Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier: 3/bTOBowhR3Bh8TYrkIUYfAuVH2t9cooFDChZAGqSZw=
Subject key identifier: 3C:4C:B5:99:03:8E:C6:E6:2B:45:52:3D:2E:F3:24:4C:09:FF:C9:EE
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial: 0194BBCE0C4348A2AE113D1690A42D128707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number: 13B9
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: lgDF8Ex1URtVuH7tYex1eXHibG3Ji/GPMVVdy7eRKRs=)
2: opYZOi4k9YDcS_3foMnJJa-4gCI.roa (hash: VbpgC06Lnc7NWswjuIad3/ZduRJ+GtOZh31gorgG7Xk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0c:43:48:a2:ae:11:3d:16:90:a4:2d:12:87:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=3c4cb599038ec6e62b45523d2ef3244c09ffc9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:ca:4d:92:3d:f9:3c:87:44:dc:ee:14:c7:
5f:16:1e:7a:bc:82:b9:4b:da:a3:84:33:49:05:0d:
b2:87:9f:7d:85:b3:3b:f7:d8:f8:55:3b:55:63:a1:
9d:ad:59:17:24:c7:12:32:c0:4b:bf:e5:f5:99:1c:
80:a9:7d:91:86:9a:ba:e7:2b:b7:3c:3c:93:7a:45:
07:d6:b0:21:98:eb:1b:fe:6b:92:a1:f1:42:9c:6c:
16:f5:06:13:f0:2d:31:08:3b:cc:2c:54:e9:7e:19:
0e:ea:10:ee:0e:3f:49:f0:cd:56:73:c2:0c:f0:4b:
23:3e:4b:9d:e7:48:d6:6d:a4:de:4d:1a:b4:72:be:
20:44:d6:1a:62:5f:75:47:18:ff:04:db:ec:ae:5d:
7e:eb:f8:de:2a:11:d8:5f:e9:b0:26:2b:33:c1:e0:
be:09:b8:38:e7:84:8c:d9:7c:b4:c5:b7:8d:57:94:
fd:43:6b:46:15:b0:ca:81:78:42:10:f8:68:be:3d:
0f:2a:d9:92:69:8b:d8:1b:eb:56:60:21:37:05:5d:
c0:b0:08:ac:2a:11:65:06:c6:44:68:ac:ae:6a:1d:
47:62:e0:4d:7e:fd:83:22:e3:56:05:6d:4d:c0:0e:
cc:82:2a:f6:d2:23:9d:cb:5d:b8:cc:7c:a2:6b:02:
fa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4C:B5:99:03:8E:C6:E6:2B:45:52:3D:2E:F3:24:4C:09:FF:C9:EE
X509v3 Authority Key Identifier:
keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9e:5c:f6:5c:d2:12:aa:91:e8:a1:e8:59:1d:67:8a:1b:cd:
c4:4e:5d:03:91:bc:1c:23:ca:0f:ca:eb:92:11:4e:be:b7:58:
ad:88:e2:53:81:4f:0b:a0:be:ca:62:fb:b4:d2:40:80:34:3e:
71:b6:dc:25:92:ad:c5:29:7e:38:c3:43:cd:0e:70:89:1d:6b:
8f:d7:34:6a:ff:ca:02:48:85:18:b0:2b:89:5b:d2:cf:1e:1a:
be:89:40:70:ec:7e:ca:4a:bb:f5:7c:ae:e0:d7:51:bf:9d:ec:
d0:f6:d7:5b:f3:45:6f:8d:66:57:9f:8a:c4:37:ab:09:1b:bb:
05:db:dc:01:78:70:d5:5b:c0:22:a0:70:36:d0:d4:18:70:ae:
ac:23:08:65:cd:9c:bb:76:46:02:a2:31:4f:fa:2d:90:b6:80:
d9:ff:6a:b0:67:45:02:89:1b:a4:8d:0f:37:05:f6:32:e6:86:
c4:b1:05:b5:78:22:3e:be:4b:98:91:be:11:10:69:93:a0:b4:
f2:24:fa:2f:d9:ed:ac:9e:25:79:a9:7c:0d:f9:50:29:ab:2d:
fe:70:ac:00:e7:e5:cc:f1:eb:97:44:dc:8b:39:2b:9a:68:66:
ac:cb:28:cc:46:b8:0e:fd:5a:a7:33:67:ed:af:78:b8:52:76:
c4:1b:4d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:28 2025 by rpki-client