Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f5f2a9-8fbe-4286-bbdd-825692695211/1/rJy1p1bPVPaUZAwR-OC9GbJ5Pak.mft
File: rJy1p1bPVPaUZAwR-OC9GbJ5Pak.mft (raw, json)
Hash identifier: lmBMl/NYknSz59goldvya1tWXgcHao9IUMB8cepmGHM=
Subject key identifier: BB:87:2C:07:31:B3:EC:65:4F:70:11:CF:30:03:44:42:4B:16:E2:9A
Authority key identifier: AC:9C:B5:A7:56:CF:54:F6:94:64:0C:11:F8:E0:BD:19:B2:79:3D:A9
Certificate issuer: /CN=ac9cb5a756cf54f694640c11f8e0bd19b2793da9
Certificate serial: 0191DE6243DE7996E3814B457A39CFAC434D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJy1p1bPVPaUZAwR-OC9GbJ5Pak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f5f2a9-8fbe-4286-bbdd-825692695211/1/rJy1p1bPVPaUZAwR-OC9GbJ5Pak.mft
Manifest number: 0E14
Signing time: Wed 11 Sep 2024 00:01:07 +0000
Manifest this update: Wed 11 Sep 2024 00:01:07 +0000
Manifest next update: Thu 12 Sep 2024 00:01:07 +0000
Files and hashes: 1: 0Xugtl_duHCCFAaqEHQ2XU5ScHc.roa (hash: gNTI4UxZPXWqUE8C9wkHBRzgfLTer6cMo55RwDi6phM=)
2: rJy1p1bPVPaUZAwR-OC9GbJ5Pak.crl (hash: IfttzuwqBfM6bHmjDqjTxzXckqxiW46I1K/8l63R010=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:de:62:43:de:79:96:e3:81:4b:45:7a:39:cf:ac:43:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9cb5a756cf54f694640c11f8e0bd19b2793da9
Validity
Not Before: Sep 11 00:01:07 2024 GMT
Not After : Sep 12 00:01:07 2024 GMT
Subject: CN=bb872c0731b3ec654f7011cf300344424b16e29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:8c:5a:1f:79:1d:46:c5:ff:27:e3:87:09:
4a:81:5c:c1:64:88:2d:f3:a1:a3:13:c4:ed:f9:e1:
29:b3:57:65:cb:e3:94:3d:b8:ac:fb:0e:57:cb:26:
6b:3c:44:28:d1:0d:2f:f8:41:a4:b5:de:68:59:54:
8c:c5:84:ca:03:13:50:ae:89:77:cb:f0:a5:b0:b0:
fa:9a:ff:1e:99:76:a7:2e:f7:f8:30:55:aa:f0:30:
c1:65:2b:41:77:18:b4:0a:62:57:88:d9:6e:85:e6:
91:7c:1e:29:7a:71:54:68:38:ec:08:72:8e:d4:33:
0f:8e:55:f1:0d:bf:c2:90:5c:a2:50:25:df:ec:49:
26:64:be:ff:c5:7c:bc:82:b3:c4:60:4e:95:39:98:
0f:9a:ad:1f:ca:28:05:2d:5b:45:dc:3f:56:23:35:
95:5b:4e:39:31:a2:c6:f0:c2:2b:41:d7:0a:1c:15:
23:35:4f:4e:df:cb:06:89:26:be:6f:9f:14:23:60:
83:e2:9f:55:3f:80:22:e4:30:23:3d:e4:4e:8a:b2:
db:e4:45:e4:b4:13:73:6c:87:17:f8:82:ec:d7:ea:
d9:69:73:2d:a9:0c:78:0e:2f:15:f1:88:2b:23:07:
56:0d:6f:42:0a:20:42:8e:03:7d:18:b8:b0:fc:bd:
2a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:87:2C:07:31:B3:EC:65:4F:70:11:CF:30:03:44:42:4B:16:E2:9A
X509v3 Authority Key Identifier:
keyid:AC:9C:B5:A7:56:CF:54:F6:94:64:0C:11:F8:E0:BD:19:B2:79:3D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJy1p1bPVPaUZAwR-OC9GbJ5Pak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f5f2a9-8fbe-4286-bbdd-825692695211/1/rJy1p1bPVPaUZAwR-OC9GbJ5Pak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f5f2a9-8fbe-4286-bbdd-825692695211/1/rJy1p1bPVPaUZAwR-OC9GbJ5Pak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e7:c4:66:d5:10:c5:50:0e:85:84:5b:33:b5:e4:8a:1b:7f:
32:3a:2a:94:10:98:c6:5d:b3:ec:d9:cf:d5:3b:e0:15:aa:4e:
21:cc:c4:0b:0b:81:ed:38:6c:4e:ed:8a:c0:c0:16:58:7e:30:
95:b3:21:f5:17:ab:98:3d:b9:e4:2a:e3:75:71:04:69:f8:5d:
5a:8b:72:7b:2a:1b:94:99:49:72:98:16:45:84:80:30:46:47:
86:98:04:d9:04:ea:c2:ff:a1:25:f2:69:b0:db:1a:3b:13:71:
5d:8a:28:6d:01:37:51:f8:b7:30:30:2f:2d:8d:b0:bb:1b:b8:
ff:d4:55:8d:f5:87:93:ff:5f:91:3e:f9:a3:70:2f:88:0d:2d:
43:6a:d9:de:af:75:4d:8d:e6:ea:22:63:87:cc:a8:6d:30:03:
f6:bd:d4:65:a0:5c:a7:9a:8d:f6:8d:62:1f:d0:4c:cb:e7:b1:
c1:b9:83:9c:cc:14:77:37:8f:0b:d9:cc:aa:71:ff:8b:ef:ab:
01:cd:60:a6:96:8f:cf:32:71:94:4d:88:d2:06:73:8d:b1:98:
60:3f:40:f0:05:a7:07:a2:c2:f1:eb:b6:06:42:d0:a3:97:0b:
6d:f8:66:c3:a2:ad:36:10:35:de:27:22:46:5d:3c:2b:15:bd:
43:b5:b1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:41:55 2025 by rpki-client