Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
File: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft (raw, json)
Hash identifier: UsRnM4tXvKLOPCTteT5OzqLPRvp0sAxK1AFPKEFC/tA=
Subject key identifier: A2:F5:03:09:88:A2:CB:65:1F:C6:5B:7D:C6:4C:05:03:01:58:9E:D6
Authority key identifier: F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
Certificate issuer: /CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Certificate serial: 0194BC72C212B105D6768BF56D47B26CA4EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
Manifest number: 1436
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl (hash: Gua982JYbX+jZ61/mJ1C10l5stC0QRVA6RH94HyI40Q=)
2: ZSBBy6W5L8TTtnlSf_uUrt4Z7AI.roa (hash: jFdtASpUm3buRvq9o0f0zIeX/wlw5jgk9wy5omlh1/w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c2:12:b1:05:d6:76:8b:f5:6d:47:b2:6c:a4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=a2f5030988a2cb651fc65b7dc64c050301589ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bd:04:80:95:6d:bb:47:4a:d5:b5:77:a8:45:
26:d2:56:b6:62:73:4c:18:d4:09:b0:eb:9e:d2:61:
57:9b:44:72:1e:7a:b9:08:c7:a2:21:f0:2c:73:b2:
5c:0e:31:7f:8d:aa:2f:6b:49:52:d6:40:cc:b0:96:
18:6b:cb:eb:4f:fd:6a:f2:0e:52:f7:cb:a4:64:32:
ec:80:8a:e0:b8:5f:02:a0:fa:2d:86:da:55:f4:3f:
9c:cd:e8:72:35:14:fd:41:cb:32:cb:47:b8:f1:95:
f1:8e:fb:f9:a5:9d:50:ab:5c:ba:36:ef:be:55:e7:
0a:a4:46:1b:5f:cb:b3:42:d2:14:57:c8:73:f2:42:
02:c4:67:33:11:02:37:0e:51:b8:8c:e7:54:13:70:
0b:81:4f:61:9c:4e:78:a7:c2:eb:ba:3e:50:eb:4e:
66:25:92:b7:e6:c4:30:f4:63:61:30:1e:1d:0b:9a:
d5:ef:8c:b7:2c:b6:cf:68:40:b3:ea:2e:91:40:b4:
83:6f:bd:f5:f7:0c:92:a9:35:4d:4c:9c:56:79:6d:
89:ce:53:8e:f0:52:ac:ac:eb:b6:77:41:76:4f:ef:
59:f9:c6:fb:6f:04:3d:84:2c:db:23:c3:fa:f2:01:
c3:72:40:63:bc:df:2c:d9:3b:b5:ae:0e:fd:ac:c5:
fd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F5:03:09:88:A2:CB:65:1F:C6:5B:7D:C6:4C:05:03:01:58:9E:D6
X509v3 Authority Key Identifier:
keyid:F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:35:6c:e8:2c:3a:b0:00:31:db:15:6f:ef:41:83:2e:f3:6d:
b3:3e:30:66:09:1c:d4:9d:e5:dc:04:e1:c9:63:0d:78:a0:22:
8c:af:cf:06:f7:e0:8c:6a:2b:9f:99:4b:51:9f:65:7c:1b:41:
7e:c6:95:36:cd:af:9e:bd:e9:59:6b:97:d9:f3:1d:a9:5f:f6:
ae:7a:b0:7f:f8:88:26:82:a5:db:4d:ff:98:3d:5e:1f:e4:39:
ed:e5:3b:e9:58:f5:07:3a:95:38:45:80:f3:8f:63:c8:fe:9d:
49:d3:46:b5:23:75:77:65:9b:67:ce:cb:da:5c:94:15:18:c8:
89:d5:7d:f4:eb:be:94:06:64:8e:37:45:ae:cb:09:c4:90:23:
97:1b:9a:68:78:64:e7:a5:47:69:5d:ed:ad:84:04:f6:5c:94:
ec:9d:e4:1a:f2:7d:97:c8:8c:73:87:65:b1:55:ca:62:a7:47:
35:d4:6f:20:91:bd:ed:de:bf:10:0f:7f:2e:2e:35:d5:68:f2:
70:61:08:ed:6c:1e:bd:6e:d0:d9:f6:f0:98:1c:79:d3:07:ce:
1c:32:9d:c4:02:0e:03:44:b0:2e:64:0c:73:85:3f:3f:30:92:
b4:94:4a:ce:a5:c3:c3:ee:bb:0f:af:13:de:8b:14:df:43:82:
78:f3:5e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:41 2025 by rpki-client