Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
File: 9NavTeibuoEYlTzO6_s59FqO0bw.mft (raw, json)
Hash identifier: mELzMKcUt98VUXBtRCKYFc7zbv4y+uHR8mQRJwPD77c=
Subject key identifier: C8:13:5E:17:73:9D:6C:77:0B:23:32:E4:29:F4:E9:55:27:D2:99:E7
Authority key identifier: F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
Certificate issuer: /CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Certificate serial: 0194BD859C737606C3961E29005562A59C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: 9NavTeibuoEYlTzO6_s59FqO0bw.crl (hash: IMLP+kozTEKGiJD7V5/dL9j9BM/p/mGi1CT3Ei66728=)
2: RSBqMA8SK5hkaH899w74rpWOWzA.roa (hash: ZarbLd1gWH81UzY1+uoaATMpd5XCQStSn4LP/xfm248=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9c:73:76:06:c3:96:1e:29:00:55:62:a5:9c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=c8135e17739d6c770b2332e429f4e95527d299e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:26:26:97:20:25:da:59:e3:4c:ce:be:e8:
f4:86:06:0c:fd:8b:2d:90:d3:69:76:a2:4d:dd:f1:
28:98:fa:4b:3a:19:e9:c9:d6:9d:27:9f:3f:54:16:
94:62:e0:02:78:f8:3e:e0:cc:5c:2f:b2:e4:17:83:
c5:b4:95:0b:b5:cd:92:fc:ef:b5:33:6b:65:0c:0e:
ee:d8:54:2e:86:88:a0:e5:31:8a:c9:6f:67:f5:e0:
eb:49:e4:7c:3b:e5:aa:9b:48:e8:6d:34:89:0d:ac:
d0:b5:e3:1d:07:c4:d1:1e:e1:31:9b:7d:44:15:2e:
88:95:e3:c4:f2:5b:cb:b9:7c:2a:a4:aa:8f:78:52:
52:77:08:df:d0:de:21:67:f2:41:b6:0d:49:5e:df:
3f:6a:2f:85:e9:37:fa:cc:97:2b:e2:16:8e:04:86:
cc:d0:14:f6:f2:2f:71:65:37:de:df:a7:db:dc:8f:
9a:a4:d4:a8:9b:9c:b9:17:66:d6:2f:a9:ac:d3:72:
f3:09:f6:df:e5:13:a9:08:f6:3a:f8:57:7c:44:6b:
2b:bb:ba:b3:3c:75:45:cd:bf:01:c9:d9:0a:3f:e7:
f5:5e:9a:3f:5a:6e:bc:c3:72:6e:c4:13:63:de:83:
a0:a4:9b:f4:fa:41:14:be:60:16:63:48:17:4d:dd:
b1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:13:5E:17:73:9D:6C:77:0B:23:32:E4:29:F4:E9:55:27:D2:99:E7
X509v3 Authority Key Identifier:
keyid:F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1a:71:1f:38:ec:86:12:8a:ed:ea:97:1a:40:43:76:0d:f8:
e6:3a:c4:77:80:69:95:b2:09:5b:63:e1:b6:43:8d:72:c2:6f:
fd:90:ba:30:c0:72:9e:40:38:c1:16:04:fc:c9:8e:11:eb:04:
9d:46:a2:a0:2c:64:11:f3:a7:68:a7:50:a8:7b:00:bd:5d:f2:
e2:cc:db:0a:da:11:ec:b6:4e:5b:5c:ba:c1:37:3e:d3:ff:a2:
26:60:43:24:fc:98:b3:60:84:bb:9a:68:05:c4:35:7e:96:42:
04:61:ea:04:3a:a1:3f:ab:38:32:7b:7f:18:ea:fa:4d:77:fa:
ad:04:be:93:1b:0b:4f:84:12:96:a1:bf:2e:50:8b:d5:76:dc:
8e:4d:3e:c1:cf:e2:29:85:b8:f4:44:20:7d:d5:bc:c3:f1:70:
f5:30:1d:e4:b4:37:eb:2b:ad:40:89:91:16:bd:bf:32:25:4c:
93:0c:08:f1:db:6d:3a:73:d9:57:10:8d:fb:78:42:85:7b:df:
4a:e2:43:ae:44:72:70:7e:98:f0:1e:43:6b:29:9e:eb:1d:1c:
c2:92:3b:b6:81:5d:f8:57:59:68:02:95:a6:4e:ec:16:a6:fe:
db:2f:f5:7f:f7:6f:e7:18:ba:e8:69:1a:98:45:e0:10:6b:dc:
cf:b1:89:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:46 2025 by rpki-client