Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
File: 1-cSsxnpLABNVenTs5mQfT5R1_y0.mft (raw, json)
Hash identifier: JM2Mj/8x55o/tEgJ0Pi766itCj459pJecm1og3GvQRQ=
Subject key identifier: F8:9D:67:FD:A0:28:49:43:16:E0:78:06:0B:ED:03:D2:6A:73:5A:26
Authority key identifier: F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
Certificate issuer: /CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Certificate serial: 0194BC72E3F8D06C7E5CE3A82D294FB21EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: 1-cSsxnpLABNVenTs5mQfT5R1_y0.crl (hash: roD0Fr/7vK5vfqSBhVAoxZLKABxI7RTPVmS9msOWPkw=)
2: 9KxQR6j2axabNDMZ1-8dgcNiaM8.roa (hash: 2rUs2SoRDiW7TeHLXoH00fOWIiSClvCYzvEbW1LWNms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e3:f8:d0:6c:7e:5c:e3:a8:2d:29:4f:b2:1e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=f89d67fda028494316e078060bed03d26a735a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:eb:7e:bc:9b:ba:67:db:32:99:8b:ea:1b:cc:
51:79:10:92:05:67:a3:30:b6:d2:af:5e:5f:31:d2:
88:6d:6f:67:1a:03:7f:fd:ed:c8:3f:de:64:86:9b:
0f:b2:7e:c8:7c:66:34:ff:a9:09:17:46:2e:69:e3:
08:50:ee:57:aa:dd:7c:d1:f4:82:e6:45:35:66:fa:
11:03:4a:e4:5c:fc:2b:a0:46:7f:07:39:dc:b2:c2:
5c:07:49:81:cd:12:cd:fc:64:48:17:0f:b9:e6:cf:
f1:d4:bd:82:54:d7:54:65:45:ee:2c:3e:13:c2:11:
cd:cc:15:51:26:66:fd:4b:f7:3c:a2:69:0b:1d:60:
dd:65:36:34:52:c3:97:1a:d0:4b:f4:02:9d:f4:81:
a8:23:ae:85:9d:15:c3:6a:52:22:9b:96:4a:0f:a5:
7f:fa:9c:2f:db:81:f9:35:79:53:ce:1e:69:91:39:
12:c9:1d:36:e4:b7:33:b6:b4:94:08:51:7c:5b:0a:
f9:00:05:20:8a:48:d3:81:07:18:16:b1:eb:3e:19:
97:1b:af:43:22:3b:b2:ff:40:17:64:c0:32:ad:dc:
c2:4d:8f:6b:9d:d6:6a:76:a1:1b:be:21:54:98:de:
2a:af:6d:b6:c6:5d:22:7e:9c:a3:90:18:e1:81:dc:
cb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9D:67:FD:A0:28:49:43:16:E0:78:06:0B:ED:03:D2:6A:73:5A:26
X509v3 Authority Key Identifier:
keyid:F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0c:19:3d:40:05:64:d4:cf:6e:45:5b:78:ad:21:b3:5e:11:
4e:fe:8f:8c:31:41:7c:8d:c6:5b:18:89:9d:46:35:d5:8b:15:
e0:6e:b5:1a:9d:ea:dc:3c:c9:e5:e5:50:f4:26:fd:07:a8:4e:
a2:15:f3:bf:4e:9c:51:a3:e7:d8:ff:1f:f0:5c:d7:e7:6c:31:
67:dc:ef:ea:93:93:cc:f3:3e:bd:71:bc:c0:8b:2c:45:51:30:
93:fc:0d:7a:3e:c7:9f:09:26:f5:de:ef:69:18:bb:6d:1b:d9:
44:45:4f:49:45:d2:86:9c:a6:65:74:7c:bc:90:49:37:81:f5:
87:6d:23:63:d4:af:6e:8f:f9:8a:a4:81:35:50:c7:21:36:b3:
6c:ab:42:f5:e6:f4:cc:2a:9e:e0:e3:a0:29:8d:99:e9:6f:6d:
01:b3:ff:f7:5e:5a:34:77:0b:fe:54:df:35:4d:0d:bd:65:61:
5f:92:f3:32:8f:9f:65:eb:a2:61:b5:e8:9a:54:5c:d7:16:8a:
05:e7:ad:40:30:61:f4:9e:d0:49:c3:71:2a:b7:b6:28:56:68:
8d:b6:bd:77:7e:54:24:e6:68:7c:82:d6:a4:be:61:68:e0:95:
84:e1:70:fb:f9:84:8c:cb:0e:83:f0:e3:ca:d5:ee:d3:32:8b:
9a:7e:92:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:02 2025 by rpki-client