Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json)
Hash identifier: fnIMpjGJe9q0dQ3Pp9wjO1flhlVi89xGHFzzXBv15f8=
Subject key identifier: 12:27:63:76:1D:8D:51:8F:93:73:E6:26:D2:2A:F7:4C:66:5D:DE:E0
Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Certificate serial: 0194BC3C477C7FCD10AF4D5247CE2D78FAED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: Y8SYvnk6jAQqNIyzb8xBRYF0T59ffBWzFR1AYAaIZcs=)
2: FNrF4gJ9GeSqn1QNR00c9Q4ygYg.roa (hash: 2ncm1gP0ao8l2RvVLkDskRllvyDwCE2AZXVvFGp+UKA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:47:7c:7f:cd:10:af:4d:52:47:ce:2d:78:fa:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=122763761d8d518f9373e626d22af74c665ddee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:de:2b:d0:70:69:91:9e:c8:66:3e:fe:e1:b6:
da:14:93:53:53:60:9b:c4:1d:02:a0:24:59:78:16:
ac:d3:b3:e5:93:62:60:7c:2a:50:d3:0c:e5:71:6d:
d7:86:a9:f7:04:2b:51:6d:ca:31:87:1c:a9:c7:f9:
a7:64:22:00:a4:c1:8b:b2:5b:71:65:87:13:61:48:
33:c6:e0:d9:05:e2:b1:d7:aa:33:97:16:01:7a:bc:
b0:cd:fb:18:7e:dd:74:68:30:5b:43:01:eb:bb:99:
2b:17:28:24:f5:2e:27:c0:04:aa:ab:98:c6:aa:50:
06:36:2f:ea:9c:4a:e7:d2:20:17:ed:6c:fc:25:0b:
44:96:81:c6:3d:c6:6c:c4:c5:3a:1c:b1:f2:f4:7a:
b2:4d:e8:c8:89:66:a8:0c:9c:b3:ab:a1:8a:55:90:
bd:3b:d5:63:67:09:0e:93:92:d4:d2:0e:9b:bb:4d:
c1:08:4c:05:df:1e:b3:a6:85:e3:11:f2:80:a9:3a:
88:98:b6:89:3d:68:45:d0:94:02:3b:dc:fd:08:a8:
bd:32:f9:c7:63:77:fb:18:e1:33:fc:71:96:4a:ba:
52:79:56:3b:20:38:a1:f4:30:ed:11:b4:18:bd:07:
e3:8e:86:d0:52:3f:26:ec:a9:d2:47:1a:60:da:b4:
7a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:27:63:76:1D:8D:51:8F:93:73:E6:26:D2:2A:F7:4C:66:5D:DE:E0
X509v3 Authority Key Identifier:
keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d4:52:cc:1a:9c:7f:da:fb:6d:28:56:7c:67:33:4f:8f:37:
0e:92:e2:08:60:12:30:84:41:ab:7d:a5:24:49:e1:22:22:c6:
f5:19:f1:1b:20:41:41:76:92:c5:1a:ad:86:29:fe:23:93:64:
d5:3e:af:31:e6:51:36:be:02:61:61:2c:d6:e0:4f:00:3c:b1:
e3:9d:22:67:8a:03:77:ea:31:be:e1:4f:e0:cd:6a:55:8d:08:
ab:3b:37:02:db:14:5f:8a:38:f3:8e:11:70:5c:db:4c:34:0b:
fb:39:43:02:e7:79:7b:1c:85:ff:1e:3f:b3:3b:94:4a:c2:c4:
da:1e:f9:a3:c9:5b:74:5e:aa:96:d6:8e:b7:1f:db:45:5a:ba:
0d:03:f8:2e:4e:70:66:e3:21:2c:cb:57:26:f7:43:9a:0b:05:
06:ac:fe:89:5b:53:16:b2:41:7c:40:a8:83:10:d3:3a:52:7d:
41:7f:d6:9a:10:f5:fe:cf:b9:be:0c:d4:12:3b:8a:d2:07:98:
b7:8b:b0:0b:9b:fc:50:d3:e7:a8:26:39:9f:5c:22:da:89:89:
e2:4c:66:cb:e2:bf:e5:e8:6c:e8:c0:09:e1:56:28:a2:0c:8c:
1b:f1:c8:73:66:75:a9:33:6f:d6:0e:98:d8:65:ff:9c:a1:36:
76:f1:c9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:47 2025 by rpki-client