Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
File: 9YmCO6FHWAB83oc69L9H_Zw5c3s.mft (raw, json)
Hash identifier: jPwHB8pJrHYbQo5c/lb0UFz3DC5sjW9+rfljyreBxg4=
Subject key identifier: 97:42:31:D7:92:3F:F0:B1:1F:17:AF:6C:B5:F2:8D:2F:C5:F9:9D:27
Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
Certificate issuer: /CN=f589823ba14758007cde873af4bf47fd9c39737b
Certificate serial: 0194BD8581B8E24916F5075C0EF89D15948B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
Manifest number: 0F0C
Signing time: Fri 31 Jan 2025 18:00:30 +0000
Manifest this update: Fri 31 Jan 2025 18:00:30 +0000
Manifest next update: Sat 01 Feb 2025 18:00:30 +0000
Files and hashes: 1: 9YmCO6FHWAB83oc69L9H_Zw5c3s.crl (hash: mAeBZ6X6T/LVadPEnkkoRJhDbqGTexSD4pIOZ/ib2Jo=)
2: cwCE2hhjusn86QvOu2pcA9KTbHA.roa (hash: NxYhK1mgxO/73LOxU0Rf/stDIA61i1imewNDavbu5Zs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:81:b8:e2:49:16:f5:07:5c:0e:f8:9d:15:94:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b
Validity
Not Before: Jan 31 18:00:30 2025 GMT
Not After : Feb 1 18:00:30 2025 GMT
Subject: CN=974231d7923ff0b11f17af6cb5f28d2fc5f99d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:07:07:19:0a:7c:2a:b4:36:34:53:18:09:98:
cb:3b:ff:a0:b1:c4:c2:64:a9:d2:f6:71:c6:ff:80:
cb:e6:77:fb:88:a6:f6:e3:0b:51:0e:cf:45:ca:49:
59:21:3b:2a:c7:72:75:bf:28:52:a8:2d:6b:69:f0:
be:3f:2a:95:dd:27:3c:18:15:85:bb:47:c3:ea:cb:
2a:68:a3:7d:a1:12:1a:b4:6b:ff:e6:a5:ff:6d:1d:
bc:e5:b1:33:3d:60:eb:78:c3:42:e2:19:db:0c:f6:
39:78:9a:5b:04:fb:26:64:46:52:c8:21:a0:35:16:
5a:bf:83:60:8b:07:43:78:88:f6:60:30:a3:e8:58:
60:d7:ec:19:7b:73:d7:07:e9:78:58:53:0a:da:a8:
7a:10:1e:5b:08:a8:14:e7:8d:81:61:b3:8e:6b:a2:
28:1c:55:f4:e2:e8:f0:22:80:33:78:e6:0a:bf:97:
3d:f8:7b:4a:b8:90:d9:91:ab:06:7d:a0:b1:e3:71:
7c:16:78:c4:c3:a4:7e:35:24:29:ce:0e:f5:ac:3f:
50:5a:ed:a1:1b:8d:05:a2:a7:92:ec:9f:e6:e0:54:
0e:7c:17:af:3b:e2:d1:ae:bb:ca:92:c6:e8:57:a9:
83:dc:10:54:ac:e3:99:98:07:4c:0f:52:5e:90:58:
04:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:42:31:D7:92:3F:F0:B1:1F:17:AF:6C:B5:F2:8D:2F:C5:F9:9D:27
X509v3 Authority Key Identifier:
keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a8:1a:f0:79:ae:7c:e1:23:c8:05:3a:83:f3:09:2a:73:c1:
ea:b2:ef:62:94:8b:54:43:ef:03:a9:d0:87:32:0d:70:a3:8c:
84:24:e2:14:f6:1b:fd:1b:ba:40:0a:5a:bb:a3:62:f7:87:e2:
40:7d:1b:0c:d2:63:3c:16:f2:99:d6:87:00:cf:60:19:8c:5d:
4a:5e:98:a7:f3:7c:52:d6:54:46:13:e0:e8:12:17:a4:67:94:
a1:d8:a8:1f:65:b0:e3:1b:56:76:ed:57:59:64:cb:fd:08:62:
f9:1e:41:10:7d:e0:62:bf:8e:20:35:ed:97:1c:4f:5e:54:6a:
55:e4:ee:08:a3:4c:c7:20:2c:8c:98:75:51:90:99:07:c2:a5:
70:59:75:0a:ee:b2:1f:19:1c:28:f6:ae:68:48:f7:21:72:08:
c5:ba:6a:26:55:2d:57:2e:92:82:9d:07:3c:c5:c1:5c:b5:d2:
67:ef:80:78:e2:62:48:e0:ea:50:1b:99:2a:fd:be:de:cc:54:
d5:19:fd:ff:5e:9e:d4:a3:f6:00:eb:54:ef:c4:6f:4c:10:67:
00:46:ef:d5:f7:bd:60:d0:78:b6:f3:6f:09:4e:47:22:5a:0e:
b0:15:4a:90:ae:24:88:b3:87:bc:c5:d6:d8:82:bf:16:5f:f7:
47:dd:19:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:25 2025 by rpki-client