65:f6:24:a4:0f:45:64:1d:22:f9:
1f:0f:b7:7e:50:91:0b:d8:db:43:ee:4c:da:77:3e:2b:d5:40:
f0:1c:d6:83:93:62:19:07:72:81:6a:71:69:b0:0f:9d:a9:48:
b5:59:43:23:8c:b3:f8:06:88:65:21:92:7b:08:c8:42:1e:dd:
f5:1a:39:7a:4c:4a:c5:ce:22:eb:99:1b:67:aa:fd:5e:28:c3:
61:e5:53:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:21 2025 by rpki-client