Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/45fc7c-69ec-4290-960b-2c51d90c4ffe/1/9N6JFHS0vv0-shULVHWda-1mQZY.mft
File: 9N6JFHS0vv0-shULVHWda-1mQZY.mft (raw, json)
Hash identifier: bHoQtXkZeriYYflABkEB8viVJRhHNvaoQ8dzOoXQHU8=
Subject key identifier: 7F:DE:22:F1:57:C3:B9:78:4C:83:19:34:08:04:A7:EB:4B:A2:89:87
Authority key identifier: F4:DE:89:14:74:B4:BE:FD:3E:B2:15:0B:54:75:9D:6B:ED:66:41:96
Certificate issuer: /CN=f4de891474b4befd3eb2150b54759d6bed664196
Certificate serial: 01945F52BAF162E596ED0A779515CC1AC58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9N6JFHS0vv0-shULVHWda-1mQZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/45fc7c-69ec-4290-960b-2c51d90c4ffe/1/9N6JFHS0vv0-shULVHWda-1mQZY.mft
Manifest number: 03A2
Signing time: Mon 13 Jan 2025 11:00:44 +0000
Manifest this update: Mon 13 Jan 2025 11:00:44 +0000
Manifest next update: Tue 14 Jan 2025 11:00:44 +0000
Files and hashes: 1: 9N6JFHS0vv0-shULVHWda-1mQZY.crl (hash: 99WYYJ4qtRvCbuO8jKUchRVl+GDEnjpUrgDE+fN1sJ0=)
2: e1fv_JFrpt1x7MDDR5admPMZ7XI.roa (hash: fi8n75p34OSllpxcf+95I9NtqtTkVG4m6ZzdZXmJV0A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:52:ba:f1:62:e5:96:ed:0a:77:95:15:cc:1a:c5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4de891474b4befd3eb2150b54759d6bed664196
Validity
Not Before: Jan 13 11:00:44 2025 GMT
Not After : Jan 14 11:00:44 2025 GMT
Subject: CN=7fde22f157c3b9784c8319340804a7eb4ba28987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:61:d4:5e:bf:3d:78:4f:40:b2:47:2b:41:
46:1a:91:34:67:a7:12:cd:83:3f:d4:b5:0d:d5:2f:
9b:83:2e:a6:91:fa:72:0c:83:59:93:d9:79:19:71:
06:ad:1b:22:57:f9:5a:ec:35:aa:3e:68:0a:35:a0:
31:0b:ec:35:45:4f:fa:6a:63:0a:8c:b7:bc:51:64:
1d:2f:a1:1d:fd:43:84:4b:e1:be:3a:09:93:f1:67:
ba:88:df:0f:0d:ba:91:f6:f8:31:3d:ba:24:a3:d4:
18:af:4d:c5:5e:32:ec:3c:c6:1f:f1:ba:b0:b1:99:
a4:03:1e:c3:fd:a3:c8:0e:d5:bd:14:81:62:e7:9e:
33:fd:9b:38:b5:4b:88:2b:a9:fb:71:de:d4:41:2b:
66:ec:c8:10:87:76:97:4b:84:2f:58:0c:80:a4:bd:
87:8e:d3:81:9b:2b:e3:88:c3:67:62:f3:ff:d3:90:
a8:17:92:09:6b:cd:47:55:c7:0d:e3:99:fb:7b:f6:
d0:d6:27:c9:08:0c:89:2c:38:82:f9:fc:3e:72:b7:
2a:cf:3d:cc:a1:bc:c1:7c:17:98:ab:24:42:6a:93:
1c:38:64:39:eb:86:f2:38:a6:5a:4b:f3:c7:d3:d2:
37:71:5d:e1:79:96:6c:3f:c3:8c:83:5c:a7:65:22:
2a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DE:22:F1:57:C3:B9:78:4C:83:19:34:08:04:A7:EB:4B:A2:89:87
X509v3 Authority Key Identifier:
keyid:F4:DE:89:14:74:B4:BE:FD:3E:B2:15:0B:54:75:9D:6B:ED:66:41:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N6JFHS0vv0-shULVHWda-1mQZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/45fc7c-69ec-4290-960b-2c51d90c4ffe/1/9N6JFHS0vv0-shULVHWda-1mQZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/45fc7c-69ec-4290-960b-2c51d90c4ffe/1/9N6JFHS0vv0-shULVHWda-1mQZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0a:4a:1a:6c:97:27:1a:bf:0f:62:ad:56:6b:fb:95:63:d0:
c2:22:74:08:41:23:8d:f9:62:50:db:d6:29:79:bc:15:2f:8a:
06:16:c3:ab:c1:f2:8b:95:a7:7a:a2:af:cd:a2:41:66:f0:5b:
c4:c1:09:ca:80:ec:42:57:f4:64:9e:70:a2:77:3c:5f:d6:0c:
48:c7:94:54:4e:46:f7:91:dc:84:cc:9a:77:71:c8:fe:22:19:
cf:50:2d:38:63:24:2a:e8:97:7a:e1:1c:1d:3e:79:b9:e6:5f:
ec:36:9e:25:de:2e:bf:4b:f4:7c:bb:b9:24:70:69:91:f3:52:
60:11:d2:7e:6e:9e:6b:70:48:a0:c2:42:6d:6a:fb:0c:85:b5:
d7:f0:a6:ba:6c:24:a3:a7:91:5c:4d:a1:cb:61:ce:8e:3f:38:
10:e3:b0:12:d4:4b:97:21:b6:d8:04:59:1f:95:64:83:a4:b8:
3e:4e:62:5f:15:66:46:3f:f9:94:54:35:88:ff:cd:29:ed:c8:
87:f1:e1:b3:02:25:56:85:7f:d5:cb:7d:19:80:b1:84:d9:7c:
e4:c9:e8:2f:d2:83:ad:5e:3d:cd:78:cf:ea:fb:a5:ca:6c:7f:
34:a5:d6:10:39:19:ed:15:92:99:8b:d3:f4:17:a4:1f:b4:34:
2b:20:55:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:40:09 2025 by rpki-client