Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier: eXsAHLcnkmc8St0QxTEpykL+w7lo7C+xiHiQYHnMT30=
Subject key identifier: 40:39:2B:37:7C:84:4D:8D:A4:97:78:68:A6:36:D6:87:58:F9:0E:77
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial: 0194BC04D549917DD44C826D05983EF6B69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: 6wW68rpEYT5imOHdAJC8iqYgH-8.roa (hash: 2OyXhc87+DnhsUi/Ak2VDrIMxn2fa0IaWGuzCLcLykQ=)
2: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: l2Yq5g0rN/g8VgzXOU+i4v7gjNCh/aR8GocGEGM+cXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d5:49:91:7d:d4:4c:82:6d:05:98:3e:f6:b6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=40392b377c844d8da4977868a636d68758f90e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d1:48:b2:25:61:0a:3e:62:5c:09:5c:64:bb:
3b:7c:cb:74:90:b8:d9:31:db:77:08:3e:69:4f:f3:
2d:29:7d:91:cf:fd:c0:3a:b2:e0:55:5f:2d:fc:da:
8f:6d:2f:20:29:0e:1a:9c:d5:02:d9:42:56:4c:e8:
26:bd:08:de:2b:61:54:4b:1e:77:7c:cc:d1:c4:44:
af:f1:bc:9c:65:9d:46:3c:bb:49:ac:98:95:9a:8c:
de:60:f2:8b:28:6a:a3:a3:19:df:73:aa:06:77:87:
93:01:2a:03:ac:73:14:41:8e:44:f4:b5:fb:ee:32:
c9:c3:14:54:75:ab:9d:51:c6:ae:78:8a:3a:72:bb:
6a:ee:a4:b8:b7:e2:66:8e:46:84:00:a9:4d:00:01:
ed:42:dd:73:26:69:ac:7f:7b:58:d3:54:58:78:12:
25:3a:bb:aa:5e:92:e6:d1:81:c8:3c:f4:ed:4e:d7:
f0:29:d2:2f:cc:b9:1c:9e:c1:a1:f6:e1:de:57:4b:
67:a7:d6:70:0d:83:aa:60:a4:98:37:c8:f9:41:43:
7c:ba:30:0a:97:e3:90:78:0d:b6:55:65:c5:1e:eb:
a6:59:96:1b:a1:dc:ab:d5:d9:d0:4e:c6:9b:ef:83:
f2:d5:4d:03:11:77:98:7e:16:e6:ce:c3:5e:36:3e:
23:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:39:2B:37:7C:84:4D:8D:A4:97:78:68:A6:36:D6:87:58:F9:0E:77
X509v3 Authority Key Identifier:
keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e6:e8:45:33:75:b7:f3:51:6b:46:45:8d:97:12:0a:ce:ca:
13:87:fc:1e:ee:a6:25:40:9e:9d:e3:89:21:53:39:01:3b:d0:
c9:56:2a:1c:65:72:87:90:36:7f:22:d1:56:00:e4:eb:b4:fb:
18:8d:ac:f8:a8:c1:0e:d2:6f:9d:4c:3a:21:67:8a:64:7f:c9:
60:1b:03:16:0d:d4:29:d7:e6:94:75:73:cf:13:15:b5:2a:48:
10:e3:a5:14:0f:5a:31:3b:2d:b1:4b:9b:b9:5e:55:05:f1:ae:
08:7f:9c:c8:84:82:42:e6:d9:f2:3e:be:2c:30:3d:d9:41:7c:
b5:5a:94:b5:64:be:b5:e9:de:ea:12:04:9e:1c:cf:7a:93:35:
82:a3:86:55:9a:c2:ce:50:ff:c0:36:c4:cc:fa:67:26:9f:b2:
75:44:de:1f:82:30:bb:3a:83:1e:5f:12:50:53:81:74:b2:af:
60:9c:00:c3:2f:3f:66:1b:86:6f:e2:2f:9a:51:13:12:a4:bc:
f1:3a:95:2d:2b:1b:db:2d:16:5f:cb:31:7a:f8:f4:70:9b:61:
c8:10:20:5d:46:5d:3d:fb:47:ec:86:f6:d7:99:e2:e6:76:f2:
a0:bc:ac:7a:e4:33:72:64:52:c4:de:e8:b6:83:f2:ea:ff:2b:
c5:94:5e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:37 2025 by rpki-client