Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: pya6nfxjwTc35wThf6tB7lJARBmwL6djGaHlU3qEkzo=
Subject key identifier: 89:7F:B0:A6:17:DD:A5:03:77:7E:8A:6E:D9:61:0E:3C:3A:92:03:38
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 0194BC3BDFDB4FAEC7EDAE84E5DE518F6156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 0AF6
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: oUmuTP4b8KQwbL0OKGAjp2o4S99avyJ+Po0+pcTFHT0=)
2: YyGPwu-_r-eFoNX2ZTx6n9Sl7sU.roa (hash: iag5NIeY+dB9ncpa+rQd04Kk2wb7pISvllYkBby24Kg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:df:db:4f:ae:c7:ed:ae:84:e5:de:51:8f:61:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=897fb0a617dda503777e8a6ed9610e3c3a920338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:84:9e:d4:0c:98:e8:72:58:65:1b:04:97:58:
ce:8d:c3:84:87:2a:ba:db:83:6c:33:c1:85:ae:92:
a5:37:6d:2a:0f:5b:26:9d:3f:5e:c8:31:34:be:5e:
ca:3c:67:17:a1:e8:e8:e9:12:45:98:89:b8:ba:4a:
b3:91:54:68:e0:b5:86:8c:37:81:e5:59:55:1a:b7:
1b:1a:53:93:76:db:28:3c:33:9b:7c:0d:f9:8c:6e:
5b:c3:db:ac:9c:27:fb:93:fe:fb:f4:ce:b8:e8:97:
ad:b9:ad:fc:9a:d2:7d:68:45:1a:40:c3:73:26:b6:
32:71:4a:e2:9f:2f:3c:c1:56:73:7b:ba:c5:68:10:
82:56:99:b2:5f:02:45:47:cd:5b:4c:aa:80:b6:d2:
c7:4f:05:6f:fd:a6:3d:84:3a:04:06:c1:1a:c5:fb:
01:9d:1c:78:e5:d4:49:2b:66:6f:f2:c3:49:da:fc:
bc:8f:56:77:e6:5d:3a:b7:04:f1:a4:aa:ee:d0:f7:
c3:76:d7:d7:21:64:62:26:8a:bb:b3:74:11:06:56:
35:b8:a6:b8:f9:a7:28:80:23:18:97:ca:bd:8b:3f:
28:84:0d:f6:14:9f:6c:21:0c:b2:1d:4a:d0:8e:96:
ca:93:5a:62:85:1a:20:d2:e7:97:ec:a7:1e:b3:1e:
f1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7F:B0:A6:17:DD:A5:03:77:7E:8A:6E:D9:61:0E:3C:3A:92:03:38
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ab:e1:81:c3:52:8b:72:35:43:6f:9c:3a:38:94:2b:8a:09:
e1:9f:03:52:92:9f:c9:5b:64:94:80:41:88:b4:ad:06:d1:85:
48:32:8c:b0:ec:eb:e9:a2:79:1f:60:5d:fc:4c:ec:2d:dd:f5:
e0:49:49:35:48:b5:b6:83:b0:4d:30:55:a3:f3:60:4d:70:1c:
fb:a6:66:c8:13:e6:14:9f:b4:ba:ba:99:ec:79:a2:45:c7:c2:
37:64:37:59:e5:d7:a8:41:f4:87:cb:29:b2:4b:be:98:61:19:
be:db:fd:9a:8f:af:8e:c7:22:e7:36:12:31:7a:bc:ec:2b:8d:
70:4a:1d:7a:99:3a:63:bb:a3:94:32:d4:b3:87:8d:75:f4:a4:
81:af:5b:02:28:ef:77:45:1a:50:82:97:1a:a6:d8:92:12:5b:
37:98:40:68:17:1c:e9:ba:9d:a3:e4:11:a7:12:5c:68:39:d0:
71:f7:78:06:8d:54:b2:d4:8f:28:58:8f:4c:bb:39:26:de:d1:
82:62:04:bc:82:b0:81:59:05:d5:36:42:fc:ec:8c:be:66:80:
a6:0c:a5:d0:af:24:8f:ef:40:13:5a:37:d6:cb:2e:56:f7:80:
f8:b6:a8:d8:07:0e:7f:e4:6d:7b:15:17:e9:89:27:6d:56:9b:
a1:cc:7e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:33 2025 by rpki-client