Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: vufYNuAxb0rft5F4WUix8WUvZwXjjjZ2oNjQKETL+No=
Subject key identifier: 65:32:F6:18:82:2B:FE:15:80:2F:3F:F8:B1:85:3A:98:3F:45:DF:58
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 0194BD4E5E47C0B7D16335B49BAA6D4CE93D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 08A5
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: bDessqjBwGFdBwo3yQAtMKWsOW7Jj0zwzL8Tu6ERs3E=)
2: KtAzNYXVImWMGMH8A6HLsIQbFYc.roa (hash: ltDvt7Ps4IWIzfc/uVIIbjH4kHjztdeIqznwfwNq8iY=)
3: X7mQYJCLCkSBMPn_lrSoI8KIXAY.roa (hash: qkjXPDtCPdPuWts7n2uaYetfDj2xIXD2HuaNsodcZ5o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5e:47:c0:b7:d1:63:35:b4:9b:aa:6d:4c:e9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=6532f618822bfe15802f3ff8b1853a983f45df58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:b2:df:68:02:23:4a:10:f8:5c:87:cb:6e:
cf:08:f6:74:42:b8:88:a5:ba:87:26:f3:91:d7:0f:
5d:04:6e:99:3c:30:79:3c:cc:d0:73:e3:b2:4a:43:
97:84:8c:fb:b5:04:cd:a8:c3:ce:2d:4c:68:39:dc:
15:37:10:e8:76:0f:2f:b4:3e:b8:3d:fc:33:b3:04:
ca:fd:58:88:ad:eb:bf:21:e8:a4:0f:17:3f:bd:18:
b5:fd:4b:1b:f0:98:45:7c:e3:39:66:7b:9a:46:d4:
b4:f5:29:1d:11:33:bd:2b:17:95:d0:ca:b8:2a:40:
f5:48:38:c9:72:93:b8:63:71:bb:c7:34:8c:7b:26:
08:78:a2:85:87:36:1d:ad:94:09:6c:40:78:a2:9c:
9b:f7:f5:c1:d0:61:8c:a6:4b:b9:5c:c3:17:0b:55:
d0:e1:0d:b6:19:95:f4:eb:53:78:08:a1:99:3b:9c:
f3:7e:09:ac:14:1d:ab:2d:b1:61:65:b6:22:f8:08:
33:12:30:2d:57:56:83:ab:1a:c4:45:27:a3:a0:64:
53:f5:54:99:ff:4c:04:e9:5c:17:a1:66:1c:78:52:
7b:de:7e:1f:b9:93:95:56:6f:1f:3d:90:04:6c:98:
dd:a5:70:02:0d:cb:05:f1:c6:91:e5:24:5e:9a:ab:
10:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:32:F6:18:82:2B:FE:15:80:2F:3F:F8:B1:85:3A:98:3F:45:DF:58
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:33:48:e8:ab:90:15:6b:11:e4:83:15:e0:9c:16:92:21:78:
99:61:5f:b3:f8:19:c7:03:cd:57:f2:c9:98:7d:65:8e:3f:14:
5e:bc:5f:f1:b9:69:e3:25:92:72:a5:ba:25:c2:d4:51:f4:ec:
d6:7a:55:6b:6f:64:28:9a:36:24:e7:a6:87:22:6a:b9:18:21:
d8:eb:f3:d5:1f:94:99:fe:6b:4b:4c:0c:54:8d:ec:b8:23:ab:
0e:03:7e:8a:ba:f1:dd:d5:e1:d6:33:34:0d:86:25:71:7d:fc:
82:07:52:6e:b3:e9:65:4c:6b:88:30:6a:8a:1d:fb:be:9a:5e:
e7:29:61:fd:79:e8:7b:23:c2:ee:63:3d:af:cb:be:f6:50:4f:
8f:53:51:54:7a:54:6c:f7:0e:87:00:30:a0:1a:0a:33:d0:6e:
60:e1:10:e2:4e:e9:a5:66:b4:3c:55:e4:27:34:3c:70:74:a8:
75:56:71:43:92:e2:33:17:b4:14:b4:d5:af:24:c1:2a:4d:ec:
48:22:da:67:00:57:f7:47:b9:cd:cb:e7:57:bb:d4:d4:9e:9a:
74:af:34:84:f1:a1:83:d3:51:d0:79:a3:ea:0d:f5:95:de:e3:
50:5d:dd:54:d9:d3:9c:7a:cc:1f:34:2f:ac:ed:8f:90:60:06:
1b:1b:82:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:58 2025 by rpki-client