Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
File: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft (raw, json)
Hash identifier: QjKJEzctZk++kiNp0Z1vQpGVk6CgfLGTteUezEsrWS0=
Subject key identifier: BF:CE:75:91:91:26:79:8B:00:1E:BE:57:68:C0:F4:77:7D:A4:F2:44
Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
Certificate issuer: /CN=f4b207ef8024244bbb4a0106af19270150c9f624
Certificate serial: 0194BCE0763251381F4D22CF522F17EA38F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
Manifest number: 03A1
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl (hash: thDf/04kGTtvmOqii2GHfpSIoY7U/mE6oVlgmGKksfw=)
2: zYg006i-1WUWweE30u-SYPbT9Pw.roa (hash: Z8k/zZnitgyMfHbzB0hfDTUSf1BlauNSPllDbsEjoIM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:76:32:51:38:1f:4d:22:cf:52:2f:17:ea:38:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=bfce75919126798b001ebe5768c0f4777da4f244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:1b:a8:fc:e9:18:7c:ab:8b:d1:64:b5:d0:
31:bb:d0:83:62:c8:92:c5:3b:21:c0:88:03:be:3c:
5e:57:ae:e5:30:8c:df:86:f7:80:84:54:38:d2:a3:
8f:a5:45:8f:ac:ca:eb:60:37:c2:3f:c0:98:29:d9:
0a:6a:3a:d8:ba:6a:86:22:05:da:1a:62:18:b7:fd:
14:87:91:41:d2:95:14:d7:14:79:5d:00:49:bb:4c:
eb:ad:a7:de:16:5e:06:32:6b:a7:5b:84:38:9f:06:
d5:2b:9f:e9:a0:b3:9e:82:f4:2d:ba:b5:2c:e3:54:
95:14:7c:58:3f:05:f0:42:23:6f:6f:9c:e9:05:d7:
bd:d3:6c:d9:aa:fa:66:db:b7:03:74:fe:51:31:ec:
20:11:92:15:af:fd:43:1d:ca:ee:1e:ae:76:ec:8b:
cc:17:6b:4c:b1:41:40:5c:eb:6e:da:73:e1:61:4d:
18:a8:d4:49:08:f1:1a:05:f5:c3:77:ea:10:56:9a:
59:c3:65:2b:39:26:9c:1b:cc:91:14:20:ff:26:9b:
c9:28:82:84:94:1f:c1:ff:39:ec:9c:77:47:bb:44:
dd:2d:d6:87:0c:22:d6:73:7d:99:d1:fb:7d:7a:61:
bd:58:32:3d:6c:41:d0:41:28:31:fb:ed:77:94:ea:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CE:75:91:91:26:79:8B:00:1E:BE:57:68:C0:F4:77:7D:A4:F2:44
X509v3 Authority Key Identifier:
keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:27:2d:b7:1e:26:f4:a0:11:e2:3b:d9:e8:6f:5f:d0:22:ee:
4c:6f:2c:d0:c0:54:d9:29:93:d8:4b:7e:e8:ba:86:5b:e7:54:
5d:4c:60:8d:1b:74:97:a7:a8:05:f3:57:ef:a3:16:fc:0b:f4:
4f:25:39:8d:3e:d2:ba:23:e4:8e:8c:f9:e7:0e:a2:9f:f6:11:
af:3f:58:c4:9c:e2:b3:b6:b3:52:8c:d5:66:c3:bd:4c:5a:de:
89:38:66:af:27:d7:f7:6e:76:77:ce:95:7a:c6:1b:e3:66:5d:
bc:5b:d6:34:a5:16:3f:e6:c1:64:9f:48:5b:a2:85:a8:bf:51:
06:1f:0e:21:a3:d8:1c:6f:57:31:03:36:b7:09:4d:9c:51:02:
69:63:1f:7e:3a:2f:28:b4:e9:0f:1d:9c:5a:d1:ce:dd:d6:1a:
5c:bc:8e:5b:81:f1:41:bc:9e:3a:5e:eb:44:1a:2a:9d:c9:e2:
13:ec:3c:46:81:cf:30:59:09:9f:58:80:86:dd:53:26:70:d0:
61:11:f2:ad:ae:1d:32:84:ea:72:f9:5b:e1:f3:d7:55:97:1f:
83:a2:8e:5b:cd:72:da:3e:5b:0d:45:fd:f3:f8:ee:e6:71:ec:
dc:f5:b5:19:33:ba:7b:ff:a4:b8:e3:24:c3:1e:07:5c:ce:ed:
df:a1:1f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:37 2025 by rpki-client