Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
File: 9pRmi6ds9VDEE5wXMAFgB33OoFk.mft (raw, json)
Hash identifier: oo9YxSrbv+hg0gCyOE19VYmGYHccnz13r+i1Va0xElE=
Subject key identifier: 1E:55:9F:08:51:CB:97:B5:BF:19:73:65:2A:97:A9:8B:64:E1:78:7D
Authority key identifier: F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
Certificate issuer: /CN=f694668ba76cf550c4139c17300160077dcea059
Certificate serial: 0194BD8597CB6D24DAB1FC9048E0E4991B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
Manifest number: 0DA3
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: 2JNf8PoETHUWKrlbGvJA_rrI9NI.roa (hash: 1FKPW+J1lE2HkIdpCVRmwjCFGmaaz0tFXqdGn/MO/uM=)
2: 9pRmi6ds9VDEE5wXMAFgB33OoFk.crl (hash: xHI08BbFCBpMrVkPKbJ4XWSQvXPzplf6Ukx2s9w68zo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:97:cb:6d:24:da:b1:fc:90:48:e0:e4:99:1b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f694668ba76cf550c4139c17300160077dcea059
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=1e559f0851cb97b5bf1973652a97a98b64e1787d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:da:3a:4e:ff:2a:2c:02:22:b9:92:9e:63:
b8:c1:9b:f3:c5:b9:0c:38:1b:ae:6f:aa:ec:cb:29:
d4:b3:91:7b:21:99:17:16:d2:76:a8:0b:9e:b5:a2:
79:ce:6f:37:e3:39:c1:19:bc:1f:fa:22:a4:8c:74:
8e:7f:20:d5:3d:df:9b:5e:69:f8:90:69:a7:a3:24:
4f:49:84:6b:94:5d:e5:3e:93:c2:47:52:ba:b9:29:
bd:d6:f1:ed:d9:92:43:28:51:3d:e3:92:0c:e6:2e:
ea:b0:56:0a:86:93:e1:d3:85:9b:48:11:c8:04:64:
9f:12:06:0d:30:94:32:56:fd:36:15:de:c8:97:97:
f1:c3:13:29:46:e7:7b:f2:9a:43:05:0b:52:80:82:
12:a9:47:2f:5d:81:cb:61:ce:09:11:c5:24:e5:83:
79:f0:5c:31:48:93:06:af:ca:53:fe:13:85:84:00:
5e:e6:d9:b4:70:40:6c:f6:ee:d6:21:1f:b6:c0:fb:
ba:8c:12:ad:70:a3:cb:a3:58:cb:eb:91:3d:c8:f8:
9c:7d:d7:72:2a:3c:6e:f6:58:32:69:f3:68:da:6d:
15:4f:d7:26:26:07:e9:62:c2:ed:97:0d:85:e3:5e:
e9:fb:65:d4:b0:83:27:b5:a2:c4:4f:66:48:6c:c2:
49:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:55:9F:08:51:CB:97:B5:BF:19:73:65:2A:97:A9:8B:64:E1:78:7D
X509v3 Authority Key Identifier:
keyid:F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:69:7d:70:72:f9:b9:03:d6:17:8d:04:e9:38:7b:76:f3:46:
2a:a7:c5:62:8f:70:e5:2c:ad:66:08:62:b7:01:c1:4f:e0:38:
eb:78:5a:b1:4b:78:2c:2c:06:a2:5b:78:e1:8d:05:ba:ab:92:
92:e1:03:72:0d:72:7f:23:82:71:b4:80:d0:59:db:e2:53:e4:
95:45:f7:46:50:7f:4a:6f:5d:d0:30:f6:89:f3:63:a0:7c:cd:
ae:71:c2:9a:92:09:cd:09:0f:51:3d:cf:f0:0b:e5:63:da:90:
47:a8:b6:d5:d2:4d:5c:3f:a5:7e:84:45:9f:1b:61:c3:78:cc:
83:82:dc:87:66:db:c0:21:10:e0:3e:16:7b:7b:29:38:6a:77:
0b:be:f4:cf:3b:24:18:b9:8d:38:b8:d1:4c:af:2f:46:f0:16:
78:ed:38:b4:43:dc:09:3c:43:42:2f:3a:18:94:0c:9c:45:d0:
6a:d8:80:03:bd:ac:e6:ee:e8:0a:59:69:fe:71:fe:5a:fc:42:
ae:1f:33:85:72:3d:a9:d3:18:09:31:af:74:d8:41:e6:93:42:
cf:8c:10:d6:00:f9:59:30:46:ba:67:16:a2:ea:20:ce:7c:80:
8d:68:6a:90:51:b6:d8:5d:c5:40:af:d5:a7:b2:3b:8b:16:f6:
52:11:6c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:52 2025 by rpki-client