Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/bbe96c-6021-4726-a367-375f2bc1e87d/1/9lBRmpnFmS_7Z600XUiJKqG_udc.mft
File: 9lBRmpnFmS_7Z600XUiJKqG_udc.mft (raw, json)
Hash identifier: jqXn4f/IC+g4O2S0fWrcnPpAsrlw6nNa5grriRPbuto=
Subject key identifier: 43:55:4A:3B:E8:C7:45:1F:20:5E:6D:77:0A:B8:EC:91:75:65:DE:81
Authority key identifier: F6:50:51:9A:99:C5:99:2F:FB:67:AD:34:5D:48:89:2A:A1:BF:B9:D7
Certificate issuer: /CN=f650519a99c5992ffb67ad345d48892aa1bfb9d7
Certificate serial: 018792EE10D0366A30693601CD294D5D2CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lBRmpnFmS_7Z600XUiJKqG_udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/bbe96c-6021-4726-a367-375f2bc1e87d/1/9lBRmpnFmS_7Z600XUiJKqG_udc.mft
Manifest number: 027A
Signing time: Tue 18 Apr 2023 05:54:47 +0000
Manifest this update: Tue 18 Apr 2023 05:54:47 +0000
Manifest next update: Wed 19 Apr 2023 05:54:47 +0000
Files and hashes: 1: 9lBRmpnFmS_7Z600XUiJKqG_udc.crl (hash: nXzjaAm/ndvXdPyUgAaxAExK/DrEC34lp3yx0Os7I/k=)
2: vqms36w_67ojN3FWR8Gi-fRFN1A.roa (hash: BlaBjuwVdb8S9WZhX2bOGxrslK+ca0twDxeAgasZlcU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:92:ee:10:d0:36:6a:30:69:36:01:cd:29:4d:5d:2c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f650519a99c5992ffb67ad345d48892aa1bfb9d7
Validity
Not Before: Apr 18 05:54:47 2023 GMT
Not After : Apr 19 05:54:47 2023 GMT
Subject: CN=43554a3be8c7451f205e6d770ab8ec917565de81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8a:93:9e:fb:29:10:95:c6:fc:cd:e7:a1:f0:
4d:f7:6a:b5:67:89:67:bf:31:ec:f1:70:0d:dd:b9:
80:e2:54:9d:0a:a6:bd:c0:4a:f8:75:66:b1:89:fb:
ce:48:41:35:2f:6e:c6:b8:78:f0:4a:04:99:6b:2e:
a8:40:e1:13:57:b0:de:e2:dc:b5:9e:64:38:22:38:
66:1c:67:d2:14:f7:9c:27:c4:4b:87:69:15:75:50:
57:75:ed:f2:89:3f:1e:82:0c:3f:d1:bb:9a:6c:89:
a6:e5:a8:c0:d5:b2:89:ec:ec:de:e1:e0:14:74:28:
a5:0c:86:ff:13:16:eb:00:30:8d:18:c2:4e:bc:1e:
30:ea:ef:ff:52:fc:ac:cd:f1:d3:17:36:f8:16:8d:
db:6c:ed:09:3d:2f:e5:dd:6e:e5:91:dc:fe:1d:da:
e7:1e:1d:05:42:00:0e:c1:77:ad:68:c3:9d:bb:43:
a0:a9:1e:ca:8a:ab:85:06:88:9b:6a:23:99:d7:3c:
dc:26:ac:58:34:c4:b1:d9:94:73:7f:9b:e6:ce:5e:
ee:d4:b1:74:5e:fb:38:a9:37:9e:a5:fc:b2:a0:cd:
e8:6c:54:c1:6a:f1:a0:91:cc:0a:47:e1:64:9e:8e:
21:52:6a:eb:cc:c7:d4:ec:38:d9:de:8d:bf:e7:a3:
6a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:55:4A:3B:E8:C7:45:1F:20:5E:6D:77:0A:B8:EC:91:75:65:DE:81
X509v3 Authority Key Identifier:
keyid:F6:50:51:9A:99:C5:99:2F:FB:67:AD:34:5D:48:89:2A:A1:BF:B9:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lBRmpnFmS_7Z600XUiJKqG_udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/bbe96c-6021-4726-a367-375f2bc1e87d/1/9lBRmpnFmS_7Z600XUiJKqG_udc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/bbe96c-6021-4726-a367-375f2bc1e87d/1/9lBRmpnFmS_7Z600XUiJKqG_udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:28:7f:45:3f:f8:84:66:80:d1:09:cd:d8:e0:62:48:76:c9:
f4:7a:1b:f7:31:13:90:3c:55:1c:aa:f1:ce:e9:3c:b2:8a:af:
c4:96:ec:6b:74:90:13:2e:7d:9d:b6:75:7e:65:39:3c:ff:ab:
ae:a3:30:cb:f8:8f:8e:ba:e3:03:59:e7:d1:eb:a3:31:7e:75:
25:0e:a8:57:d1:39:35:d2:9e:df:ee:55:33:92:26:e3:dd:b0:
86:f6:27:33:13:23:56:c1:c4:ca:9d:b6:35:00:cf:50:80:bb:
a2:cb:db:ff:94:31:5f:09:04:2a:c0:f3:31:ff:a5:c5:4f:0a:
c2:52:dc:0b:48:e9:a5:72:3d:e1:31:34:bd:89:ea:1e:55:70:
6f:2b:51:ee:f7:01:b7:2b:ab:7c:6b:1a:d4:6a:96:6f:17:58:
4e:77:9a:dc:dc:89:52:ab:5f:dc:0d:f3:37:2f:c6:2c:11:0d:
50:f7:00:54:40:eb:ca:0e:a8:8d:ea:cd:af:e0:31:10:7e:38:
0d:7d:45:8a:61:24:b3:63:56:9e:63:36:b5:f5:b4:23:e4:bc:
92:a9:b9:d5:ee:e8:1b:26:1f:d0:0e:9d:c4:43:f4:59:6e:0a:
e4:59:01:09:83:c0:bc:30:4f:92:7a:fd:0d:77:69:b8:e6:00:
39:e3:3f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:45 2025 by rpki-client