Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/8e206b-e987-461a-ad00-fbbc76ea96d5/1/s9MHqYYJLNZfyTQZhj4D2YlEARo.mft
File: s9MHqYYJLNZfyTQZhj4D2YlEARo.mft (raw, json)
Hash identifier: C/GGymllCvP+CLDqyXaKH7rJa1pmW3q9V6c0nWXSowo=
Subject key identifier: 1B:96:CC:75:85:56:7C:20:5A:36:05:D1:2A:29:28:83:6A:80:C1:B9
Authority key identifier: B3:D3:07:A9:86:09:2C:D6:5F:C9:34:19:86:3E:03:D9:89:44:01:1A
Certificate issuer: /CN=b3d307a986092cd65fc93419863e03d98944011a
Certificate serial: 01933F5DD15651A44622718BC4F8B4078FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9MHqYYJLNZfyTQZhj4D2YlEARo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/8e206b-e987-461a-ad00-fbbc76ea96d5/1/s9MHqYYJLNZfyTQZhj4D2YlEARo.mft
Manifest number: 081E
Signing time: Mon 18 Nov 2024 13:02:13 +0000
Manifest this update: Mon 18 Nov 2024 13:02:13 +0000
Manifest next update: Tue 19 Nov 2024 13:02:13 +0000
Files and hashes: 1: gX33RndK-vfUB8vyVKm6SlYQRYQ.roa (hash: zQZdZkQE0fWrtIb5Wrm+JOKQkirwQvGsHtspHPipPJM=)
2: s9MHqYYJLNZfyTQZhj4D2YlEARo.crl (hash: Qmvnxxt41MgPP3CwPtcT5Ja2xKQXwJwk2mKbu4WpSco=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:5d:d1:56:51:a4:46:22:71:8b:c4:f8:b4:07:8f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d307a986092cd65fc93419863e03d98944011a
Validity
Not Before: Nov 18 13:02:13 2024 GMT
Not After : Nov 19 13:02:13 2024 GMT
Subject: CN=1b96cc7585567c205a3605d12a2928836a80c1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:73:c1:d3:de:9e:cc:8e:f3:6d:d5:08:8c:
7d:a7:60:a5:3f:68:7e:24:d2:b0:62:4d:19:24:5d:
39:db:bd:1f:3a:06:58:c3:d6:a2:42:c3:60:09:83:
10:8c:c6:12:00:35:bf:3e:65:f2:67:dc:69:8f:bf:
25:e9:7a:c2:db:be:25:50:db:38:49:98:7f:a0:96:
91:8a:8a:73:f2:f8:22:6f:be:38:d3:60:c2:f6:7b:
bc:5c:7c:21:a5:8b:68:39:ac:8d:ad:b7:dd:24:dd:
ee:8c:ac:f3:7d:58:34:01:6d:11:13:1d:c3:c1:be:
03:aa:db:d5:45:d4:85:9c:c3:50:89:c5:bc:4e:6b:
a6:6b:e1:85:2c:34:ca:61:a6:3a:7d:0d:42:96:6a:
71:4a:e9:eb:2d:da:0c:9c:f0:51:6f:b7:b3:2f:ed:
ac:8c:d2:73:96:26:7b:2a:0a:73:5f:06:5b:06:ef:
e2:e5:f4:e5:28:06:35:68:91:a2:de:dc:d2:0f:91:
75:33:ae:10:59:63:4a:39:5a:b3:f2:dd:a7:86:3c:
48:ec:fc:70:1f:c4:22:08:48:64:88:63:27:3b:00:
4c:52:26:e3:e0:93:56:0b:b4:ba:b9:06:da:8c:4f:
c8:5f:fb:12:e0:f6:75:7a:5f:a3:3b:a2:b8:9b:23:
a3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:96:CC:75:85:56:7C:20:5A:36:05:D1:2A:29:28:83:6A:80:C1:B9
X509v3 Authority Key Identifier:
keyid:B3:D3:07:A9:86:09:2C:D6:5F:C9:34:19:86:3E:03:D9:89:44:01:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9MHqYYJLNZfyTQZhj4D2YlEARo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/8e206b-e987-461a-ad00-fbbc76ea96d5/1/s9MHqYYJLNZfyTQZhj4D2YlEARo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/8e206b-e987-461a-ad00-fbbc76ea96d5/1/s9MHqYYJLNZfyTQZhj4D2YlEARo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:85:3d:96:f4:a9:e7:02:16:7d:0b:2e:31:42:94:71:99:51:
7d:f5:71:e0:58:d2:58:eb:72:41:f9:f4:0d:d2:40:fd:c9:c5:
32:c2:11:62:b8:40:34:fb:e0:e0:47:b6:75:ef:34:7c:dd:f7:
6e:85:b7:0b:f8:af:17:e0:d7:eb:98:9e:f4:21:aa:0f:32:5c:
86:25:05:88:74:43:6e:96:e3:26:19:16:b0:47:89:04:42:04:
8a:98:48:c4:bb:4c:55:fa:07:28:e4:4f:55:e1:d7:95:9e:3a:
22:7f:90:7e:0c:c2:0c:2e:c8:01:39:39:f4:67:18:54:91:3d:
0e:a1:cd:e4:3b:18:09:8c:37:86:7e:6f:3d:be:17:a6:49:fc:
7c:f3:2e:75:52:93:a4:43:61:a2:ec:38:f4:af:80:e6:f9:76:
fb:69:53:d3:4f:45:e6:08:ea:5d:58:d1:b0:fb:1c:27:07:29:
0a:26:59:29:da:0b:37:39:6f:2e:d9:95:a6:18:65:09:24:ec:
a5:34:77:81:54:2a:cf:b8:3b:3d:fb:84:25:87:3f:37:b6:a6:
52:5c:c5:ba:02:77:89:6b:57:65:13:cd:d0:89:8a:8d:24:a9:
58:92:6b:d1:ba:60:06:44:02:d2:0b:f9:b9:c7:d4:1f:fb:ce:
7c:2e:6b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:03 2025 by rpki-client