Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: 92MfomNcuDKOZ+Xyc23lDMBztYAsy9JqXUyHKmVMVNQ=
Subject key identifier: 85:AE:8B:15:31:63:ED:BE:4A:2D:7C:15:41:B0:5A:D5:DB:05:6E:A1
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 0194BCA96D26431447494167189F38DD13E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 0B38
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: TxJ5WXLJsaOhYmtgnOjHIn01uwE6CuUQ7yGpzeyk6v8=)
2: B8bTTGpK1L-pMyO-WGFk_7H-LC8.roa (hash: r0JNxuBgg4on067YK5COQPlyCkk+tp458uDvr2IE4z8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6d:26:43:14:47:49:41:67:18:9f:38:dd:13:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=85ae8b153163edbe4a2d7c1541b05ad5db056ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:f3:87:cc:b6:85:7a:9d:f4:7f:84:77:56:
fe:cb:20:62:a1:cd:d5:b8:5f:cc:02:4e:dd:28:7a:
fd:9f:ec:10:9c:8d:47:71:60:59:65:3d:e1:7c:f4:
15:cf:ba:cb:f5:a5:e8:95:ed:7d:79:a1:af:24:d1:
12:7b:a0:ef:e1:5b:8b:5e:95:c1:00:d8:75:40:de:
20:f9:87:a5:5e:d3:a9:67:7b:b8:15:c8:2b:5f:75:
0f:c6:10:31:88:3c:7f:46:c7:bc:b8:7a:7c:c3:25:
5e:de:be:29:26:c8:19:04:85:55:df:61:45:c6:53:
7b:88:9d:d3:2e:e8:18:7d:39:06:f6:92:20:6b:f4:
23:6b:6d:cb:e8:18:70:4a:17:b3:80:92:3a:0c:1f:
23:c3:d1:cb:34:b0:38:2e:1a:f3:ac:4d:09:03:e3:
3b:f8:2f:fa:86:c6:8f:67:97:2c:e3:45:70:ca:e1:
6d:32:5c:ab:2b:ce:23:2e:3c:c3:79:12:6b:5e:d6:
fa:89:1e:44:70:d7:30:a8:cc:c0:a7:e9:e3:fb:ad:
86:3e:aa:7d:01:c5:9a:4f:1b:30:40:a1:4d:87:7a:
0b:96:96:3f:17:84:5b:09:19:bf:e2:c5:33:c8:d5:
ff:57:64:ad:d6:11:da:6a:8f:ac:86:23:fe:61:c6:
c7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AE:8B:15:31:63:ED:BE:4A:2D:7C:15:41:B0:5A:D5:DB:05:6E:A1
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:39:9d:d4:6c:7a:0c:b2:24:09:c7:53:57:0b:50:38:ef:fb:
28:80:b6:88:47:b0:f7:08:a7:46:0a:b8:cf:bf:40:1f:dc:42:
35:42:30:76:e1:99:88:5e:2f:e8:0d:60:36:d3:c4:01:bc:f1:
71:a1:bb:52:54:35:43:69:6a:3a:ea:99:1b:c2:68:af:f9:cf:
a9:08:c4:fd:5f:9b:3e:fc:f7:2d:86:86:41:b2:9e:63:56:58:
1d:2a:18:74:da:62:77:5f:5b:3b:df:a0:76:d2:5d:3e:39:ff:
b2:25:dc:b7:4d:e3:8a:00:f3:73:cb:28:42:1e:81:69:a7:01:
fb:82:cc:e3:47:c9:39:cb:ef:6b:db:44:78:05:43:78:5f:4f:
2f:95:ae:f8:97:f1:b9:e4:36:73:ad:42:e3:96:3a:3f:bd:d3:
61:d5:f7:d5:2d:98:db:80:95:c4:cf:80:67:75:2e:28:f3:b1:
bc:e6:81:64:6b:71:bb:d3:00:6d:e3:49:ad:bf:f9:bf:07:52:
98:1c:51:8d:2b:4a:13:99:eb:43:b8:03:2e:cd:b0:42:4d:71:
3b:79:37:e6:5c:09:f4:d0:04:12:69:79:eb:2c:89:9d:c5:a6:
54:63:71:9e:2d:11:e8:d6:5d:24:68:86:f7:d1:c2:fd:13:a0:
91:23:91:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:24:57 2025 by rpki-client