Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
File: C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft (raw, json)
Hash identifier: PgoR4DcgeVuOlDQXcEv7qJljHlyvJXySdZkOdKWmDZA=
Subject key identifier: C9:F5:33:FA:44:17:C2:38:83:02:B1:30:88:A0:5B:24:0B:9B:CE:7C
Authority key identifier: 0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
Certificate issuer: /CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Certificate serial: 0194BBCE707D1AB356A597D9AF5AFC638DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl (hash: gzoJqObAjEfU8HlyR2dJaEj+dPRq47MvBkc9puaVE/Y=)
2: XITchRD6fktx1wcD-akQf-lrx7Y.roa (hash: n2NJUWPmQKH808gxYEyCrRDNlUi5MnimQGzfm9J+OVg=)
3: gZLT5wUedCmW-PX2sDiQAVKNuT4.roa (hash: Bsg9vymR2URZ/xLntFSerTzkFFeEBNsWgx7gYqyDMPI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:70:7d:1a:b3:56:a5:97:d9:af:5a:fc:63:8d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=c9f533fa4417c2388302b13088a05b240b9bce7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6c:40:df:86:a4:93:d1:33:6d:a7:3b:31:60:
2d:40:fd:6d:63:42:77:a7:18:39:55:26:fc:b3:a9:
2a:c2:fe:fc:73:f8:a3:88:08:a1:7c:3d:07:fd:64:
2e:a0:92:7d:00:07:fa:1f:db:f6:73:07:73:56:76:
b3:55:fd:c0:d9:f0:b1:ce:21:1d:e7:79:12:e8:f4:
04:15:8b:f0:c1:85:b1:d0:5d:0c:d3:48:65:0a:49:
67:61:6d:73:9e:75:eb:21:d3:2a:9a:09:b9:65:68:
58:d8:56:c7:ed:50:7b:7c:89:39:0c:30:95:8f:3c:
0e:29:66:81:e4:1f:3f:8f:60:9c:3d:50:c0:5d:4c:
c2:37:b7:71:de:2a:14:65:de:8f:5a:b7:0d:c5:5e:
0f:82:9e:39:ab:ba:8f:a1:c7:12:27:02:38:df:d8:
db:5e:4b:ae:4b:7d:fe:e8:89:ff:02:24:d5:d0:6f:
bb:b4:91:1a:5e:79:b8:a6:28:e7:13:ff:11:7b:e3:
3d:62:b9:5e:30:5c:7c:3a:ac:97:fa:7a:45:bc:7b:
9e:c3:4f:a1:d0:37:53:6b:5b:9b:35:4c:76:7f:52:
1e:50:cb:1c:d8:03:12:e1:1e:f8:13:c0:cf:3c:43:
70:88:08:4e:82:0b:ba:e6:28:af:9e:0a:fd:3c:7e:
5d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F5:33:FA:44:17:C2:38:83:02:B1:30:88:A0:5B:24:0B:9B:CE:7C
X509v3 Authority Key Identifier:
keyid:0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6f:23:43:7b:72:38:17:15:28:47:f6:48:b9:09:ba:84:17:
53:2a:f0:ef:fb:a1:95:98:ee:1f:c9:e4:bc:d5:cb:a9:cd:13:
9e:34:a0:81:35:77:ff:de:0b:d6:e6:77:57:5d:1c:47:07:35:
76:09:fe:1f:7f:6d:4c:49:a3:cb:4e:b9:4a:d0:94:96:ee:9e:
0f:ac:ae:f1:56:f1:5a:e6:3a:f1:4e:47:00:fd:7b:1b:90:22:
35:c3:0f:51:79:78:87:aa:3e:34:22:1f:c8:a4:97:cd:ff:3e:
ad:e6:fe:8b:e9:52:76:8a:c1:d6:45:3c:18:d0:d0:83:93:a6:
74:b4:d1:d5:28:6f:9e:f2:dd:95:33:47:2c:a0:7f:37:7d:c7:
91:97:d4:aa:77:8d:26:17:49:c4:a5:39:0f:7c:97:cd:96:88:
96:59:de:97:ec:a0:7c:a0:17:de:ef:be:05:0a:32:13:34:49:
29:1b:7d:43:66:53:2e:04:be:e5:3b:82:85:71:82:ed:b7:48:
99:e7:c9:59:f1:3a:5a:dd:ea:cb:2a:2e:a3:5c:b7:3b:34:c7:
c1:c0:11:5d:7e:21:c7:9f:04:3c:a2:55:ab:e5:d4:1a:e2:93:
7a:7e:c4:a5:bc:c1:15:ed:fa:a6:4e:f0:d0:5f:23:e6:33:2b:
e3:39:90:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:10:53 2025 by rpki-client