Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
File: 9fqTbNBbJl9g8zNAqMY952gvw18.mft (raw, json)
Hash identifier: c9B96qkb1W8a/w2FW4x/3pK8/lhZm5Di6spMaS9pqYU=
Subject key identifier: 89:4A:FF:3B:29:27:37:06:F9:2B:DA:56:E1:7A:5A:04:B2:DB:14:94
Authority key identifier: F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
Certificate issuer: /CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Certificate serial: 0194BD17CBC331BA8148DD69AA5708FA6A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
Manifest number: 0418
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: 9fqTbNBbJl9g8zNAqMY952gvw18.crl (hash: oomB/IkMq1cYgxjnuoBgAvpnSRgOyu4uszG+e88ltUs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cb:c3:31:ba:81:48:dd:69:aa:57:08:fa:6a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=894aff3b29273706f92bda56e17a5a04b2db1494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:fc:21:f1:3d:61:fb:24:36:bc:d4:df:4f:
03:04:05:d4:8f:22:85:bf:43:aa:5e:ed:21:99:4c:
32:4d:47:df:aa:df:eb:3f:11:99:14:d5:05:99:b2:
d0:c9:29:58:6c:5a:cb:d5:b3:84:a5:ba:9c:49:a6:
4b:7f:6e:27:1f:e7:95:4d:30:e0:3e:7c:c1:0b:8e:
f1:83:95:8f:d0:99:95:da:db:e3:a3:84:e4:9b:09:
16:94:9f:91:0b:34:44:d0:de:14:5d:12:8c:77:db:
c2:0e:68:90:a9:e0:6a:ad:66:24:01:ee:3e:53:68:
7a:ba:f6:19:1c:c2:7e:37:45:87:d2:fc:86:27:24:
2c:e3:be:3e:12:ef:73:9e:33:f0:e6:0f:fa:a3:d9:
80:10:d1:7f:5a:85:c8:a4:bc:08:4e:9f:ad:14:11:
f4:34:e9:5b:1d:c1:d1:31:04:74:18:6b:ba:3f:d4:
0b:7c:b2:76:0b:91:f0:4d:3d:26:32:16:13:12:c4:
d9:b7:ee:d2:00:20:58:5b:0d:a7:7b:d4:5b:6f:01:
cf:48:e9:f7:fc:4b:de:ca:97:c4:c3:fe:5e:3f:a3:
c7:78:d2:ee:a9:b5:cc:ef:bf:a7:54:a7:aa:66:43:
d8:9b:79:d6:64:9b:56:c1:2a:dc:2f:b7:b3:63:90:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4A:FF:3B:29:27:37:06:F9:2B:DA:56:E1:7A:5A:04:B2:DB:14:94
X509v3 Authority Key Identifier:
keyid:F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1f:cc:3a:8f:b3:fa:ec:68:33:13:e4:ea:e9:2a:9d:ba:a4:
c9:a0:06:72:ec:4f:5a:f0:8b:14:40:f7:8e:3d:4a:b2:c0:e7:
54:73:f4:18:8b:ec:7d:77:98:05:f7:64:62:9b:a7:58:cc:31:
b3:07:f7:bf:47:1b:a3:48:1a:8a:69:b3:7b:e5:0c:fe:da:71:
ab:0a:97:e9:bb:e5:7c:fe:b2:0f:de:a8:54:40:04:0e:05:e3:
c0:4b:1d:6f:a1:26:32:cf:1a:34:3f:1f:3c:da:a6:0b:08:09:
09:ae:a3:85:a3:0d:8b:0b:04:09:ba:20:74:21:2d:4a:a3:dc:
54:9d:5d:55:1d:12:57:74:d6:04:32:d7:72:72:95:a5:3b:91:
18:83:fe:e1:b4:1c:20:25:e1:3f:c0:cb:d0:fc:f9:a8:82:2f:
1b:30:3f:9c:bd:89:a6:dd:93:8b:e7:47:69:a9:a1:93:79:65:
f7:d9:e4:c0:ed:9e:86:36:ad:6c:fe:9e:08:7d:67:3f:1f:20:
48:32:45:38:0e:1d:d1:00:4a:f0:c2:3d:d0:3e:4d:ae:b4:b5:
21:1c:7d:f2:6a:64:11:07:25:8b:e8:11:6f:82:40:af:65:45:
1c:b0:b3:f8:d0:ae:71:c2:2a:75:26:65:f6:68:a7:ba:2b:cf:
e8:2a:74:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:10 2025 by rpki-client