Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
File: 9l50I9P3sbLnrMG6HO4CQLfWedY.mft (raw, json)
Hash identifier: wa8UuqqlK0N0VaIdWmvqTIQg373qwpD95VXDhcmpY9A=
Subject key identifier: CF:7D:1E:1B:C8:92:F0:0C:02:E1:33:8F:A0:84:8A:EF:E4:A9:BF:1F
Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Certificate issuer: /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Certificate serial: 0194BD17A43546D5AD65AF93F4A93FD95D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: 9l50I9P3sbLnrMG6HO4CQLfWedY.crl (hash: hNj9bw+kHNaflpIh0tmvcgYZxNfEeXkygDhTNV/RHPs=)
2: FAJKZDo6nLNipexAJT8L9FAGXrE.roa (hash: NVIidy7uobZX7hs2QRQ052g+pZeZGSMOgKQJmZ0nDuw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a4:35:46:d5:ad:65:af:93:f4:a9:3f:d9:5d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=cf7d1e1bc892f00c02e1338fa0848aefe4a9bf1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:78:ff:6b:e0:77:3a:86:0c:37:27:d6:19:c8:
97:98:9a:10:ef:8b:99:70:3c:56:21:f9:7d:37:6d:
c7:37:8f:73:6c:f7:8a:31:4f:bc:fc:d7:77:da:11:
48:bb:97:b7:48:ac:53:ec:ef:e8:36:3e:17:42:b3:
fa:1a:36:3c:22:bf:61:3b:bc:bf:24:b5:85:b1:3e:
e4:06:86:5d:53:88:06:95:7b:7e:7e:72:98:7a:5e:
f0:ff:03:2a:ff:67:dc:92:ae:1e:02:f9:71:58:23:
dc:54:47:ac:9e:d7:44:40:00:77:10:c0:05:a7:e8:
fc:cb:0d:df:65:bf:74:d5:40:f2:c4:95:c5:77:33:
a5:7f:4a:2b:f4:2f:5a:0e:3e:d4:34:ce:b6:3d:b5:
8d:50:e5:34:38:01:df:1b:9b:00:17:e1:65:80:79:
87:33:6e:fb:d5:eb:f0:8b:bb:f8:22:ef:40:93:05:
d9:50:48:a7:9f:44:e3:77:8b:86:0c:0d:3b:ec:8f:
0b:5d:a5:b5:04:b8:10:84:68:fb:e3:09:86:3d:af:
cd:3a:78:69:4d:ef:f5:8e:4f:52:0b:af:12:8b:87:
e4:a4:0c:a1:78:0d:21:b1:17:4e:fb:72:0a:57:aa:
11:03:08:cb:0b:ca:c1:f7:04:f8:ea:21:b3:09:63:
48:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7D:1E:1B:C8:92:F0:0C:02:E1:33:8F:A0:84:8A:EF:E4:A9:BF:1F
X509v3 Authority Key Identifier:
keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c4:d4:84:a1:fb:ae:b3:47:9d:18:34:b6:dd:69:2f:0d:a7:
e7:38:81:6c:29:b8:bd:3a:c1:78:01:83:cb:9a:1c:32:9e:3c:
39:3e:5c:64:7a:9d:3d:ee:9c:4a:d7:9f:07:62:6d:b5:62:ec:
fc:f9:75:d2:e8:f8:4e:e2:e2:31:e8:17:94:a8:45:ec:d1:41:
55:95:f8:7f:9a:0d:62:88:cd:54:51:6b:f3:0c:a8:fb:7a:b4:
32:03:84:19:8d:3a:48:69:33:fd:08:c5:82:b6:65:80:5b:e3:
6b:d3:85:67:21:60:64:97:12:57:37:6a:2b:99:b6:93:8e:fd:
fc:d5:cf:ad:2b:47:a0:79:3e:7b:b7:90:ba:3b:df:0e:02:62:
6b:db:20:c6:e4:ca:10:5a:ad:0b:6d:d5:d6:2f:5e:37:b1:d3:
6d:7e:33:f5:49:fc:28:f6:ee:54:a6:5c:ca:2b:ac:fa:ed:8c:
05:09:64:ac:09:21:49:63:c0:d7:6a:b5:27:f7:11:d9:3a:ca:
8b:48:ed:4e:2a:49:07:f9:bd:48:09:eb:56:51:cc:e8:60:cd:
24:a9:17:fa:41:05:7d:fb:c8:79:bf:d9:1e:60:50:b8:2d:5b:
c2:95:a6:be:bc:1b:28:94:e7:2c:1b:0b:ff:74:3f:78:a7:24:
3c:8d:97:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:03 2025 by rpki-client