Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier: Sppx0EmnKR8ydGZ2E+mqY/92KeSYRxFFyM3YvTRpuU8=
Subject key identifier: 34:3B:2C:8B:BD:10:A2:77:0E:5A:97:46:6D:55:D0:B2:60:4A:6B:02
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer: /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial: 0194BC3C89A115CDB233FD225E49F5228DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number: 0B0B
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: qWF9d1ZbSYB2N9K0rfXDAhZW0RCo9Dv+0kO1VTryYsM=)
2: lTwG7fexEhfG1KlVMWVQwuwbbtc.roa (hash: bfD7+ofvPCOaA8CmUpbLhJtSVYv9giSBukJUfQkg6wo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:89:a1:15:cd:b2:33:fd:22:5e:49:f5:22:8d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=343b2c8bbd10a2770e5a97466d55d0b2604a6b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:96:9a:8d:ff:15:70:1f:47:a1:82:55:c9:
9b:fb:84:73:e0:e8:2e:a0:ac:d1:16:ce:dd:48:1b:
bb:03:95:e1:19:42:57:87:4b:71:c7:df:d9:39:f9:
bf:e1:ff:ba:a2:46:c6:2b:ac:62:cd:4d:ae:30:f3:
dd:3a:93:3d:c1:e9:3d:07:aa:b3:5f:53:a3:21:6e:
4b:bc:d0:51:49:37:2c:7d:dc:3e:60:74:0c:7b:c8:
56:ee:36:d7:49:f9:0d:17:42:02:8d:4b:b3:bc:5f:
20:b7:0e:34:35:ef:fc:43:83:ad:c2:82:c9:1a:2d:
20:84:de:ec:be:e1:79:ce:86:9d:97:4a:68:d4:6c:
de:81:52:9a:f7:3d:91:4a:42:f2:07:87:da:18:f7:
00:ed:d7:50:a0:71:d5:99:00:77:07:3b:36:f4:bb:
bd:a2:40:57:28:d8:66:4a:ab:b4:cd:30:3d:50:8b:
07:7a:c8:59:e8:47:52:ca:8f:fa:2d:e8:de:20:66:
2f:5a:91:28:00:de:9d:a4:1c:2a:7f:ca:aa:ca:3b:
20:0b:ee:85:77:8f:75:84:44:05:f1:f7:05:d1:40:
9c:33:b2:26:90:55:52:1e:99:9d:f0:7c:fd:22:0e:
0a:93:23:b1:e1:f5:50:2c:42:cd:ca:7c:3e:65:97:
48:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3B:2C:8B:BD:10:A2:77:0E:5A:97:46:6D:55:D0:B2:60:4A:6B:02
X509v3 Authority Key Identifier:
keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7b:f1:01:24:6b:6b:63:81:a3:9c:1e:52:d8:d2:81:43:7f:
a2:17:82:f3:d8:9b:e0:69:15:d9:7b:4b:53:2a:53:0a:fd:d4:
e7:92:f5:8d:45:fa:a1:c2:be:01:1f:75:75:fc:2f:71:31:07:
20:6f:94:a3:4e:e1:60:ac:78:c0:fc:5a:2a:be:52:ba:f7:dd:
37:3c:2b:8e:dd:f1:71:41:20:2a:2e:a7:24:a9:59:5d:2a:61:
71:ed:9b:8f:31:de:ff:e2:03:40:c4:07:67:23:7f:00:15:6f:
bf:7e:9d:49:a8:44:e6:4b:d5:b5:eb:0a:ee:7e:30:92:7d:aa:
a1:6c:eb:61:8a:7f:e6:a2:63:8f:bc:52:30:c1:46:3f:3f:81:
ee:0c:ac:2a:65:c9:50:91:19:58:dc:1a:5f:ef:6d:7c:e8:ce:
01:d9:74:9c:fe:d4:b5:ed:d6:aa:23:08:4e:db:55:53:47:4d:
3e:90:42:90:31:b6:3a:8f:c2:87:59:e6:01:32:f7:ac:bb:70:
c4:d6:46:56:74:60:43:a4:c2:2f:42:49:8c:29:4b:5d:3c:11:
cc:19:fd:72:b7:b5:d8:2c:ad:fd:2b:f1:55:ff:4d:17:d0:70:
7a:da:55:f4:44:db:fd:40:10:6a:50:86:73:62:8f:ec:d4:da:
e5:39:45:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:15 2025 by rpki-client