Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
File: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft (raw, json)
Hash identifier: PiP9xOBcyVe/xa+hJitJbhxzZ/WxEKG8/g3vbXFWNmE=
Subject key identifier: F3:58:1B:1A:89:B8:71:87:5D:8E:80:5F:13:F0:81:24:B8:57:C8:B7
Authority key identifier: F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
Certificate issuer: /CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Certificate serial: 0194BCE0BC32E4F78D15D4A3BD51705AF177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
Manifest number: 1118
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl (hash: IxwheBlSU1cZ6bkEsigBuaUmPzzaNqPTNkqNsGuzp90=)
2: FhvwZmZbFQ5_XSu4XdZkFej3jvE.roa (hash: ld2MBpkdINa/HpitEI9hE8KrLNtvxY4fg+rJ1pVUK1Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bc:32:e4:f7:8d:15:d4:a3:bd:51:70:5a:f1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=f3581b1a89b871875d8e805f13f08124b857c8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:1d:a6:6b:14:74:32:b0:2c:f9:34:f2:f0:
c1:f1:00:41:90:a9:a2:b7:eb:21:a6:30:97:7c:ac:
9d:34:bd:22:0b:0c:9a:bb:bd:1a:a7:b9:8c:ee:e5:
1d:6b:c6:65:44:3d:b4:50:11:c4:b6:00:b0:1a:7f:
c5:10:f7:fc:2f:49:3e:b0:3d:b2:17:f2:f2:ed:a8:
0b:56:99:2d:85:59:63:0d:6b:1d:72:33:e2:cd:1f:
cd:ff:13:a9:30:f5:46:ba:54:2d:5d:5f:25:08:73:
20:eb:fa:97:e7:c2:13:75:90:f6:a2:83:04:14:00:
60:c9:89:fc:6f:42:56:ff:2b:ec:34:9b:72:ed:87:
1f:d4:2f:32:14:de:20:4c:c2:7c:84:08:46:c9:71:
e0:52:f8:7a:5e:de:cf:44:b0:ff:ab:8c:80:de:a0:
66:18:1e:46:8f:c3:f4:c7:32:7a:82:b9:a8:f6:f1:
d4:1d:6c:29:b6:79:74:6e:b1:b0:5a:9c:e8:54:1c:
7c:1b:f2:d0:0d:fb:da:58:58:67:d1:ec:93:62:99:
a3:17:e7:41:f8:a6:8e:68:d4:ce:75:87:1c:2e:10:
d0:aa:8d:bd:cf:e9:5f:81:f0:95:35:07:2f:c8:bb:
d7:ea:49:5a:d1:43:2b:46:3e:a4:ec:d6:28:3a:65:
a5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:58:1B:1A:89:B8:71:87:5D:8E:80:5F:13:F0:81:24:B8:57:C8:B7
X509v3 Authority Key Identifier:
keyid:F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:77:0b:53:26:f6:ee:4f:c7:1a:9d:a2:94:4a:52:36:33:07:
50:81:39:a7:f2:c9:94:57:b0:24:b3:0f:2e:f1:a8:1d:15:dc:
ab:45:e4:00:7b:5f:5d:ff:60:0d:d5:8b:5c:13:e4:67:64:f9:
28:77:12:72:a5:32:dd:64:a7:a2:ad:2a:47:01:8f:ad:ef:bc:
52:69:5c:04:d4:2d:a3:dc:3a:3d:bc:ba:06:6f:22:9d:34:be:
1f:19:26:35:fb:dd:90:1d:c1:46:00:df:c9:4f:e3:79:44:41:
1f:c9:eb:7b:6d:c3:e7:3c:2f:ab:20:d3:72:f4:7e:be:77:1e:
a9:46:54:36:ac:c5:ea:2c:d6:4a:89:2d:f7:3f:e3:38:17:83:
51:56:aa:0f:ca:98:cc:00:55:38:81:58:ee:5b:0c:23:39:02:
c4:84:c0:f9:34:9e:42:69:34:6f:45:75:52:e7:66:4c:4f:2c:
48:1d:68:c5:56:d1:eb:10:53:fe:11:b1:0e:de:29:78:77:e0:
42:86:d3:cb:93:f3:c7:d5:5c:0c:e3:52:49:fd:f0:93:34:5d:
36:1a:cd:ef:8a:b3:08:32:5c:b6:73:0e:89:f9:31:7d:02:ab:
74:64:ce:5e:3d:39:3a:22:08:2c:60:8f:10:8b:2b:3b:4b:62:
05:a6:1b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:13 2025 by rpki-client