Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
File: 9XwaqtuDIN2EMjVFjPLFy_RwStY.mft (raw, json)
Hash identifier: IVIftgeKb4sVf1Ou8fbR2dqs0e4wfdU5rgjSgk/xp2k=
Subject key identifier: 10:F9:1A:36:34:0C:41:2C:A1:C0:19:15:1A:B4:FB:92:E1:E9:C7:0C
Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
Certificate issuer: /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Certificate serial: 0194BC04F24FEFA505D29DE395C5176BB043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
Manifest number: 0616
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: 9XwaqtuDIN2EMjVFjPLFy_RwStY.crl (hash: wp6/AQ3S5+TyeJYrRaffeml77VGOWWr0JoqqcO2MuUo=)
2: MP9C5tlE4sTN1JTDz4jlrkAW_YU.roa (hash: 2Qb7MzrDpByF3hW1GYmCH1FHWyuhYVmQ2YbJ0M55AAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f2:4f:ef:a5:05:d2:9d:e3:95:c5:17:6b:b0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=10f91a36340c412ca1c019151ab4fb92e1e9c70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:f8:ed:e9:da:7e:59:1b:92:ae:15:48:0b:
7a:76:50:88:18:d1:04:6e:bf:5e:9e:4e:83:ed:9e:
c7:fa:94:cd:98:f5:ab:ac:79:fd:e5:5a:c1:79:6e:
29:33:f7:30:ba:6a:75:ac:7b:bd:a2:9f:49:ff:eb:
a1:57:2e:75:a5:3d:a4:21:fa:a1:2c:73:f7:08:38:
4f:6d:d3:e4:96:72:b0:67:dd:eb:e8:d3:17:74:f3:
28:74:37:25:15:40:fb:08:c2:ad:29:3e:00:34:41:
04:13:c9:b6:cb:9c:42:8a:d4:aa:96:c2:08:55:07:
c1:4f:8d:80:72:7c:4f:fc:3e:66:93:0d:73:be:9f:
83:bd:03:db:de:d6:2e:b2:11:f5:84:d7:0a:fe:e5:
14:c0:61:e7:71:fc:c0:1a:a5:84:03:37:ed:63:86:
63:96:c8:9c:a9:93:4f:a9:aa:23:80:ca:18:aa:79:
ff:93:c1:6d:b4:f1:08:4d:ec:e2:c5:57:a0:ac:aa:
fa:3b:fe:1f:c4:4c:ab:18:49:e9:43:c6:7c:25:70:
8f:86:a2:51:d3:fb:eb:0a:ee:60:93:55:cb:81:b9:
98:e9:36:7b:57:71:d3:6a:64:25:e9:09:ca:51:5d:
6f:5d:92:c4:c1:58:74:3d:9b:2b:d9:a1:24:e7:b3:
64:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F9:1A:36:34:0C:41:2C:A1:C0:19:15:1A:B4:FB:92:E1:E9:C7:0C
X509v3 Authority Key Identifier:
keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:85:57:19:82:4a:ca:af:c8:3a:91:8c:2f:e7:bd:40:a4:4c:
68:a1:04:e2:85:e4:e9:a6:be:4b:ef:de:56:e9:30:d6:c2:57:
27:e4:f9:4f:bc:7f:b3:2b:f2:86:73:ff:f4:03:db:46:59:70:
9a:fa:c3:59:dd:02:d4:22:11:60:69:6d:2c:98:2f:8f:eb:c6:
e1:b9:49:c9:36:a2:3c:d3:59:57:f0:9c:a0:e1:28:ea:87:cf:
df:29:1a:89:50:ed:cd:ae:26:11:80:f2:c7:b4:2e:41:3b:cc:
15:dd:09:d9:62:86:60:41:f2:1c:06:be:36:db:59:11:83:07:
4a:22:a4:3e:52:39:7c:8e:20:fb:77:be:8a:f2:84:7f:c1:bf:
c7:5e:de:2e:12:ff:6a:5e:3c:4b:ef:84:22:36:b0:53:5a:b1:
95:f9:d3:5a:9f:eb:34:23:f3:c5:00:72:a7:34:91:8e:bb:df:
09:28:a3:fa:30:df:4d:ef:2f:a5:f5:54:39:15:27:2b:d5:b9:
29:53:12:cd:70:3f:e7:5c:04:58:5a:1b:cb:19:87:4f:60:97:
a6:38:48:5c:26:6b:7e:40:b3:95:72:89:40:8a:d0:04:60:f0:
6e:f8:3a:53:fd:c7:aa:9f:e8:83:57:70:a5:4e:ca:2b:20:bb:
c3:6a:53:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:40:31 2025 by rpki-client