Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
File: 96WNGxKutVgzKN2lJdBphnS7He8.mft (raw, json)
Hash identifier: 9t5hSTA4ExBhey4nZ07Y2DUN4vokFFQsvDUrQ0ne2yU=
Subject key identifier: 6F:AF:59:64:DE:59:45:97:73:91:B6:D5:7E:99:B9:C2:46:A5:A0:11
Authority key identifier: F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF
Certificate issuer: /CN=f7a58d1b12aeb5583328dda525d0698674bb1def
Certificate serial: 0194BBCDD5BFF8B4E136545BFF2B42E3EF35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: 96WNGxKutVgzKN2lJdBphnS7He8.crl (hash: 5XsGNe0H9nBmKuY30Fw4WniZQtph/QjdkVVUYtd4WOk=)
2: T-ndwyW2lzOqFwfi0HlwvxGN6hA.roa (hash: SwBUiR0PUxgXxZT0VaCgm/zNAN819Fxo/yeUtptTXzQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d5:bf:f8:b4:e1:36:54:5b:ff:2b:42:e3:ef:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a58d1b12aeb5583328dda525d0698674bb1def
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=6faf5964de5945977391b6d57e99b9c246a5a011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:f7:79:f3:fd:12:f5:e9:3d:c9:e4:4a:66:
1a:9d:70:65:51:71:cf:48:69:5f:26:66:f7:37:b2:
2b:a7:bf:3b:bf:49:36:85:6b:cc:7c:ec:87:07:43:
6b:e3:6e:18:a5:bf:a4:57:f6:62:d2:7c:0c:73:ac:
fe:7f:fe:e8:1c:4d:e6:c4:d5:70:b4:10:f8:89:de:
39:cb:8d:fd:79:7e:f5:7b:ef:aa:c9:1f:44:53:39:
8a:c2:8c:b2:a4:b2:85:8b:ac:69:4a:50:7d:41:3f:
0b:77:99:ae:6d:12:e4:21:9e:85:fb:b7:8a:36:cc:
20:5d:9f:a5:ec:65:ce:9d:8c:91:d6:3c:36:5a:77:
ed:05:bf:8f:85:9d:58:63:12:a1:c6:5b:fa:e4:8e:
ae:09:53:fa:ff:c1:2b:05:fb:08:79:51:b6:2a:a0:
2f:18:3e:a8:bb:7f:aa:42:46:49:46:12:53:e2:c8:
3b:5e:31:48:ce:cf:e9:13:7e:5f:70:50:e2:57:bd:
a3:55:a5:fe:29:04:19:15:16:e6:bc:dd:2a:b3:d5:
18:cd:23:d8:6d:84:a9:a8:f8:56:08:46:da:15:29:
c7:88:33:1f:ab:59:91:c3:5c:93:02:36:0e:67:22:
a0:72:6a:5a:d3:c1:b7:e7:02:de:f7:fa:50:01:ed:
fe:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AF:59:64:DE:59:45:97:73:91:B6:D5:7E:99:B9:C2:46:A5:A0:11
X509v3 Authority Key Identifier:
keyid:F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:16:5b:17:4a:4a:fb:fe:c8:29:67:2a:39:a9:5a:4d:0b:fe:
3a:2b:1a:c0:7c:8e:06:c6:58:c9:db:cf:23:5e:78:02:be:1a:
e4:ae:fa:ee:85:1e:ec:1c:e3:f9:99:3e:fb:64:dd:a1:71:5d:
76:1a:8c:43:9d:08:3b:ee:f7:ee:9a:ec:9b:12:3d:3b:64:8e:
db:bb:f6:b5:1a:da:86:4e:7d:79:03:9b:00:0a:fd:21:b0:91:
96:db:de:6d:7c:8d:25:f0:45:36:8d:73:76:93:cb:b8:cd:00:
07:f3:6b:51:b3:fc:a7:00:2b:09:cc:a1:49:59:d4:c7:d7:61:
56:58:08:1b:08:21:b5:c1:6c:50:8e:58:fd:37:3e:86:47:b9:
0d:82:02:69:44:1e:1b:5a:27:a9:da:1b:65:ff:7f:22:0f:02:
b8:17:ca:ab:a9:64:1f:cf:f2:91:47:71:8a:1c:7d:00:7f:99:
98:32:41:13:16:ae:f1:57:fd:e0:cd:b9:a6:ae:70:94:35:db:
a9:ff:2b:ae:2f:59:8c:06:91:32:fb:be:54:5d:d1:5c:ba:bd:
67:c9:01:69:fe:97:31:37:67:8f:12:cc:42:af:89:18:4a:bd:
66:f3:62:9f:a4:14:6d:44:da:cf:4d:56:a7:0a:60:7c:11:4d:
1e:19:3e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:05:42 2025 by rpki-client