Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: XqA8S6FUBcQLlHrcz76GD09umi0cV98V3wYpwHrKslM=
Subject key identifier: 37:6A:31:D6:A1:AD:00:0C:21:EC:D4:77:B9:B1:1C:2E:23:5B:38:7D
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 0194BCA9BEA78A6BF9427A2C00B368FAB19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 13E9
Signing time: Fri 31 Jan 2025 14:00:28 +0000
Manifest this update: Fri 31 Jan 2025 14:00:28 +0000
Manifest next update: Sat 01 Feb 2025 14:00:28 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: 4c7LR5K2YIw5Q8yd+MFaax1FzW3SvuxSvE3GnZfG5oc=)
2: 1-kqFnbhB2LCPJU3KtgP3OhHNEbM.roa (hash: sYai5O0I+e4s9fEjeNx81CRmECPgFmQDJeWhDrbRAeo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:be:a7:8a:6b:f9:42:7a:2c:00:b3:68:fa:b1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Jan 31 14:00:28 2025 GMT
Not After : Feb 1 14:00:28 2025 GMT
Subject: CN=376a31d6a1ad000c21ecd477b9b11c2e235b387d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:c7:28:22:e3:1b:0b:89:31:4c:1b:e6:e9:
ed:91:d8:ab:3c:11:5a:80:ac:19:3e:90:7c:9a:40:
3e:e2:1d:ea:ff:a4:41:87:f8:f0:49:10:df:84:6a:
f4:83:7d:97:61:cf:3b:f4:18:9a:1f:d7:14:e9:2c:
2e:53:0f:52:69:f5:54:84:19:69:b5:94:2d:8f:6f:
9f:c8:36:a4:20:e8:84:f4:f9:f7:00:7c:ef:26:ec:
6b:30:eb:36:58:1d:97:a7:3e:3c:3b:7b:a7:a3:20:
38:57:a6:20:60:95:4c:ef:6a:26:ed:28:b9:ae:a7:
7d:f6:27:e6:bb:c7:db:b1:c3:d3:d0:71:4a:7c:a0:
30:c5:0f:46:fa:af:7a:31:6e:ee:ab:a5:41:14:7e:
bf:3e:20:d9:0b:45:15:15:8b:7d:e4:10:ab:65:10:
83:f0:fa:29:de:87:6c:a1:93:91:b9:82:21:d0:c7:
81:87:e6:91:7c:55:61:87:86:1d:b1:6f:b5:74:08:
4e:14:ff:bd:c5:ee:f5:b5:9e:57:93:1f:70:fd:ce:
c4:c0:85:1d:c2:3d:32:75:b9:d0:4b:3c:90:3e:cf:
12:66:9a:dc:74:3b:eb:78:fe:34:65:e5:56:43:72:
d4:d5:03:9c:11:5a:3b:1f:b8:44:b4:d6:31:2a:bf:
b6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6A:31:D6:A1:AD:00:0C:21:EC:D4:77:B9:B1:1C:2E:23:5B:38:7D
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f4:08:27:5d:de:28:b0:f4:a2:b3:25:94:aa:6b:6b:94:cc:
b1:db:5f:74:08:11:cf:27:5e:44:b2:ea:87:f3:ee:17:82:5f:
49:06:69:13:49:60:6b:49:61:b8:51:eb:f3:a9:ca:04:2b:94:
47:ce:4a:ed:d0:19:c4:9a:53:25:d8:10:b5:4a:d5:8a:6f:2f:
5a:20:b1:1f:12:2d:37:16:60:35:fd:10:17:63:a2:c7:48:54:
75:b0:ae:7f:b0:fb:4d:94:d5:10:97:3d:a3:56:27:0d:81:75:
5b:ea:4f:af:a4:fe:15:36:8e:49:cd:ce:0e:9b:de:f3:62:17:
b7:1b:5c:2e:5f:4d:ca:5d:b5:fb:cd:29:41:31:88:8d:48:fe:
bd:df:20:17:66:ef:ce:bf:c6:96:ef:7f:3f:75:cb:cb:25:5c:
07:48:c0:2b:14:f1:13:7a:2e:5b:29:b2:87:9e:31:e7:41:09:
3d:f7:f0:2d:79:57:e1:1f:75:92:b7:7d:bb:5e:d1:ec:40:ad:
65:46:02:6f:9b:0d:70:97:82:8d:ea:4e:f2:c1:56:61:6c:4e:
38:84:44:c3:d6:8a:9e:9b:e7:b1:2d:04:73:83:73:6c:02:87:
9d:f5:d0:2d:bf:94:41:59:86:aa:03:30:f0:71:a1:47:5a:1f:
e7:c1:94:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:00 2025 by rpki-client