Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File: x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier: iK2HAPWH9tZ2SbJoTYmdBepysDe8j3KdRoTfa9Lfs58=
Subject key identifier: BE:56:F4:86:D7:C6:A9:17:7B:3A:1E:EB:17:EA:0B:9D:C9:CA:3B:91
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer: /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial: 0194BC3BF75B0A9F84F9341BD3063E26A7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: cFEMcTrZnpJM6OI3sLSildoG7_o.roa (hash: 9byuaTVIbm1V06CyQEH6JUvAc6lfIjdANtz73++4OCM=)
2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: rPhAnue94JTo7IM8E2Qwyp6l6FQZ4NvBEZC4iCb6Ul8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f7:5b:0a:9f:84:f9:34:1b:d3:06:3e:26:a7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=be56f486d7c6a9177b3a1eeb17ea0b9dc9ca3b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:f6:db:88:40:ca:05:dc:d5:54:fe:e4:34:
ca:8b:1b:b9:7f:85:44:df:0c:79:76:f6:40:5c:04:
f7:6e:d1:97:4f:6e:8d:25:6a:51:aa:59:52:0d:d7:
c4:67:2b:13:cf:53:96:e0:b9:9e:0d:ea:9b:02:93:
9e:17:8d:a4:c2:5d:ff:bc:b9:1d:38:d5:e3:aa:d2:
af:f0:c1:2f:20:2c:66:e6:39:fd:0a:9b:15:34:77:
4d:10:48:34:1e:e0:35:de:d8:2b:03:66:6e:ad:2a:
f3:8b:99:2c:b1:5d:ff:f9:bd:b4:df:3c:62:2b:ce:
af:df:2c:b9:76:d1:8c:40:d0:04:8c:6c:0a:c5:48:
a1:03:ec:53:9a:99:e8:08:fb:89:a8:2f:62:cc:d0:
64:9c:3a:d0:a0:cd:4b:33:4f:9a:e5:9a:10:9f:13:
46:46:2b:2d:96:1c:e2:0a:45:b3:87:c5:93:02:e8:
08:e5:05:d0:58:f3:4a:50:f9:ef:3d:97:31:9b:e4:
cb:0b:8b:13:33:5d:00:6c:02:d8:5a:80:44:3c:f7:
05:85:cd:01:ff:0e:22:4c:70:5d:15:55:c0:84:ed:
e5:2b:65:9f:9d:d8:ae:dc:53:4a:e0:15:bd:ab:dd:
41:f7:32:a1:46:8f:e0:0e:de:2e:1f:24:7a:ca:6c:
e9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:56:F4:86:D7:C6:A9:17:7B:3A:1E:EB:17:EA:0B:9D:C9:CA:3B:91
X509v3 Authority Key Identifier:
keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3b:88:e7:de:4e:b3:b5:76:72:5c:f8:5a:db:96:48:d7:b3:
f3:25:10:ca:56:1d:89:8c:04:7e:3d:78:fb:46:55:19:43:f8:
df:70:5b:18:9c:eb:51:9c:36:2f:d9:9c:3c:42:a7:18:b5:04:
60:64:43:6e:2c:f9:d0:0c:29:03:3a:c4:6c:dc:3d:fc:9a:ee:
dc:ef:c8:aa:b8:e4:fa:29:4f:e6:f7:8c:55:ed:c5:2a:f5:3f:
04:95:63:bc:67:26:f4:cd:20:6f:dc:3d:eb:f1:cf:1d:c6:8c:
e4:e9:5b:4b:1a:9a:e4:9a:c4:11:20:11:4b:d9:bf:c6:07:d2:
a3:86:6f:24:90:b0:7a:4e:32:ae:32:05:23:72:22:56:f0:42:
34:c3:9c:f1:ed:35:63:55:90:f0:b9:16:54:ca:89:56:dd:06:
3f:a0:93:86:1b:bd:4e:36:d9:72:a4:93:f4:fa:f2:a7:fb:b1:
d2:02:7d:3a:01:7e:9c:96:c0:8a:90:07:71:2b:d3:64:ff:f9:
e9:45:93:62:0c:2d:91:b8:c9:cf:98:01:96:4f:7b:7d:09:5f:
e2:11:1b:64:5b:84:97:af:26:2e:58:22:a5:0a:c7:0d:2e:d9:
66:5a:1c:94:49:b9:b6:2c:3a:21:da:76:a2:ca:6e:f2:ac:ce:
a9:56:90:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:20 2025 by rpki-client