Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.mft
File: 8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.mft (raw, json)
Hash identifier: 9jndk9YX60f7rHbbTnWufiUakrqySMaWICWlDpCJSb8=
Subject key identifier: D4:BB:4D:4D:BF:48:9A:09:4E:8D:0E:F3:9E:B1:70:3B:9A:C5:39:F0
Authority key identifier: 8C:B8:9C:F3:82:1B:2C:25:31:E4:CA:32:9A:BA:51:14:B2:C9:6E:DB
Certificate issuer: /CN=8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB
Certificate serial: 142C0AEA6AA60CC02996C1BB10414627537D4136
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.mft
Manifest number: 8F
Signing time: Fri 31 Jan 2025 16:01:29 +0000
Manifest this update: Fri 31 Jan 2025 15:56:29 +0000
Manifest next update: Sat 01 Feb 2025 16:46:29 +0000
Files and hashes: 1: 326130353a646663313a393162393a3a2f34382d3438203d3e203534313438.roa (hash: 12jNufED+FuODjx9LesNG0DO8etBYCymhmW5u/tLBiw=)
2: 8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.crl (hash: 5EE1g/Ee/lXG46jNZUSYqlB2dn+GRHkTQbVgCGqkQCc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:2c:0a:ea:6a:a6:0c:c0:29:96:c1:bb:10:41:46:27:53:7d:41:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB
Validity
Not Before: Jan 31 15:56:29 2025 GMT
Not After : Feb 1 16:46:29 2025 GMT
Subject: CN=D4BB4D4DBF489A094E8D0EF39EB1703B9AC539F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:46:bb:b5:24:ff:b7:73:3e:77:20:fd:d0:55:
2b:4c:4f:42:3a:4b:96:0f:b1:8a:cd:31:a8:f3:96:
c2:4f:cc:5f:d3:b0:01:67:30:fd:9b:a5:14:61:8c:
dc:38:d0:03:f3:2f:5d:8b:4f:e9:26:93:c6:75:61:
c2:f9:43:3e:b7:23:6d:5f:d1:76:34:70:d0:1c:4f:
b4:54:f2:8e:a7:95:f4:a5:34:61:9d:80:6a:43:16:
1c:7e:44:7b:f5:90:18:07:2c:10:c7:54:45:b4:16:
7c:50:a9:12:79:c5:a9:d9:8a:8c:71:89:d9:bd:55:
ca:33:43:fa:70:7b:56:9e:b1:ed:ef:0e:22:c0:30:
bd:1d:43:89:57:0d:5d:8f:0e:35:ca:95:b7:ca:64:
ef:07:58:79:b4:e1:cd:6a:85:f9:a4:7a:3d:ab:8a:
51:e4:a5:e4:b5:18:a9:d2:91:08:b6:4e:a1:4e:f0:
5c:5d:e8:27:7e:0c:c2:70:46:32:1d:3e:52:5d:69:
19:4f:9f:5a:e8:a7:61:80:9c:43:51:6d:09:07:f1:
e3:21:67:f0:71:98:d8:09:45:69:6b:df:8b:52:db:
a7:6f:47:49:da:a0:ae:9a:21:a0:42:90:a3:8d:74:
07:4b:73:7e:c7:8e:17:4c:e2:5f:06:63:19:73:14:
d7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BB:4D:4D:BF:48:9A:09:4E:8D:0E:F3:9E:B1:70:3B:9A:C5:39:F0
X509v3 Authority Key Identifier:
keyid:8C:B8:9C:F3:82:1B:2C:25:31:E4:CA:32:9A:BA:51:14:B2:C9:6E:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f8:6d:b6:52:18:87:8c:ab:0e:a9:73:18:69:43:eb:76:4e:
33:db:fd:45:42:9a:69:54:26:fb:5b:5c:78:ff:72:75:2b:ea:
0d:70:f1:aa:8f:34:5e:3a:02:d4:eb:99:58:28:4f:62:8b:d2:
e6:a3:d6:84:95:97:a6:59:a3:57:27:9e:75:59:d1:a6:ef:a3:
1a:7a:18:e4:1d:87:52:98:1b:69:87:15:8d:da:c0:2b:92:d2:
83:f7:60:2e:be:5c:b7:e0:d2:8d:8d:a7:16:46:9b:84:e6:3a:
a8:81:b3:b1:5c:03:f2:fb:1d:5f:f7:ff:74:bc:e4:bb:d6:0d:
31:73:3c:6b:74:05:90:6d:d0:79:0e:85:c8:b4:96:74:81:65:
fd:c5:1d:ff:ec:d2:e7:35:e0:7f:85:5a:07:1f:a6:a1:11:1d:
39:4d:a1:4f:0a:58:1f:26:69:4f:4c:4a:1f:10:15:8a:43:7f:
ec:c6:68:d7:92:a5:c3:d4:f0:47:bd:f7:d6:69:54:09:7a:44:
dd:3d:e2:dd:e1:b6:9d:48:d9:f2:29:e8:25:a8:00:75:1c:7e:
e4:cb:4f:b2:28:f4:19:6a:25:fe:92:09:47:d4:ce:a0:32:50:
04:4b:2f:e2:47:1e:d7:62:e9:a3:7a:e4:b3:13:61:8f:87:25:
ad:d9:30:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:02:17 2025 by rpki-client