Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
File: 0mF9FdtY_jBi0brb4E0wwZSd1f8.mft (raw, json)
Hash identifier: nTylVJ2NV+KVX2TTtJ3XQCIGUsKHOnCjMUGyjY8FzeQ=
Subject key identifier: F9:A0:52:FA:25:F9:19:AB:A2:83:96:E4:4C:D2:13:F4:26:8A:02:1C
Authority key identifier: D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
Certificate issuer: /CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Certificate serial: 0194BD8594EA6D7EBC0445C7A861AC8C5AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: 0mF9FdtY_jBi0brb4E0wwZSd1f8.crl (hash: a0MxnN9SUUF1NEmBXN2kqHVEcpRdEQDwbeCnzArm+hQ=)
2: j-Iupp3EcWQfbMD2aDvdXh5buVM.roa (hash: vNF4TPFh0oVURLAenwqLDdq2RvvuTpEILFtX5lE+Y4U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:94:ea:6d:7e:bc:04:45:c7:a8:61:ac:8c:5a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=f9a052fa25f919aba28396e44cd213f4268a021c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:cf:b0:f6:a2:78:bf:f5:16:fe:19:7d:69:
68:fe:af:55:57:bb:2c:0d:b2:6f:ed:6e:f6:fa:72:
af:8a:a8:a0:8c:31:1d:28:9a:e6:42:40:6e:5c:32:
28:72:f7:85:7e:62:1d:bd:c9:26:aa:d5:85:b1:e0:
da:df:60:43:d8:3f:19:f2:ef:6c:c2:4d:21:70:75:
25:cc:4a:34:2a:13:59:4c:f1:9e:a1:4a:5b:ce:7c:
e3:9d:7d:b4:0f:85:65:10:70:1b:e9:9f:c3:51:77:
40:f3:7f:60:44:85:dc:d0:9d:2a:71:a9:86:06:c8:
f1:b4:9a:51:45:5c:4b:71:df:77:bf:fb:22:20:61:
1f:19:1e:02:8c:3a:67:bc:99:07:dc:05:de:1f:6e:
6f:67:1b:52:5d:70:92:8b:56:00:df:3f:f5:0a:67:
ba:c3:32:ed:a7:5f:bb:0f:8d:96:1a:f6:87:08:19:
76:2f:0e:f3:7e:55:f4:0d:1e:67:e8:4e:30:75:41:
99:bd:9b:15:1f:c1:51:87:47:a7:8c:f9:d0:bf:66:
26:4c:1f:9c:1b:b6:01:aa:ec:d5:e9:f4:2a:58:98:
8c:d7:d7:de:27:a8:e8:31:0c:88:66:f8:41:5a:9d:
56:46:73:c1:8c:d0:e6:a9:69:3e:bd:a4:8b:38:b7:
50:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A0:52:FA:25:F9:19:AB:A2:83:96:E4:4C:D2:13:F4:26:8A:02:1C
X509v3 Authority Key Identifier:
keyid:D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:eb:7a:15:b2:58:a2:92:a6:46:c3:a8:df:d0:81:bb:35:bc:
c6:dc:9c:a6:cf:d7:13:85:5e:71:4c:be:3d:c4:95:42:b0:77:
68:46:f2:63:57:d9:6b:cf:6f:7e:cd:b1:e6:90:b1:33:ce:4e:
80:9c:4f:b8:0b:1d:05:a1:f6:d5:0f:59:92:c5:58:ef:28:95:
77:b9:cd:3b:dc:c3:06:21:3f:aa:62:1a:e7:8b:9d:47:72:b6:
65:e3:21:96:99:37:d9:b4:2f:97:0b:20:57:31:d6:e6:4d:1a:
80:2d:5e:f1:d0:b5:58:31:cb:48:22:aa:41:f8:16:74:4d:42:
2f:c1:b6:34:a0:95:3b:f3:aa:a2:da:65:5a:18:e7:c0:e6:73:
9b:62:a2:93:e1:5e:e2:4f:be:9c:de:c5:b5:62:f7:b8:59:02:
b7:6c:a3:57:24:0d:6e:3f:df:55:5f:1b:e5:3c:f9:9c:ce:86:
78:23:3e:7d:9e:9c:49:e8:04:d4:ea:d4:02:c6:0b:1d:0a:32:
bf:e5:1f:e7:6a:02:23:a5:42:47:b6:3d:20:cc:dc:34:85:1e:
9f:33:3d:ac:1b:f5:ee:80:8b:9e:70:95:b2:db:6a:a7:00:c9:
37:c5:31:1f:30:68:56:ae:5b:3e:22:50:d8:7e:34:67:6e:5d:
86:7f:85:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:55 2025 by rpki-client