Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier: ivcvapeb5AS+cOIYmIKTmIpFyh6Uf97uH1TScQeDofk=
Subject key identifier: B6:09:05:70:63:99:80:F5:6A:F7:55:43:7C:5D:57:0D:4E:19:A4:BE
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial: 0194BBCDBB8491B39B164995C6593B3E1E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number: 048E
Signing time: Fri 31 Jan 2025 10:00:09 +0000
Manifest this update: Fri 31 Jan 2025 10:00:09 +0000
Manifest next update: Sat 01 Feb 2025 10:00:09 +0000
Files and hashes: 1: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: wVY+tn3I+H3w0mxhGiQFXkE8Nr9zrdUmdLeESWoB5+E=)
2: OCedJE5LkoowQn54mjjrBJCuPJI.roa (hash: nw4YWjZiCna7KJhUNUrep5sUi3EwU231+kVKK+38ws8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bb:84:91:b3:9b:16:49:95:c6:59:3b:3e:1e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Validity
Not Before: Jan 31 10:00:09 2025 GMT
Not After : Feb 1 10:00:09 2025 GMT
Subject: CN=b6090570639980f56af755437c5d570d4e19a4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:d8:99:2a:49:59:09:26:ce:d0:64:1e:ec:
ab:ad:6b:c3:57:a3:33:85:f4:1a:3a:b6:a2:fd:2e:
5c:ad:37:ef:7f:a4:04:85:3a:0c:eb:7d:b4:f0:3a:
b6:d7:54:75:fe:af:56:13:4e:e1:a9:54:f6:10:4c:
57:b3:7d:dc:1b:f5:34:5e:92:b6:a5:be:63:5d:2d:
7c:7f:3d:ba:28:f4:22:96:98:5e:f8:b9:be:61:3e:
82:e2:eb:c3:bc:23:78:6d:b3:84:4f:47:0a:12:b0:
0c:3d:67:1c:c8:c5:89:4c:a9:e3:76:25:fc:08:cc:
42:ec:ec:b0:83:0a:fe:b0:35:6b:d0:73:00:6d:b9:
67:4c:5b:8f:ed:88:83:e9:fe:72:ad:a8:3b:9a:e3:
4f:fc:89:1b:6b:6f:36:d1:ab:39:7c:31:c8:d9:90:
83:5f:7e:8c:2a:fe:be:21:fc:f5:c3:1a:ad:de:a4:
07:91:45:66:79:35:d1:86:dc:1a:6d:b7:52:d3:70:
58:83:70:02:20:6f:71:25:ce:65:19:1c:bc:bb:ec:
78:ef:68:ad:6c:e1:5e:09:55:15:81:ec:91:00:1a:
85:74:c3:e3:6b:04:cd:4d:55:24:44:dd:29:5e:15:
86:d3:56:57:7d:7e:49:58:db:3a:de:4f:bb:a7:c4:
d2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:09:05:70:63:99:80:F5:6A:F7:55:43:7C:5D:57:0D:4E:19:A4:BE
X509v3 Authority Key Identifier:
keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:cf:eb:dc:7e:03:52:77:ff:6b:07:51:0d:f1:86:33:83:d5:
14:0a:90:c0:61:35:ad:46:5b:20:3f:a3:a9:6a:b2:75:ac:48:
e8:1f:59:81:79:ec:44:09:c0:2c:b2:29:8e:bb:02:98:4a:13:
3a:71:b3:98:b3:1e:2d:9a:05:df:0a:ac:e2:6a:e4:ba:2c:b9:
57:0a:58:77:b3:e3:57:86:56:ef:82:1f:c1:bd:18:57:9c:7e:
3a:db:ba:aa:d1:f0:b1:2e:90:1e:a4:83:ea:b2:6b:ee:89:c9:
30:de:12:ec:78:d0:3a:41:55:45:f4:1f:bc:11:69:99:e3:5c:
c8:be:19:ae:98:39:e0:38:f2:60:91:26:08:27:a1:60:fa:d2:
19:88:dd:e8:3f:6f:eb:22:86:70:62:dc:3f:45:64:68:5e:83:
4a:a6:2c:cc:51:0e:8b:90:7c:2d:20:f6:32:dc:f1:05:46:08:
28:35:ec:ed:59:74:cf:7d:1a:1e:b2:37:bd:bc:64:90:7e:59:
f8:cd:19:d4:65:a3:2f:cc:ec:8a:26:86:e6:62:f5:76:6e:c3:
d9:f7:a8:d6:82:9c:8b:f1:5c:0e:46:ba:dc:ca:3f:28:a0:82:
68:f2:9b:8f:bc:33:ce:91:8a:ca:51:e1:f4:ca:a4:e9:85:81:
f3:41:e8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:37 2025 by rpki-client