Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
File: F9uL3_IuGjew9KaVNCS2UWmwNCk.mft (raw, json)
Hash identifier: nac+5FBO9WCI/Uah9sg8MkWNd3wtT5V1TCMSjWYFsBs=
Subject key identifier: 9A:2D:12:B6:56:BB:77:37:C7:A7:09:32:33:5C:B5:96:66:3E:65:A9
Authority key identifier: 17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
Certificate issuer: /CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Certificate serial: 0194BC7321ED90D0691CC117CA244D8092AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
Manifest number: 0B37
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: F9uL3_IuGjew9KaVNCS2UWmwNCk.crl (hash: Xy30W5v3VYPFV5IfhA3JtL5/QyE6Mztgf4VrD4h18fo=)
2: KNcCODBaDX2MFgjxBHddnmeDs1w.roa (hash: v5RHpNNKwnL8+b9d7xhZwKkWy+NYX2Itp+tps9r7KV8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:21:ed:90:d0:69:1c:c1:17:ca:24:4d:80:92:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=9a2d12b656bb7737c7a70932335cb596663e65a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:6f:e1:e8:35:8d:1e:c9:60:67:ce:84:3b:
72:0e:1a:c0:6a:17:33:1f:df:53:0a:b7:11:8a:13:
80:50:b4:cd:80:f8:59:03:7b:4f:84:67:cd:40:ca:
d2:5c:01:1c:03:f5:92:0b:8f:09:48:33:02:6f:d7:
77:7b:2b:0f:2a:e7:49:78:7f:e0:d8:b0:9e:d5:c5:
d4:49:81:4c:f5:69:ce:fe:a7:93:d8:49:8d:a7:84:
c2:8a:3b:05:3c:56:7e:65:9b:f6:ff:4b:5e:b5:72:
03:29:68:bb:f0:bc:dc:2e:6f:14:0a:e2:7c:8a:25:
fa:dc:9c:16:7a:9f:bb:21:08:ec:35:b1:99:ed:fc:
6c:4e:4d:ca:bc:62:cc:de:71:60:cd:c0:97:14:62:
c0:1c:23:ab:a2:77:dc:10:27:5c:ec:58:b0:c9:85:
4a:ee:3d:19:83:6a:b6:cb:1d:b2:f9:b4:e9:df:40:
e6:65:92:94:f4:a9:ce:c8:08:04:7f:72:1e:a9:a5:
ee:e8:d1:3e:9c:cc:91:ba:ed:35:da:9d:58:a9:a6:
17:53:a7:d7:5b:89:42:27:df:56:5e:63:ee:af:00:
40:c1:58:75:a2:c5:66:67:7c:4f:ab:c2:3f:07:cd:
88:4b:e8:df:fc:2e:41:08:ae:6d:b2:1b:08:d2:0f:
1a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2D:12:B6:56:BB:77:37:C7:A7:09:32:33:5C:B5:96:66:3E:65:A9
X509v3 Authority Key Identifier:
keyid:17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:34:1e:8e:26:d0:4b:9c:6e:fa:16:28:a1:05:91:2e:b4:9c:
da:53:44:40:35:1a:e1:7e:98:1f:ca:13:a6:aa:a5:48:56:95:
83:8d:48:63:f0:bb:10:2e:30:b9:c5:e2:dc:31:15:c9:36:2c:
e2:2f:01:fd:49:8f:62:1a:ed:88:3a:58:92:67:38:fa:01:78:
4d:00:50:fd:64:83:2e:23:6d:a3:a0:ae:b8:99:00:da:d3:e0:
e1:9a:f9:8d:64:0f:97:37:e0:93:23:1f:37:1c:95:ba:9e:f2:
cf:a0:cc:8f:f5:7f:73:13:13:01:75:ba:18:97:7e:57:91:2d:
d8:c8:6d:ac:c0:18:37:c2:b5:dd:50:eb:10:aa:f0:dd:9b:77:
3d:54:85:94:70:e1:91:0f:73:8e:3d:30:8b:68:8a:03:0b:42:
82:a9:64:1e:5c:9f:8d:b8:e3:0c:c0:f2:77:33:ab:d4:9c:92:
2d:c9:02:8e:80:ce:68:01:57:3b:12:d3:40:80:35:21:8c:3e:
e9:20:1e:4e:c5:fe:bd:4e:57:ee:d6:f4:7f:67:e5:00:50:2a:
fb:ed:5b:8e:eb:b3:35:c5:46:97:75:49:6e:ee:fa:f2:9c:08:
44:ab:e4:cc:d0:96:3b:a2:f1:52:6e:33:9c:f6:9d:92:59:57:
d5:b2:72:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:42 2025 by rpki-client