Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a1c8bd-bd94-46f6-aa49-7417e71a76e8/1/9ovCAZ6OUG45nL9lhmmcyIb8IPY.mft
File: 9ovCAZ6OUG45nL9lhmmcyIb8IPY.mft (raw, json)
Hash identifier: 8RFCr7iJ5g8NmKwcBoTUoHl4gxS0qFgyofVy8vObMwU=
Subject key identifier: 99:B5:AD:AC:1C:96:5E:29:F5:56:40:4C:47:4A:4D:07:A8:81:E8:C4
Authority key identifier: F6:8B:C2:01:9E:8E:50:6E:39:9C:BF:65:86:69:9C:C8:86:FC:20:F6
Certificate issuer: /CN=f68bc2019e8e506e399cbf6586699cc886fc20f6
Certificate serial: 019448CB535B28E7DCDA2A5568114B3CAF18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ovCAZ6OUG45nL9lhmmcyIb8IPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a1c8bd-bd94-46f6-aa49-7417e71a76e8/1/9ovCAZ6OUG45nL9lhmmcyIb8IPY.mft
Manifest number: 13C4
Signing time: Thu 09 Jan 2025 02:01:12 +0000
Manifest this update: Thu 09 Jan 2025 02:01:12 +0000
Manifest next update: Fri 10 Jan 2025 02:01:12 +0000
Files and hashes: 1: 9ovCAZ6OUG45nL9lhmmcyIb8IPY.crl (hash: C3NNJuPMtI2YqDNwYI3MCwnGzrHRB2FBIoladPfj0Sc=)
2: d-rkCPEWQiWuiZZUguExXn9RIh8.roa (hash: bghyH5rqUf1VZLa/yIfZLWuakQo6sjjmYi5842bNOVM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:48:cb:53:5b:28:e7:dc:da:2a:55:68:11:4b:3c:af:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68bc2019e8e506e399cbf6586699cc886fc20f6
Validity
Not Before: Jan 9 02:01:12 2025 GMT
Not After : Jan 10 02:01:12 2025 GMT
Subject: CN=99b5adac1c965e29f556404c474a4d07a881e8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fc:81:d3:c8:ec:31:61:3f:b6:72:37:fe:76:
d4:26:cb:29:9d:f6:95:a1:05:3c:af:b5:e3:80:6a:
c6:ff:43:5c:13:e1:b4:2a:85:4e:b0:17:37:73:6a:
66:4e:43:03:72:69:16:66:b1:41:64:1e:67:e8:5c:
a6:f1:fc:ee:65:17:63:6b:a4:8b:c2:b0:69:34:08:
f4:c0:85:2c:0f:71:62:47:65:0c:10:4b:cb:b4:b8:
7a:99:63:90:b8:c1:46:68:84:a6:ea:d8:9e:b3:f8:
9b:ac:1c:81:c3:47:cd:83:7b:bd:af:e8:36:d3:ce:
a9:38:56:75:31:74:07:07:92:9d:61:8d:09:cd:ea:
3c:a2:fc:6b:bf:7e:16:aa:79:4f:3a:41:ae:01:66:
8a:f8:9e:3d:10:ef:f3:3d:9f:ec:1e:98:ff:85:08:
eb:ed:7c:2e:da:c0:a5:d4:1e:63:fc:d8:e5:0f:e3:
81:9e:35:67:7b:c3:3b:a6:6f:e7:61:7e:d5:b8:f0:
d2:2f:91:df:3f:ba:88:e4:33:aa:ba:1e:34:01:1f:
8f:92:8f:62:e9:53:23:43:de:a3:1a:5b:78:31:67:
a6:57:b7:89:cf:6d:4e:25:b3:95:d4:b8:d3:f0:3b:
5b:e1:31:20:1f:b3:c3:f4:97:2f:cd:4f:f3:09:75:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B5:AD:AC:1C:96:5E:29:F5:56:40:4C:47:4A:4D:07:A8:81:E8:C4
X509v3 Authority Key Identifier:
keyid:F6:8B:C2:01:9E:8E:50:6E:39:9C:BF:65:86:69:9C:C8:86:FC:20:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ovCAZ6OUG45nL9lhmmcyIb8IPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a1c8bd-bd94-46f6-aa49-7417e71a76e8/1/9ovCAZ6OUG45nL9lhmmcyIb8IPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a1c8bd-bd94-46f6-aa49-7417e71a76e8/1/9ovCAZ6OUG45nL9lhmmcyIb8IPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:47:31:10:c0:a5:6a:92:8d:cd:9a:a0:ad:13:65:ef:cb:b9:
e4:54:59:b4:f7:b7:71:29:3e:ec:84:c3:33:52:9a:09:c6:57:
73:01:ec:59:d8:e5:3a:c4:83:79:c7:a5:51:eb:69:9b:82:b0:
ca:88:e1:6e:63:9a:8a:2a:41:7b:dd:10:42:bf:09:a1:ad:33:
ca:e8:bb:60:bf:9e:44:52:17:2c:9f:a3:ca:d6:1a:7c:13:52:
58:00:91:33:34:92:70:45:85:68:0d:e1:4d:1f:7c:19:f5:77:
f1:5a:66:ad:a4:a7:66:30:f6:74:6e:fb:89:05:28:77:eb:16:
d2:77:d2:fe:fa:4b:78:8a:db:d5:52:f3:5c:dc:b4:d0:59:80:
4b:e2:62:29:a3:a5:3a:72:d5:c2:ac:bc:ae:91:e0:68:21:1d:
2e:64:81:ee:2a:c8:8a:6c:94:7c:20:71:68:8a:6d:04:99:8a:
19:58:4c:14:3a:cd:f3:80:9c:70:6d:a6:6f:eb:b3:59:60:9e:
9a:fc:77:7f:93:34:74:a9:e0:ba:fa:1f:96:16:c8:70:c0:4b:
9f:c5:f1:63:8f:6d:cd:d1:3e:db:46:12:10:d4:83:62:aa:ad:
5d:8e:56:9f:6a:e6:a9:87:a5:47:74:11:3a:4d:8d:fc:32:49:
a9:e0:50:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:24:53 2025 by rpki-client