Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/9Lp8FFiYuK49KzocccUKsZqT9kc.mft
File: 9Lp8FFiYuK49KzocccUKsZqT9kc.mft (raw, json)
Hash identifier: FrsWVWZRCgWs0D/GeUjkG2EG2v8OYbUVNCMXnoxv6ic=
Subject key identifier: 7B:CE:4B:00:A7:51:93:6A:61:56:35:72:4D:DA:4A:47:11:0E:B9:7C
Authority key identifier: F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47
Certificate issuer: /CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
Certificate serial: 018EE5119AB35808F8596E4D127E57468500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/9Lp8FFiYuK49KzocccUKsZqT9kc.mft
Manifest number: 091C
Signing time: Tue 16 Apr 2024 04:01:59 +0000
Manifest this update: Tue 16 Apr 2024 04:01:59 +0000
Manifest next update: Wed 17 Apr 2024 04:01:59 +0000
Files and hashes: 1: 9Lp8FFiYuK49KzocccUKsZqT9kc.crl (hash: jmjJvlAyvfLLMRBhU9m2exKKIxZNV/RZ2KgvttyKxmA=)
2: gUjay7S2lD-NGIuvQV60U1UgCl8.roa (hash: kZNCeAFsIxqcLbgHZrI8o6dSw6s6559zm573JKLGJ9E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e5:11:9a:b3:58:08:f8:59:6e:4d:12:7e:57:46:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
Validity
Not Before: Apr 16 04:01:59 2024 GMT
Not After : Apr 17 04:01:59 2024 GMT
Subject: CN=7bce4b00a751936a615635724dda4a47110eb97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:79:3e:d3:be:67:1d:d1:cc:8d:55:cc:ac:ba:
99:ba:66:d1:e0:f6:19:6f:9d:31:f5:40:50:42:c3:
0c:80:3e:9d:f2:80:d7:02:0a:ef:47:16:a9:3a:48:
c9:fc:f1:9d:09:7b:79:06:5a:98:ae:4d:93:dc:fe:
f5:b2:1e:d0:35:6a:94:5b:b1:ad:c4:f6:71:50:53:
c7:15:9b:c3:a1:e2:e4:73:18:a4:79:b6:c7:32:80:
fa:ef:6a:74:4e:97:27:64:46:42:1c:cc:94:ce:20:
4b:e7:41:7f:9b:8f:b3:48:b8:e4:cb:4f:35:35:08:
3d:37:13:49:20:8f:c0:96:a1:c3:ad:b3:aa:70:63:
59:39:6d:3e:db:11:00:3c:3a:8e:a4:d7:26:e6:1f:
a9:b7:89:1d:54:6d:2e:b9:3b:c7:d3:c1:cf:ea:75:
9a:87:4d:60:8c:57:7e:04:47:3b:a2:68:38:93:26:
9e:ea:1e:62:db:bb:64:59:5f:1c:bb:c1:1f:7e:c2:
63:80:cd:f4:84:12:93:8c:7e:63:50:f0:bf:90:ec:
df:46:9e:2f:96:11:bb:4c:59:1d:f0:bd:94:64:fd:
cc:d2:40:f0:d2:8b:39:db:ee:f2:3d:80:16:ff:e7:
10:ec:a1:67:84:d6:03:dd:fd:55:0e:ee:92:a5:5d:
05:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CE:4B:00:A7:51:93:6A:61:56:35:72:4D:DA:4A:47:11:0E:B9:7C
X509v3 Authority Key Identifier:
keyid:F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/9Lp8FFiYuK49KzocccUKsZqT9kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/9Lp8FFiYuK49KzocccUKsZqT9kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:29:63:59:be:a0:c3:b3:23:1e:2b:de:68:a4:77:af:ba:f7:
83:71:ae:e4:16:13:94:cf:d5:e4:16:8d:b1:71:6f:59:61:74:
87:67:b2:09:e7:24:c4:f7:62:e3:a8:c7:e4:2d:13:7d:16:20:
10:8b:b5:71:88:c8:53:32:4b:9b:0d:03:13:ad:86:a9:bf:25:
95:70:b1:35:c6:d7:65:87:6d:f3:e1:70:33:81:dc:b3:40:fe:
76:9d:65:9a:26:39:4b:7f:2b:c8:72:70:0a:b1:b8:01:05:72:
00:0b:92:84:1f:1b:82:50:c6:2b:93:a9:82:40:8f:73:09:fa:
b9:8c:2b:cc:88:24:c8:dd:a9:fc:58:81:cc:63:3c:56:5a:ee:
97:00:05:e6:d1:02:8e:fd:45:1f:3b:bf:42:ed:1c:17:aa:ab:
ff:85:5b:4b:10:eb:3c:f8:f1:32:fa:ef:38:ce:e2:bd:8e:23:
ec:7c:d8:29:2e:ce:20:b3:97:5e:66:f5:4e:34:95:eb:ff:34:
f0:a5:f3:8f:23:bf:7f:40:5f:3b:34:fc:f2:08:c6:d6:0c:d5:
2e:bf:a3:cc:bd:1c:cd:e3:81:ab:bb:62:b6:82:39:b5:b2:76:
e4:b8:8d:07:60:9f:54:00:ee:8e:1a:f9:4b:0d:5b:6b:83:4d:
f2:5b:db:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:33:56 2025 by rpki-client