Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
File: 9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json)
Hash identifier: DAdEAgOwhpZEUB1U6NTAqkyyp4SSigiqzKKQJ96j3Ow=
Subject key identifier: A7:06:B9:30:78:CD:0E:9E:D9:E0:61:03:18:5F:4B:B1:CB:20:65:C6
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial: 0194BCE0DDA361E28314C1A7F88F8EF2981D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: J05HucOyxUGrJtUrN+g2y/diNifmYv8bWwQ2TsX9Hr4=)
2: LF_3HwZmRrCki2d-FP5TfnY-Yfo.roa (hash: OqUUHUSkyKdGpgaBU1hHW7IYtyTJfajGz9ID3t644ac=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:dd:a3:61:e2:83:14:c1:a7:f8:8f:8e:f2:98:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=a706b93078cd0e9ed9e06103185f4bb1cb2065c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:2a:8c:f9:0e:1e:b0:62:d3:97:25:cb:1f:
00:47:a7:e9:b9:b9:6d:bb:5c:b3:42:d7:7f:89:ce:
6a:9a:2c:3f:b6:f9:2c:34:87:bb:1e:ab:07:4e:8a:
34:ab:bc:8a:8d:9a:61:f1:5a:c2:4d:82:55:d5:32:
1e:c7:0e:67:07:c2:66:6c:e1:2e:7c:e7:f0:c6:bc:
c3:68:4f:5a:f4:bb:b1:02:65:2a:e7:50:eb:b5:4b:
a3:dc:22:90:a8:38:cb:72:d9:16:24:eb:30:35:b4:
2b:0c:af:5a:e3:e2:cb:61:3f:52:ae:4f:97:9c:08:
a1:78:c4:9e:6a:df:a2:3c:cd:8b:2b:db:d1:77:62:
08:42:b8:48:d1:13:7b:bb:a5:69:83:d1:7c:8c:02:
5a:93:8b:f2:15:c5:1d:2b:91:29:c8:c5:5e:7e:72:
7f:89:40:83:f1:7d:51:05:d4:2a:d4:ef:91:b2:d3:
4b:85:ed:47:6e:c8:ad:2f:48:86:e3:05:89:d2:40:
12:f6:ae:d1:db:cb:34:fb:e2:54:8e:9c:fc:4d:db:
1a:87:c3:d2:b2:bc:a2:94:99:ba:5d:5d:26:5c:1c:
b2:47:ea:c3:3a:98:04:f4:d4:30:67:26:d5:1d:96:
73:14:03:36:1a:aa:b0:39:0d:f1:70:db:d9:dd:f3:
65:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:06:B9:30:78:CD:0E:9E:D9:E0:61:03:18:5F:4B:B1:CB:20:65:C6
X509v3 Authority Key Identifier:
keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:62:51:69:aa:c3:f8:a1:a3:a9:62:bb:d2:a2:f4:68:44:a6:
96:87:00:8a:40:5b:b2:2f:cd:4b:be:b2:f6:a5:30:cb:60:c9:
ca:b3:af:13:3d:d4:94:b8:9f:66:e5:c7:cd:73:36:3a:47:ce:
bc:2e:28:46:7a:45:53:dd:d9:a6:cb:d0:03:a6:1e:13:7e:6f:
02:07:aa:66:42:25:2f:05:82:eb:1e:f9:d2:ae:b1:16:e4:2a:
09:fc:0e:e5:f6:34:fa:7a:7b:b3:2e:44:b5:98:b5:58:e5:92:
16:28:03:7d:64:75:58:88:01:15:06:b1:c0:9c:5d:01:8b:06:
2a:74:70:88:9d:d9:57:5d:78:6e:26:05:9c:95:6e:70:bd:1d:
06:b9:a3:91:6d:73:18:76:d2:f0:80:44:bf:27:d0:3a:8a:85:
bb:b6:a1:4e:0d:d4:62:3e:56:4e:72:6a:d2:5a:dd:c2:c9:e2:
6b:24:0d:3f:39:5e:48:c2:54:cd:83:07:5e:76:65:58:5f:0f:
85:0a:7d:04:b6:86:24:cc:dc:f6:c1:57:a5:bc:8c:3e:25:1d:
e9:dc:8e:a8:de:ac:7b:20:ed:20:9a:b1:c1:d2:ad:97:1f:9c:
31:dd:8b:9c:67:0d:fb:59:ff:b3:11:51:f5:e2:8f:84:3b:1f:
1d:74:23:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:02 2025 by rpki-client