Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
File: m9bIYDQsx5nCgHT2mXaKjsvapS4.mft (raw, json)
Hash identifier: Hp3WQbVJMbj0rRvltzQKxlFigY/gV4263lj2+nP9XQo=
Subject key identifier: 5C:AE:5A:DE:9C:AF:D2:82:2E:CF:14:E8:41:70:DD:EB:10:06:E0:E4
Authority key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
Certificate issuer: /CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Certificate serial: 0194BCAA3067395DCAEB998B463C7673F8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
Manifest number: 11D1
Signing time: Fri 31 Jan 2025 14:00:57 +0000
Manifest this update: Fri 31 Jan 2025 14:00:57 +0000
Manifest next update: Sat 01 Feb 2025 14:00:57 +0000
Files and hashes: 1: E9yjq7sNmTyPb-NC6kzqBRLzrkw.roa (hash: Fv8DNDjTn+xqZTnmPhsaO+M3G5osAwVvGy2YaFQtoP4=)
2: m9bIYDQsx5nCgHT2mXaKjsvapS4.crl (hash: J+AvT7tF6qDWkqRrAW1GpGqdYRemwGD8IP38bNOOfn8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:30:67:39:5d:ca:eb:99:8b:46:3c:76:73:f8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Validity
Not Before: Jan 31 14:00:57 2025 GMT
Not After : Feb 1 14:00:57 2025 GMT
Subject: CN=5cae5ade9cafd2822ecf14e84170ddeb1006e0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:31:16:e9:6b:10:2f:f2:ef:11:66:0d:cf:
dd:73:9f:c8:bd:12:96:23:36:45:48:36:db:26:a2:
34:35:55:e2:f0:47:91:9e:ab:e4:73:58:1b:df:5c:
90:68:bd:7a:1e:76:00:e4:9f:ce:fd:4e:b4:17:a3:
f9:4d:14:46:5b:d5:4b:27:61:38:bb:77:bc:9c:df:
98:68:b9:ff:c9:e8:00:2b:08:01:ab:f4:6e:b1:dc:
e6:51:b6:5b:b0:7b:81:4a:b0:88:4a:60:ed:15:f5:
70:1f:f5:c5:2c:0c:00:33:f9:58:2b:2d:9d:45:73:
8b:38:23:05:a0:3f:ee:0e:50:2a:d7:62:33:5a:43:
2e:44:3d:69:f9:c8:34:8c:05:db:e0:65:bf:35:50:
11:4c:c3:df:3b:94:69:cb:4e:72:bc:e4:5c:b8:af:
e7:8e:5f:98:5e:74:c6:bc:23:40:98:10:69:7f:9e:
fc:22:cd:ed:04:34:2b:53:64:ba:f2:3f:c7:e4:18:
f5:cc:54:19:a1:38:9a:c4:9f:08:36:10:35:28:4e:
93:a7:f2:91:4f:82:cc:b0:64:be:dc:5b:db:e1:eb:
13:4e:28:60:a2:7d:51:e5:fe:48:fd:7c:66:3b:dc:
5e:15:6b:3a:8e:1e:2a:7b:6e:79:53:64:77:42:96:
d2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AE:5A:DE:9C:AF:D2:82:2E:CF:14:E8:41:70:DD:EB:10:06:E0:E4
X509v3 Authority Key Identifier:
keyid:9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:70:f5:b2:da:54:ce:45:03:5f:1c:d1:1a:48:d8:b6:45:75:
d7:16:32:47:cc:27:7a:63:d5:58:bf:4e:bd:cf:93:c0:69:03:
17:dd:4c:8e:dc:5b:6a:d1:d7:e9:26:dc:ad:87:d0:80:b1:00:
ab:1e:71:76:c0:15:34:4b:9a:08:92:22:41:3e:7d:bd:96:89:
ac:c1:68:1f:49:fe:d2:dc:f7:d7:2e:95:1e:cf:b2:35:39:8a:
df:16:c6:8d:07:4d:a2:7c:52:63:10:d6:ec:2b:b6:6d:b8:c2:
52:ae:f6:8f:3b:7e:54:b8:bb:d8:5a:84:05:fc:dc:6e:85:10:
35:be:d1:b0:6b:54:09:57:45:89:73:3a:9a:d9:c9:b7:c2:5e:
46:fd:4c:f9:b6:f9:08:34:51:ba:9d:e5:fe:c6:eb:65:c5:b4:
d4:a7:1b:4a:f0:db:46:1a:f4:8e:01:c0:05:f3:4f:f7:53:b1:
d0:b3:c1:4b:74:fd:f0:56:0c:1d:c0:a3:4c:f3:2b:a8:fc:45:
44:cd:a8:64:a8:5f:92:4a:4d:b6:3c:8b:11:92:c2:a9:ba:96:
4d:78:b3:35:ca:89:38:c9:bc:7b:80:06:91:66:f1:b3:73:cc:
3f:f6:7b:ad:73:71:bc:79:2d:77:5c:7c:f4:26:cf:0b:3b:c1:
10:97:9c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:38 2025 by rpki-client