Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9532cf-42d8-48c9-a104-b3f070db819a/1/9h_LTRAqGZcioM1qcJfPO5Ic7mI.mft
File: 9h_LTRAqGZcioM1qcJfPO5Ic7mI.mft (raw, json)
Hash identifier: 5fsZTY+vo8QuTc0BtfY+ZGkyP6wtCxW8Js355FiCXQ0=
Subject key identifier: 4D:E1:05:D4:9C:08:D8:96:CC:7B:75:EA:9C:C1:C6:42:1F:87:C7:E9
Authority key identifier: F6:1F:CB:4D:10:2A:19:97:22:A0:CD:6A:70:97:CF:3B:92:1C:EE:62
Certificate issuer: /CN=f61fcb4d102a199722a0cd6a7097cf3b921cee62
Certificate serial: 0195A355EACBDEEAA3100EC8DC71414BC1F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9h_LTRAqGZcioM1qcJfPO5Ic7mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9532cf-42d8-48c9-a104-b3f070db819a/1/9h_LTRAqGZcioM1qcJfPO5Ic7mI.mft
Manifest number: 09BA
Signing time: Mon 17 Mar 2025 09:01:11 +0000
Manifest this update: Mon 17 Mar 2025 09:01:11 +0000
Manifest next update: Tue 18 Mar 2025 09:01:11 +0000
Files and hashes: 1: 9h_LTRAqGZcioM1qcJfPO5Ic7mI.crl (hash: W7LNjhPVq5KYLiQ5/uQ2f9b4brTdKjUkG3IrsvsCM/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:55:ea:cb:de:ea:a3:10:0e:c8:dc:71:41:4b:c1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f61fcb4d102a199722a0cd6a7097cf3b921cee62
Validity
Not Before: Mar 17 09:01:11 2025 GMT
Not After : Mar 18 09:01:11 2025 GMT
Subject: CN=4de105d49c08d896cc7b75ea9cc1c6421f87c7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:8f:ff:7f:b3:59:e1:ba:ae:aa:e2:2e:fa:
3c:62:6c:05:32:19:0c:c2:01:1e:e9:b4:de:f2:3e:
84:4a:9c:8b:89:41:ce:3e:21:40:3a:9c:4c:01:f5:
4d:b0:2d:d1:41:80:b4:fd:a7:e3:19:91:bf:8c:ff:
5b:ec:fb:89:80:b0:8f:3d:a6:d0:c1:6e:9f:74:7b:
75:13:11:6b:aa:78:6d:5e:94:30:b2:63:64:cc:d0:
7c:10:97:c7:f5:0e:a2:98:6e:9d:ab:28:ab:9b:5f:
f3:bc:07:72:4a:9c:23:f0:0b:ef:95:f6:5f:c1:d0:
cb:ad:3d:78:56:2c:e7:75:f6:bc:c7:8e:8f:80:82:
d3:c2:70:f2:91:5f:a0:5f:5b:33:90:cc:2f:7c:7e:
62:24:b0:48:13:7d:95:19:9c:f2:68:23:04:b3:2b:
be:47:ea:99:2a:aa:c3:2c:4a:e8:c0:01:76:0a:b3:
e1:ca:67:3c:8f:a6:eb:30:ee:c0:41:06:8a:22:bc:
c1:2d:4b:cb:eb:b6:0c:45:08:8d:ac:38:6b:75:1f:
83:39:a6:d1:98:a2:60:06:84:6d:fe:12:8a:d2:04:
da:d3:be:4b:f7:b2:23:4b:22:42:16:d0:31:ec:54:
2c:fb:bf:7b:d8:9b:9b:0d:cf:8e:ab:3e:15:46:de:
c5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E1:05:D4:9C:08:D8:96:CC:7B:75:EA:9C:C1:C6:42:1F:87:C7:E9
X509v3 Authority Key Identifier:
keyid:F6:1F:CB:4D:10:2A:19:97:22:A0:CD:6A:70:97:CF:3B:92:1C:EE:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9h_LTRAqGZcioM1qcJfPO5Ic7mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9532cf-42d8-48c9-a104-b3f070db819a/1/9h_LTRAqGZcioM1qcJfPO5Ic7mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9532cf-42d8-48c9-a104-b3f070db819a/1/9h_LTRAqGZcioM1qcJfPO5Ic7mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b2:08:62:41:90:9b:fb:f5:92:72:c7:9a:98:c1:f9:7f:7d:
bc:d8:22:2f:ac:cb:f6:02:10:48:1e:16:7a:97:27:da:2f:f6:
17:ce:f7:92:50:c1:69:66:5a:f4:6a:fc:fc:69:16:4e:5b:48:
9d:18:e2:2a:2f:a0:a3:27:65:92:a4:02:7e:80:d5:66:3e:d3:
29:91:b1:ac:ce:07:21:5c:bb:d3:b7:32:f9:d7:bb:3a:88:89:
7b:ec:c8:2a:ec:c6:78:b1:dc:ba:b0:24:4c:6d:db:7e:c7:7c:
b5:22:91:f5:52:19:5b:cb:39:75:74:3d:c2:90:3e:c5:cf:bd:
a7:b1:16:ab:06:63:5f:01:d1:b6:f9:a6:ed:46:de:55:07:b4:
68:ef:27:96:0f:88:c4:82:1f:31:c6:07:06:26:f0:79:13:8a:
a9:b2:a4:0d:e4:f0:76:b9:14:3d:d7:3b:ed:42:69:14:e2:1b:
81:d4:59:be:c9:a0:18:19:aa:80:e0:c4:bf:2d:3f:31:ed:26:
08:46:b8:09:41:f9:d2:53:72:ff:dc:32:7c:d4:24:03:e5:d1:
fc:cc:4f:14:e7:06:d0:cc:30:00:67:15:34:16:fe:88:7e:f9:
ff:b6:1b:5c:d6:2d:73:61:19:41:9b:90:03:e1:40:5a:d9:10:
e3:84:90:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:24:25 2025 by rpki-client