Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7029b3-2ca8-4ba1-aa92-e6d472d3a825/1/0U90f0LW8mBvgI-IKfQ8kN1Iygs.mft
File: 0U90f0LW8mBvgI-IKfQ8kN1Iygs.mft (raw, json)
Hash identifier: d6QQXsXXRo1F3Z0UkfZvs7DhZoWyCiLxCbwe+oYvF6w=
Subject key identifier: 9B:1F:42:C9:4E:62:5E:26:B8:75:66:5F:4D:27:8D:76:A4:85:ED:5F
Authority key identifier: D1:4F:74:7F:42:D6:F2:60:6F:80:8F:88:29:F4:3C:90:DD:48:CA:0B
Certificate issuer: /CN=d14f747f42d6f2606f808f8829f43c90dd48ca0b
Certificate serial: 0194067CB928E6CDC60447015A629CDD1373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0U90f0LW8mBvgI-IKfQ8kN1Iygs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7029b3-2ca8-4ba1-aa92-e6d472d3a825/1/0U90f0LW8mBvgI-IKfQ8kN1Iygs.mft
Manifest number: 0979
Signing time: Fri 27 Dec 2024 05:00:24 +0000
Manifest this update: Fri 27 Dec 2024 05:00:24 +0000
Manifest next update: Sat 28 Dec 2024 05:00:24 +0000
Files and hashes: 1: 0U90f0LW8mBvgI-IKfQ8kN1Iygs.crl (hash: Ge/8qevpqoy6InJnbSuGsuduhg4ZyFvCqU9xJeR06RQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:7c:b9:28:e6:cd:c6:04:47:01:5a:62:9c:dd:13:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14f747f42d6f2606f808f8829f43c90dd48ca0b
Validity
Not Before: Dec 27 05:00:24 2024 GMT
Not After : Dec 28 05:00:24 2024 GMT
Subject: CN=9b1f42c94e625e26b875665f4d278d76a485ed5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d5:f6:c6:c9:5a:a4:04:32:b2:1f:a0:58:51:
07:79:07:e8:c1:a8:e9:aa:34:e6:7b:20:07:c2:3e:
f3:06:42:b5:b4:16:8d:c6:e3:a9:60:fe:08:a7:5e:
6e:ed:5a:f7:43:a0:b4:23:5f:3a:7d:84:ba:9f:61:
17:b6:37:4d:0b:1d:ff:b8:2f:ba:f7:04:d7:22:8c:
14:50:07:51:38:da:c3:57:73:27:7f:46:f9:2a:a0:
a5:6a:cc:d2:da:20:54:7b:c8:83:d2:4d:fe:65:7c:
46:dc:5d:26:fb:61:ff:1b:2d:c0:2c:5c:96:d1:c7:
b7:cd:93:9f:06:14:c3:f0:65:07:78:f3:ce:27:49:
ec:73:2b:09:e1:4c:4c:c3:2f:fc:ec:3e:1f:12:20:
cd:58:1a:fd:ae:b4:e2:fc:66:4d:5c:9d:f3:c4:dc:
9e:70:2d:eb:ef:48:58:9c:fb:63:5a:c7:25:2f:8e:
35:e2:aa:7b:fb:7c:32:12:7a:b8:1b:d4:b3:da:2f:
69:7c:7b:10:e8:97:bb:7f:0a:de:26:91:2b:c0:76:
b1:e4:38:64:6c:80:d8:08:6a:06:0b:d9:e8:01:4e:
fa:46:5a:48:dd:79:ab:7d:8a:c8:8c:8c:d5:e9:56:
6e:be:ee:e2:55:a0:75:70:65:81:3b:b1:79:e4:1c:
6c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1F:42:C9:4E:62:5E:26:B8:75:66:5F:4D:27:8D:76:A4:85:ED:5F
X509v3 Authority Key Identifier:
keyid:D1:4F:74:7F:42:D6:F2:60:6F:80:8F:88:29:F4:3C:90:DD:48:CA:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0U90f0LW8mBvgI-IKfQ8kN1Iygs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7029b3-2ca8-4ba1-aa92-e6d472d3a825/1/0U90f0LW8mBvgI-IKfQ8kN1Iygs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7029b3-2ca8-4ba1-aa92-e6d472d3a825/1/0U90f0LW8mBvgI-IKfQ8kN1Iygs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:07:8b:c2:f0:28:b8:02:54:23:69:d4:97:f9:81:05:f4:7a:
d6:91:2c:f2:e0:25:f7:83:aa:ae:53:78:3e:e9:ea:d5:e4:b5:
89:8e:cd:95:c4:dc:3f:45:e1:30:3e:0d:cb:4d:83:85:d6:f4:
dc:54:3c:a5:26:47:dc:f7:ba:b6:2c:c1:06:ac:05:ba:9f:9a:
23:df:26:69:21:cf:9f:ab:8e:10:18:30:93:86:b8:3a:58:40:
56:3e:d8:66:74:0a:2e:e1:3c:4d:72:6c:34:9a:33:84:ba:05:
0e:ac:9f:e9:8b:a0:2a:eb:1f:15:e9:f2:55:5d:6f:02:14:1e:
22:80:31:10:89:2c:7d:37:de:9f:68:37:28:1b:d9:1e:07:7e:
e1:4e:d4:27:e8:c2:10:55:bf:41:3a:61:bf:cc:e3:b3:e7:19:
cb:9a:36:f4:c4:bd:fc:fb:92:89:11:fb:88:d6:f7:4f:6b:ea:
d0:24:aa:ea:79:da:e8:b1:5e:0f:49:31:0f:3f:0b:d1:94:15:
11:b6:28:c5:9a:7d:d4:a5:78:44:ad:4e:a6:e3:50:95:9b:51:
b6:71:71:b8:87:b0:ea:f2:34:2a:37:b9:26:eb:b9:b2:b0:0b:
cd:e9:c7:7d:a6:02:c2:ae:d6:d9:12:f4:4f:c2:8a:21:71:d2:
d3:c3:b6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:23:01 2025 by rpki-client