Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
File: 9p8HIQsohLT-pQe94id5WyZAYu0.mft (raw, json)
Hash identifier: QU2O1WhSLYMnXgr7WNOOXp/matK5leiAm9IcrEiYGN0=
Subject key identifier: 8E:7C:FC:FA:FC:D6:EA:E0:E8:DD:C2:2A:F8:A1:C5:61:02:6F:84:0A
Authority key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
Certificate issuer: /CN=f69f07210b2884b4fea507bde227795b264062ed
Certificate serial: 0194BC04A5190F928940375358F71C57D3DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
Manifest number: 0135
Signing time: Fri 31 Jan 2025 11:00:08 +0000
Manifest this update: Fri 31 Jan 2025 11:00:08 +0000
Manifest next update: Sat 01 Feb 2025 11:00:08 +0000
Files and hashes: 1: 9p8HIQsohLT-pQe94id5WyZAYu0.crl (hash: SXSgSCHez7YIKtVHeuUx89lBrjvTp3R2YGWj0o5Phs4=)
2: jYwiLy6C8PrH1zmVRebb5xoCcHg.roa (hash: B/91TwKxBsOKKHQE6s1Ydkjq/nj0hd3T+71Ppy1e7kI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a5:19:0f:92:89:40:37:53:58:f7:1c:57:d3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69f07210b2884b4fea507bde227795b264062ed
Validity
Not Before: Jan 31 11:00:08 2025 GMT
Not After : Feb 1 11:00:08 2025 GMT
Subject: CN=8e7cfcfafcd6eae0e8ddc22af8a1c561026f840a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:c3:d8:ab:c7:16:86:10:ad:88:21:46:37:
a0:4f:b0:66:0c:39:4d:f6:d9:87:52:a5:f1:74:64:
ff:9b:61:98:b6:4a:e0:eb:fc:8c:3f:d3:1f:ad:e8:
1e:fe:50:b8:ff:49:dc:88:81:d3:7e:9c:01:aa:96:
4f:ad:c7:55:3d:f1:82:e0:0c:b6:df:61:31:d0:d2:
f3:a9:7e:53:6a:3c:0b:0c:42:03:aa:b2:12:97:de:
5b:3d:5f:9c:5f:0d:5d:24:eb:88:e8:97:0d:68:96:
32:06:82:26:c5:d8:87:42:83:5e:42:f1:6c:7f:7f:
44:b3:18:56:df:88:c8:3c:13:56:6e:ca:f3:31:46:
1e:a9:8c:58:69:29:74:6a:59:59:74:bf:d6:ac:3d:
b0:1b:43:ba:5a:d1:ab:22:40:9f:b3:75:07:19:af:
b0:e2:83:62:a3:6a:07:c8:a3:e2:75:e6:4c:aa:9b:
cc:31:b4:21:fe:3d:41:64:5a:e0:ab:ca:fb:21:fa:
a7:5f:88:84:00:3d:32:fc:81:dd:2c:ca:87:97:8c:
ac:8b:19:a7:cd:91:87:fb:7b:a6:dc:53:12:a0:60:
ee:46:42:10:8f:2b:61:3f:35:21:9f:48:be:cb:74:
8c:6f:4f:63:94:76:12:a8:db:6d:fb:5d:47:3c:36:
cc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7C:FC:FA:FC:D6:EA:E0:E8:DD:C2:2A:F8:A1:C5:61:02:6F:84:0A
X509v3 Authority Key Identifier:
keyid:F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a2:d5:c5:6c:08:ee:15:eb:dd:d4:14:ac:5d:e4:ef:9c:2b:
53:81:cc:ee:e7:fa:49:13:3d:e2:10:aa:ed:d9:7e:bd:f2:31:
9d:bf:2c:11:f3:1f:3c:5e:f5:be:28:4c:a1:1e:bf:3a:8c:34:
f8:9f:12:40:4c:f9:64:db:75:df:74:77:cb:53:06:b5:c7:d9:
55:f4:70:53:22:ee:a8:fd:23:03:96:3f:e5:75:53:49:79:a6:
ba:62:8a:b5:23:aa:de:d3:66:de:ad:4d:85:f1:35:8c:66:7b:
91:89:b3:1f:5c:a1:3a:e3:21:82:8c:26:4c:5b:06:32:b2:6e:
33:65:30:43:f3:3d:4b:15:77:40:75:5f:59:f7:24:e8:1e:c6:
7e:45:34:7e:bd:31:8d:fe:7c:7b:dd:f5:83:1f:48:64:50:fe:
02:ca:f2:61:ea:75:25:26:f9:f3:44:2f:51:49:a7:4b:c7:95:
66:08:2f:f2:4b:09:e3:f6:86:42:11:4b:47:e5:6e:8b:f3:e5:
07:df:87:fa:89:43:9f:c5:97:8e:5f:95:d5:53:a5:a7:9a:fd:
90:01:0e:6a:68:d8:a2:80:25:71:80:37:b8:c7:ab:77:d6:f0:
76:30:55:77:c8:d2:00:d7:91:5d:40:92:ea:ff:d2:37:c4:c2:
a1:03:04:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:13 2025 by rpki-client