Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: QcXGNTCkcbtaFSOVSfPv246K0en5gASt2jQGGBYWIXQ=
Subject key identifier: FF:76:1A:83:7D:E7:FA:51:FE:6E:76:ED:07:AD:92:4A:01:5C:AF:03
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 0194BD859602ADFB68574C1CFDCC129045F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: tUVK/NlCyitpzjdoYVLGER2WHv8FraQYeA5ST9GNw5M=)
2: HmMkZMs_L5qVhevMb58XTv8ACos.roa (hash: p6Cspm4w36V6nse6CJ6sMJJCGrV41tHwZhdpXbj7GQQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:96:02:ad:fb:68:57:4c:1c:fd:cc:12:90:45:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=ff761a837de7fa51fe6e76ed07ad924a015caf03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8a:9a:fc:d9:0e:ae:07:7a:52:1e:19:09:25:
28:2a:73:0d:28:85:77:a4:88:ac:4a:8d:90:63:40:
a0:74:09:db:52:40:14:4c:30:54:14:90:07:0b:db:
04:c4:39:bf:b5:19:d3:e2:65:f4:66:ee:6a:1b:04:
54:f2:3e:4a:71:e9:1d:7f:a5:48:0b:70:35:f0:0a:
a6:05:1a:1d:bf:94:be:0b:83:94:77:2b:2a:4c:66:
00:c7:3c:8a:12:ec:96:ee:9c:f3:c1:a5:ab:82:ee:
a4:a5:77:f9:21:30:a4:b4:a4:84:83:2d:f5:9a:fe:
c7:73:f9:22:4e:d1:4f:3d:ba:99:f6:e9:06:90:52:
27:b6:14:40:ff:0b:0a:a8:55:d8:e6:94:80:1e:f3:
a4:55:79:d0:c3:46:06:c2:d1:c1:82:4f:c5:63:91:
4c:f9:a7:34:82:c4:15:5f:be:1e:30:2f:dd:80:b2:
68:23:6f:f2:65:51:28:dd:31:c1:17:e7:da:11:87:
0d:1a:13:5b:35:07:82:d4:bc:78:2e:38:96:ee:1f:
c5:73:14:dc:02:57:60:06:0d:bf:35:d3:50:c3:8c:
f8:a9:b5:c9:03:36:78:99:47:63:2c:6c:0c:60:7e:
fd:32:8d:2e:2a:04:04:af:b9:f9:9e:c7:e2:de:45:
ad:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:76:1A:83:7D:E7:FA:51:FE:6E:76:ED:07:AD:92:4A:01:5C:AF:03
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:79:64:9a:90:98:ca:75:9d:15:4e:06:60:a6:9e:85:c6:3e:
fa:a4:f0:8b:e8:5e:98:57:8d:47:c3:59:ff:fe:14:e9:24:da:
dd:97:0f:fc:74:fe:54:29:77:42:e5:53:5c:f7:a2:12:12:37:
4c:ae:66:62:c0:eb:21:e4:6c:7a:e4:54:a4:c6:b6:ce:fb:c5:
01:9f:a2:7b:5d:bd:47:b8:89:21:30:73:80:2c:46:8e:42:36:
bd:4d:81:23:03:97:5c:48:d3:ba:08:6b:08:95:fa:ba:02:f3:
31:19:f7:cb:98:4a:30:22:67:a4:ae:2f:3c:54:d3:a8:e2:e3:
0a:64:34:a3:d6:78:cd:27:fd:f2:c0:ed:ab:12:d3:a4:7f:64:
94:1f:c3:7a:e5:88:5e:4d:b9:80:f0:8e:18:be:56:ae:b2:1f:
84:84:d8:f3:dc:13:bc:15:96:46:93:4b:00:07:7c:cc:12:6c:
62:ee:84:3f:b6:94:53:f0:a7:ca:96:e2:e2:b2:a9:c3:52:0f:
f9:e9:55:5e:73:b8:1f:5e:b2:d6:7c:2d:52:8c:99:29:06:34:
2a:ca:e6:0c:c1:88:7d:2c:57:7a:7f:0f:07:77:6f:e2:fe:ee:
2b:95:4a:03:aa:7b:bc:bb:e6:58:87:dc:24:cb:69:42:97:b9:
2f:3c:21:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:47:26 2025 by rpki-client