Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
File: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft (raw, json)
Hash identifier: PC+TNCWJYQe/bSHOcdAe+X6LYZWC9q+kcxVFfs3wj5A=
Subject key identifier: 4A:5C:A7:28:93:41:D3:5B:A5:AC:4A:AA:05:72:56:62:03:EF:F5:9D
Authority key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
Certificate issuer: /CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Certificate serial: 0194BCA9CD90627ABE7E0A4CB899E357F8C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
Manifest number: 0ABB
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl (hash: mOb2oJz7Lsg0OCZQ+Hqj/ECMnwF27bL7+tFPe8wXsuo=)
2: R4y6nmRwFjxvCaBL6-dKT9J0J6Q.roa (hash: 28wuF3mqSVql0QwjKVa6D2zxJkPAFMQWmiTuYpkc2Gk=)
3: er_kFDpjs6oU5vNOyvddvxGeZTI.roa (hash: AQkV4c5fyw3xOjyP/GNl+wWiJfBbyhMBsqOLG8wW6AA=)
4: v7xbsCROsO2MbuE9UwU0B__Qrug.roa (hash: jCAaO9QdtJabTsyOLEVBcqZmMxtQhkEo4Y5qTf+e+S0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cd:90:62:7a:be:7e:0a:4c:b8:99:e3:57:f8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=4a5ca7289341d35ba5ac4aaa0572566203eff59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:70:82:ee:28:66:33:f7:a5:c1:34:4e:7c:3b:
b4:40:8f:45:ba:7f:14:9e:43:fc:46:42:dc:2b:78:
c5:a6:90:de:b9:af:6d:85:1b:77:24:2b:21:25:af:
75:23:b3:dc:e4:6e:53:20:07:b8:ba:54:52:44:98:
ec:32:b0:5f:65:b0:36:82:e4:68:19:b7:31:9e:30:
a9:88:19:ce:22:e9:40:4f:71:c5:d9:28:08:bb:e9:
d4:ca:8b:bc:82:f0:b0:4c:21:8c:67:44:51:4b:31:
e6:f0:fc:d7:04:1d:3e:a8:ba:08:7d:c5:65:e2:c7:
f9:9d:52:e7:bf:98:b4:77:a9:9b:60:23:f0:b0:0b:
a1:89:ec:c0:d0:ff:36:d6:39:bf:56:af:67:61:fe:
73:44:f7:ad:f8:d3:5b:8b:1e:5e:65:19:f5:88:7e:
28:a9:28:b4:b7:c5:d0:88:bb:22:a2:73:3c:4e:18:
ec:ec:ca:44:37:af:d9:cd:b4:df:1a:e7:8c:1a:4a:
e0:41:d9:5a:4c:51:2f:3d:59:e7:7f:fc:7a:e4:79:
75:fa:6b:1d:3c:59:27:9a:69:00:f2:1c:53:01:e9:
dd:ad:08:c7:77:e5:4a:69:14:9d:4d:a8:9c:ae:86:
b2:73:f1:9e:89:eb:27:87:b4:7e:7a:e6:a6:b7:28:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5C:A7:28:93:41:D3:5B:A5:AC:4A:AA:05:72:56:62:03:EF:F5:9D
X509v3 Authority Key Identifier:
keyid:F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8a:48:c9:46:2d:97:de:a7:3b:c7:11:c4:4a:f0:46:47:78:
c6:f4:90:1b:22:18:b9:31:d3:0a:a3:ad:97:11:1a:4b:df:3d:
25:fa:56:8f:8f:fd:af:a5:0b:2b:39:20:f1:51:39:c6:d1:34:
ab:e9:1a:c5:cf:8e:dc:f9:08:ab:5f:e4:6e:73:96:66:49:6b:
0c:51:94:6b:f5:29:fe:32:43:89:71:37:76:39:89:38:e8:50:
6e:71:4d:23:01:bf:f8:9b:56:34:69:14:44:e3:11:de:ed:bf:
ec:50:e3:91:49:47:09:31:04:01:7c:30:f3:b6:58:ed:d0:29:
d2:fb:c6:30:67:ed:0b:a0:32:19:2a:06:90:5a:8a:53:2e:93:
d3:2a:de:18:1e:35:2f:96:62:97:be:bf:c6:1f:c8:01:40:80:
38:2f:ef:61:81:de:d3:ed:fc:90:fa:f9:96:c9:26:3e:3d:a1:
7c:31:1c:66:56:33:dd:70:64:27:5e:86:6a:d0:1b:56:66:b7:
6b:d8:32:2e:e4:39:36:02:e8:aa:8c:59:01:f7:f0:72:70:f2:
76:91:ee:a3:68:a1:7b:87:5f:33:21:81:24:34:58:02:4d:cf:
00:fd:c0:36:24:2c:74:b3:3f:0b:78:60:2b:39:b3:59:ad:b9:
5f:3c:8e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:45 2025 by rpki-client