Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
File: 9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json)
Hash identifier: vGaVX77KML/Apcyp95Zwv0BzYCuz5a1riVakRqF5wBo=
Subject key identifier: F7:9F:E5:6D:CA:88:AB:E0:D1:55:4D:48:C2:92:90:20:D9:68:9C:55
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial: 0194BCE0DF9E3B29C6287B6AC43F3E0DCECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
Manifest number: 12D8
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: xkMlX5q6orSCkoL6zCi3qi/ORjgWPBzYSo3JyPcorHk=)
2: rnFKFHUDJ2VK_n3nnMWQgvu93Us.roa (hash: ddxwbWDe9h7jTPjb6zGryBRSU7cXly9K/marvCxyA4o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:df:9e:3b:29:c6:28:7b:6a:c4:3f:3e:0d:ce:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=f79fe56dca88abe0d1554d48c2929020d9689c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:43:de:e5:df:d6:a7:0c:27:01:de:01:fb:c6:
4b:e4:08:ac:4f:33:98:97:ee:9c:2b:56:4f:a0:a1:
91:c0:9d:85:fe:31:f5:8e:46:da:75:89:be:c1:f8:
a0:c5:61:61:d8:34:2e:4d:72:0a:be:17:b6:b5:18:
5f:a7:c3:35:1c:51:6a:b3:66:f4:18:de:e5:ea:3d:
d7:1e:f4:07:8c:98:b5:f5:e0:70:26:6d:fe:2a:21:
bc:07:7c:3e:97:ab:8d:31:75:10:1f:2f:ab:64:c6:
7f:df:6a:3f:3b:ce:02:db:14:ab:26:33:15:a7:58:
db:cb:b3:f7:9e:65:15:fd:d6:33:e1:05:7b:b8:83:
81:78:c7:1b:4d:70:37:c0:f5:ab:0d:cd:8b:df:32:
12:6c:1a:55:31:44:ce:3d:9d:fd:0d:8f:e3:b5:c4:
76:bf:a5:c9:f4:1d:a9:8a:48:8e:f0:0e:bc:c7:d3:
e1:79:29:64:9a:7e:53:41:23:56:9b:13:4b:23:84:
19:4e:46:05:ed:e3:2e:df:4e:63:53:12:e3:bf:0c:
81:dc:98:78:fa:b8:bf:be:44:20:0f:29:0a:d7:ee:
5b:b9:98:19:81:5e:ce:7e:88:c4:84:3a:41:8d:5c:
0d:6a:a5:22:f1:29:08:ec:db:56:b8:98:45:87:53:
da:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9F:E5:6D:CA:88:AB:E0:D1:55:4D:48:C2:92:90:20:D9:68:9C:55
X509v3 Authority Key Identifier:
keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:31:da:3b:2c:96:81:20:6e:be:32:34:92:12:9d:3c:da:bd:
b6:be:e0:20:dc:65:55:e8:79:59:0f:69:2f:7d:80:d2:d2:d6:
4f:00:1f:8f:28:40:3d:7a:dd:48:9e:05:47:83:33:b6:ea:27:
88:24:b9:38:39:71:1c:ec:bb:df:22:9a:b4:af:af:04:a8:7d:
f3:fb:25:1c:b5:a7:58:12:d3:e8:50:d6:c6:57:aa:b0:c9:2d:
c6:7f:88:6b:d4:17:fd:76:5d:24:d1:90:11:3d:83:1c:9e:9b:
02:28:54:52:ca:8c:f5:e0:d6:17:a3:ab:b7:f1:f4:1a:69:d6:
88:24:ae:ce:10:b9:da:5a:c7:e2:a1:c9:95:c5:00:1a:3c:6b:
c1:8b:35:71:45:29:d0:8a:c5:36:29:09:bf:70:87:e5:81:3e:
85:7f:4d:48:5b:7d:24:07:fa:a5:d4:e9:42:d3:e6:d4:39:ea:
1e:fd:4d:34:66:e5:c9:03:0e:87:cd:b2:28:e7:d0:2c:6b:87:
d4:73:bd:af:8e:f0:df:1a:e7:ba:20:a0:96:af:26:8d:57:23:
5b:83:c0:12:d0:0f:37:45:70:57:1a:3d:af:55:3a:ce:5b:e7:
4d:bc:ed:4f:36:72:ac:c6:97:e2:ff:3a:3d:8c:05:10:73:d7:
73:5d:0d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:40 2025 by rpki-client