Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
File: 9gcH8oeiMJvuy7hS7kCqgxueeGY.mft (raw, json)
Hash identifier: wlYWsXCeAI0uXeAeRFw+Kvo7yA0LoUxcL8j5GiT/HLU=
Subject key identifier: 25:00:FF:34:E1:9E:38:17:22:0F:DB:BC:5D:7A:47:CD:5D:DB:80:38
Authority key identifier: F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
Certificate issuer: /CN=f60707f287a2309beecbb852ee40aa831b9e7866
Certificate serial: 0194BD4E64434153AF17470D841D2F958AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
Manifest number: 0AD8
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: 1qWzBwVhmQ6zdPJi5w7aMEYeKoc.roa (hash: QUUw5IgATMBX8godfHfSxzPR3Se/paZBDUtUUYMUESM=)
2: 9gcH8oeiMJvuy7hS7kCqgxueeGY.crl (hash: SLXF1FF5/sJ6Dc0sxtch/2uCLMCUClu3Spr2sSC9iEM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:64:43:41:53:af:17:47:0d:84:1d:2f:95:8a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60707f287a2309beecbb852ee40aa831b9e7866
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=2500ff34e19e3817220fdbbc5d7a47cd5ddb8038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2b:e0:5d:61:d1:ee:d6:95:ac:67:17:56:43:
b9:94:dc:a5:12:1e:b9:25:98:c3:39:bb:76:1f:93:
b6:01:20:c6:0b:f1:06:39:bc:5a:6c:94:4e:69:52:
db:77:15:b6:43:b6:ea:2c:9d:74:e4:72:74:05:9c:
1e:3a:2d:93:00:33:59:bb:a8:f0:6f:81:4d:e6:11:
06:15:9f:f3:df:22:3d:08:73:a0:ca:78:3d:77:bd:
a1:8d:16:26:3a:f4:9f:ca:32:18:31:60:dd:a0:f2:
fb:f2:94:b4:47:fa:36:dc:4c:05:e6:d7:e2:85:e0:
9d:bb:42:05:cb:37:50:23:f7:de:8e:76:87:18:60:
7b:d0:04:5d:2a:3b:15:fe:9c:32:c8:4d:31:f5:24:
06:bb:c9:7e:5b:17:62:c1:45:23:a0:81:e8:80:4d:
ad:69:e0:f4:d5:c7:0a:01:76:3d:a0:69:7e:a4:cf:
92:42:99:b5:8e:5a:8c:6e:e0:3c:d2:24:01:94:72:
96:e5:70:f2:58:2e:f1:fe:a8:d4:72:70:ff:06:61:
ee:c7:69:0f:92:81:b0:8e:cc:d5:5b:a5:30:b2:9d:
52:88:ee:92:fe:30:29:66:55:a9:6f:8a:8e:49:c1:
3c:5e:7c:f3:20:0f:75:bc:99:97:a8:29:c1:df:ad:
4e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:00:FF:34:E1:9E:38:17:22:0F:DB:BC:5D:7A:47:CD:5D:DB:80:38
X509v3 Authority Key Identifier:
keyid:F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f0:b7:6c:2c:5e:56:cf:4b:0c:f4:ec:75:1b:ee:dc:f2:2e:
5f:dd:57:c7:a2:50:af:39:4d:bc:9a:93:54:ed:fc:cf:53:50:
7d:ec:bd:30:c3:67:59:bd:dc:52:3e:c0:9f:54:45:fa:ae:95:
4c:f3:e9:e3:ba:dd:6f:24:9c:af:d9:3f:7b:72:fd:cc:4f:4a:
7b:4d:82:4f:c7:3d:ca:34:b7:99:7d:d5:ad:ca:58:be:a4:37:
2a:b7:78:b2:ba:e0:b8:d4:79:d2:8c:82:7f:58:63:84:a3:fe:
f1:0d:02:70:97:14:8c:80:39:ce:e9:a6:a6:7c:2f:b8:57:bb:
4f:2e:a4:b9:c4:ea:a0:39:28:30:8d:5b:f4:0e:49:1a:29:51:
3d:b6:db:54:6a:da:e3:f7:a0:c3:aa:ea:ec:55:ae:ca:65:ad:
3b:3d:dd:99:62:ca:7b:0e:58:1c:3b:32:64:dc:a7:94:a9:f4:
87:c4:62:28:b8:d3:a9:31:df:9d:0a:96:a0:51:3b:41:3e:3e:
91:8f:ca:06:96:c1:2e:c5:fe:a1:1a:67:ca:4b:76:73:b6:8a:
9e:9a:e7:2c:ce:8e:d6:2d:55:6e:bb:e7:e1:1f:70:72:fc:25:
a1:54:07:c7:80:2e:8d:b5:9a:6b:c4:3f:13:ab:6b:9b:e9:7b:
9f:f8:34:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:17 2025 by rpki-client