Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bf08c8-5057-4831-93f7-ae02e91af8d9/1/90eZ9_GEjROw_yX0Vffzd2rl4J4.mft
File: 90eZ9_GEjROw_yX0Vffzd2rl4J4.mft (raw, json)
Hash identifier: gcD0LSRUhaTl9s5rLeTtomtX6q/vmEx7zm+AqKusU/I=
Subject key identifier: 5C:6B:5C:23:B2:61:53:60:2E:0E:F8:A5:5A:EF:98:D6:8F:17:3D:72
Authority key identifier: F7:47:99:F7:F1:84:8D:13:B0:FF:25:F4:55:F7:F3:77:6A:E5:E0:9E
Certificate issuer: /CN=f74799f7f1848d13b0ff25f455f7f3776ae5e09e
Certificate serial: 01941AA89E0AACDAF52097D449BC4FE99EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90eZ9_GEjROw_yX0Vffzd2rl4J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bf08c8-5057-4831-93f7-ae02e91af8d9/1/90eZ9_GEjROw_yX0Vffzd2rl4J4.mft
Manifest number: 0C22
Signing time: Tue 31 Dec 2024 03:00:45 +0000
Manifest this update: Tue 31 Dec 2024 03:00:45 +0000
Manifest next update: Wed 01 Jan 2025 03:00:45 +0000
Files and hashes: 1: 63AEQffITmMuVzverixJ_dXu4sk.roa (hash: TgLq3yR2u0y44yVL5JjO6SYfl3pTSpzXPQrlJoI/h3U=)
2: 90eZ9_GEjROw_yX0Vffzd2rl4J4.crl (hash: IBWo4HcVZzT69DQPbXACxYU2or4cx3YhhlWe55+kOCw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1a:a8:9e:0a:ac:da:f5:20:97:d4:49:bc:4f:e9:9e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f74799f7f1848d13b0ff25f455f7f3776ae5e09e
Validity
Not Before: Dec 31 03:00:45 2024 GMT
Not After : Jan 1 03:00:45 2025 GMT
Subject: CN=5c6b5c23b26153602e0ef8a55aef98d68f173d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e4:fe:0f:ea:70:db:6b:da:6d:a7:98:de:e9:
b2:b7:fa:2d:92:a1:83:fd:fc:8f:37:0b:76:3f:71:
ab:a9:02:8f:38:ef:78:af:83:d5:ac:9a:b5:05:0e:
bc:38:33:bd:4c:b9:77:da:de:a3:28:2f:13:13:07:
ff:a9:65:46:e9:c5:7f:27:f6:06:4a:8b:4e:d6:28:
da:e0:12:a6:b9:da:0a:02:59:43:fa:45:7c:1c:b8:
da:50:14:10:4c:bf:13:ce:69:07:40:22:ad:71:3b:
e1:ee:20:ce:80:45:b7:f8:69:95:71:3e:bd:94:99:
b7:28:99:e0:28:77:6a:f0:3f:ba:ee:5b:b5:04:13:
3b:8a:22:a1:da:ea:d4:f6:b2:44:00:5d:1c:39:7d:
b1:a8:82:e6:fd:ee:96:7b:1d:65:9d:75:1d:2e:dd:
1e:06:12:1f:1a:fe:5c:4b:01:d7:3c:f6:24:9c:5c:
3d:2b:e5:0a:e4:1a:20:fd:cd:9a:6c:bb:6b:fc:b0:
86:45:d9:fb:4b:27:64:fd:8b:62:57:87:f9:45:92:
cf:a2:cf:45:6c:18:44:d5:14:34:0e:d2:2d:b3:9d:
75:4d:fe:43:92:04:22:fa:09:26:18:3b:3b:4d:c7:
01:d2:35:03:a9:80:66:ee:3f:a1:d5:4f:6d:9c:14:
2a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6B:5C:23:B2:61:53:60:2E:0E:F8:A5:5A:EF:98:D6:8F:17:3D:72
X509v3 Authority Key Identifier:
keyid:F7:47:99:F7:F1:84:8D:13:B0:FF:25:F4:55:F7:F3:77:6A:E5:E0:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90eZ9_GEjROw_yX0Vffzd2rl4J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bf08c8-5057-4831-93f7-ae02e91af8d9/1/90eZ9_GEjROw_yX0Vffzd2rl4J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bf08c8-5057-4831-93f7-ae02e91af8d9/1/90eZ9_GEjROw_yX0Vffzd2rl4J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d8:38:b5:de:a8:b6:49:92:6b:7f:22:8a:a3:6b:01:7e:fb:
3c:63:a0:89:67:bb:fa:c4:fd:02:9f:be:a2:a0:77:26:98:6c:
48:b0:0f:f3:6b:28:d0:5b:da:a6:80:9e:da:db:b0:4d:70:2e:
6b:d4:d2:c2:7b:07:d4:8a:dc:40:e2:34:c5:af:2a:b2:8f:25:
6a:6c:9a:6a:a1:b6:cf:ee:af:ea:1f:16:0c:9a:96:b4:fe:cc:
14:fd:7e:25:1d:4a:25:37:8f:7e:6f:0f:33:28:d2:80:39:bc:
c8:b6:52:69:ff:a1:a7:3e:4f:65:38:0a:e6:2a:ac:82:0d:66:
93:9e:48:c7:72:ef:be:e5:ac:6d:dc:0e:26:67:52:dd:49:10:
fb:cf:db:cd:58:b0:75:46:b4:c9:21:9f:15:ed:6e:9e:b7:45:
d9:97:b3:67:e0:84:da:50:e8:ce:cf:24:bc:b9:91:b4:1a:1f:
86:2c:3e:9b:06:05:14:09:b2:94:18:15:b6:df:b3:72:6e:1f:
ff:7f:6b:dc:0a:cc:55:65:34:7d:cb:cb:32:27:b1:04:cc:62:
52:ec:c7:92:36:b6:32:f8:13:44:e3:c4:a7:80:69:74:bb:5e:
70:ef:f1:be:13:26:94:2a:29:54:9c:58:a1:e7:99:3d:6b:4a:
35:ac:cc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:30 2025 by rpki-client