Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
File: 1-V9aNXOMMini9DlFAMMiyCdal6I.mft (raw, json)
Hash identifier: jDVtlu/xBSAee9ny7/X9MkXE8WNq86mYEZ/dP8VzcZ4=
Subject key identifier: FA:5A:F0:67:92:9D:92:A9:E4:6C:92:B2:23:33:45:1B:53:EC:EE:80
Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
Certificate issuer: /CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Certificate serial: 0194BC3BEA5B4F274631840FB646957A19C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
Manifest number: 115F
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: 1-V9aNXOMMini9DlFAMMiyCdal6I.crl (hash: ZE9BwT+FGZnqrKb3cCNgU9fAQVaz9QXU3lYaq9urt0s=)
2: k_l8rtQi2P6fa9dQhkQ5j5jaCYE.roa (hash: sMo/6l6OJgyWFVqU8cFbnDYPktbERaDpmId+0GVplIk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ea:5b:4f:27:46:31:84:0f:b6:46:95:7a:19:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=fa5af067929d92a9e46c92b22333451b53ecee80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:35:8b:4d:c1:f3:58:6f:81:a2:66:08:e5:
a5:0c:d9:32:e6:a7:14:e7:03:23:a5:d1:f9:96:e3:
77:a8:5d:c1:4f:c7:c5:8a:1f:89:20:bf:a8:1c:70:
27:26:aa:21:b3:24:d9:2a:f8:ad:8f:3a:47:f2:e7:
3f:04:75:fc:76:c3:10:93:05:f6:4c:cb:99:99:1e:
98:9d:7b:ed:6d:a1:b3:96:46:5e:fe:14:2c:63:1d:
bb:8a:d3:b6:6c:4e:74:7a:88:1f:20:32:d0:0e:88:
0a:01:0e:a2:fc:67:b8:bd:4b:93:44:0f:d1:d3:8c:
85:55:d4:18:c1:ef:d1:7d:e8:7e:10:dd:1b:bc:ca:
6c:d1:8f:77:96:cc:14:1e:45:2a:3f:53:b6:33:80:
5c:be:2b:73:20:7a:a3:65:e8:41:50:a7:54:83:d1:
e3:fb:41:ca:16:5d:c9:0c:98:5b:8d:af:8d:30:ef:
3a:70:a2:b3:e5:a4:2f:99:b0:4d:33:8f:50:18:9f:
c5:0c:27:44:10:f3:b8:75:96:55:47:13:19:e6:f0:
6b:63:fa:7a:b0:12:fb:75:f4:1b:46:70:56:96:49:
eb:e3:e3:9f:cf:f5:ad:08:bc:d3:66:39:67:e9:40:
08:9b:55:ce:44:1f:db:17:e6:f1:48:e7:4e:1a:74:
36:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5A:F0:67:92:9D:92:A9:E4:6C:92:B2:23:33:45:1B:53:EC:EE:80
X509v3 Authority Key Identifier:
keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4e:9b:5c:21:e3:3b:52:91:23:f5:57:61:e1:e3:e7:5c:59:
37:b5:a7:38:4a:31:2f:88:9d:7b:5c:32:2e:c9:3b:b9:2d:f8:
2b:fd:a8:53:8d:6a:44:ea:6e:63:83:61:e0:5a:a7:5a:c9:13:
a1:48:d1:4c:51:e2:7f:48:c7:66:63:11:de:05:ec:dd:ff:38:
37:a1:d7:ab:14:4b:98:84:bb:87:e7:e3:0e:fe:06:ad:3e:ed:
93:63:58:0d:13:f6:14:8c:8e:71:56:a6:1f:d5:a8:5f:d4:e0:
f6:1b:24:c5:31:06:e3:0b:35:4a:28:51:9b:63:53:42:19:d2:
da:29:0e:de:c4:29:76:b0:7e:bf:ca:15:ea:6b:03:c0:af:3d:
62:3c:32:9e:0f:35:8d:04:de:e2:dd:73:5c:7d:d1:ad:55:42:
21:92:0a:62:1a:61:46:d1:d0:db:86:96:45:89:ce:ca:cc:85:
f8:0c:08:c5:06:2a:d2:cc:33:f6:2c:8c:41:70:f8:cc:12:93:
ce:ce:4d:c3:d4:b0:11:2b:a6:eb:ec:e3:62:43:08:74:00:89:
14:81:a8:c7:8c:48:2d:e0:b8:03:81:bc:4c:7f:51:20:ec:7c:
ff:42:c9:63:fc:1f:71:b6:8a:6e:0f:03:b8:d4:4a:7c:77:94:
6e:26:34:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:27 2025 by rpki-client