Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.mft
File: 9OTJkbUsMG_0UQYBGk6VLYaA0rY.mft (raw, json)
Hash identifier: 5ajCq4ePKW7l965pLp+LwrWtTRCaaE0id7xNsJcAO84=
Subject key identifier: 24:21:F9:B6:F4:73:F7:2D:E1:9D:DB:ED:A8:4E:15:6C:7A:4E:B0:37
Authority key identifier: F4:E4:C9:91:B5:2C:30:6F:F4:51:06:01:1A:4E:95:2D:86:80:D2:B6
Certificate issuer: /CN=f4e4c991b52c306ff45106011a4e952d8680d2b6
Certificate serial: 01938BBFF82912F689265A936C73FAEC10F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OTJkbUsMG_0UQYBGk6VLYaA0rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.mft
Manifest number: 084D
Signing time: Tue 03 Dec 2024 09:00:34 +0000
Manifest this update: Tue 03 Dec 2024 09:00:34 +0000
Manifest next update: Wed 04 Dec 2024 09:00:34 +0000
Files and hashes: 1: 9OTJkbUsMG_0UQYBGk6VLYaA0rY.crl (hash: x0iJJ9Z0SOf4hVLa4pNpCFsd6IkUJLfp1qxQnl6dJew=)
2: UkS8SUInkzgsqSzfJ181bF1GZME.roa (hash: 6vfQ7YliVT6CTDwHmHx/uDZzV3zdAmKUnuH1ENcvF+g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:bf:f8:29:12:f6:89:26:5a:93:6c:73:fa:ec:10:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e4c991b52c306ff45106011a4e952d8680d2b6
Validity
Not Before: Dec 3 09:00:34 2024 GMT
Not After : Dec 4 09:00:34 2024 GMT
Subject: CN=2421f9b6f473f72de19ddbeda84e156c7a4eb037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:77:42:79:72:03:b7:69:a3:49:2e:3f:82:d8:
f5:a5:d9:a2:33:56:1f:4b:3a:e1:1c:a3:bc:f3:12:
c3:fb:5e:31:27:fe:cf:50:50:0c:76:b7:23:b0:0d:
50:30:e9:72:80:0a:0a:9c:fe:73:ed:00:3c:b5:38:
42:af:8c:30:5e:b8:06:31:f8:4c:e1:5a:bd:b4:0e:
65:69:44:92:27:33:66:41:10:ba:34:73:b7:11:cd:
39:79:08:47:15:60:f5:24:07:00:71:97:c0:fe:f8:
3e:35:e9:80:6c:86:a0:be:5f:e6:20:ce:f3:31:41:
4b:33:ab:8b:ee:93:45:71:21:e8:02:5e:e2:93:10:
cd:57:14:35:8c:b0:4f:f0:ef:db:b2:f8:af:6e:0e:
6b:48:22:17:1a:31:27:10:d6:47:92:02:71:88:a4:
c6:6e:4c:0b:07:87:4c:c7:b6:26:f1:92:39:c3:9f:
83:a1:d4:b0:8b:72:0f:29:66:2b:c7:f8:64:04:6f:
bd:0f:c3:50:c0:23:27:4a:84:25:06:32:e4:e5:fa:
6a:6c:38:ea:a1:cb:d1:25:20:78:ae:23:2d:60:10:
df:11:9c:78:08:43:52:ce:98:99:7a:1b:0f:c4:2f:
b6:3d:2c:f0:b3:ad:99:06:52:83:7d:2b:57:ea:a4:
05:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:21:F9:B6:F4:73:F7:2D:E1:9D:DB:ED:A8:4E:15:6C:7A:4E:B0:37
X509v3 Authority Key Identifier:
keyid:F4:E4:C9:91:B5:2C:30:6F:F4:51:06:01:1A:4E:95:2D:86:80:D2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OTJkbUsMG_0UQYBGk6VLYaA0rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7f:42:e2:fc:46:6a:99:6d:28:13:36:13:d4:0f:0c:2a:67:
11:e6:c5:70:26:17:31:5b:07:92:d3:e5:7c:07:ff:cc:3b:30:
7b:22:1a:4c:9e:28:59:a0:63:70:54:e2:95:b8:03:8b:c1:38:
fe:89:92:f5:ee:4d:0d:07:b7:52:f3:8b:3a:68:db:48:1e:80:
5a:05:4e:5a:f9:d1:5f:cc:3e:b6:25:86:f2:3e:8b:43:1e:f7:
25:ca:7c:bd:2e:77:7e:6e:72:93:a1:70:62:12:56:d2:43:48:
c4:11:a3:75:7e:d3:43:c4:e4:e3:10:7d:f9:89:ab:80:e2:b4:
15:d5:6d:0b:71:7b:63:9a:81:dd:0e:15:b4:66:4a:94:b2:aa:
51:11:2c:24:34:64:5e:08:90:61:9c:7b:07:66:1a:9d:9a:7e:
6b:d8:22:de:10:f6:4a:c8:9e:11:e9:0c:e9:3e:7e:57:fe:1d:
15:0d:76:10:52:36:c9:e5:0f:96:3c:0f:eb:da:e9:4a:d9:0c:
2a:32:85:8c:26:40:26:ad:e4:b0:c0:29:a2:a1:52:34:ec:66:
cc:17:e2:5a:78:6e:9a:0c:c9:29:dd:c6:5b:d4:10:88:52:05:
6f:f0:e9:d9:70:7d:d7:2b:2e:fc:77:3a:12:70:96:bd:10:4c:
ed:7f:fd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:33:02 2025 by rpki-client