Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
File: 8oB_KA2plWnsokNGur6dyFrBMkA.mft (raw, json)
Hash identifier: fXivGL4Naxy6U1Js/56eiItq4mngVBCvv4+d9iJ7BCI=
Subject key identifier: 21:31:58:BC:68:78:F9:7F:8F:6E:0E:4F:0A:53:67:D2:6F:C4:2F:2E
Authority key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
Certificate issuer: /CN=f2807f280da99569eca24346babe9dc85ac13240
Certificate serial: 0194BCAA24B0202D61715CB1AFCA0E70C3C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
Manifest number: 0F6C
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: 8oB_KA2plWnsokNGur6dyFrBMkA.crl (hash: LXYXJbHrUxnVbQvLlVm0BLT+z3GTZm8d2unOYWkO1Fk=)
2: RxiVRcsHeclsIn7rqDibVKMm4qY.roa (hash: RdPDIHwu5UxKtKljTR4KLIRVl+B3RPcwmBVzbEhliKU=)
3: n1BFonHtDGvA8w45LaQUVIMy610.roa (hash: UPpZGSFwSh5u0Vmh3TPpTDA5brKnQclTUnn56OlMfIA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:24:b0:20:2d:61:71:5c:b1:af:ca:0e:70:c3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2807f280da99569eca24346babe9dc85ac13240
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=213158bc6878f97f8f6e0e4f0a5367d26fc42f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:f0:d2:88:3a:1b:1a:8a:95:fe:05:ab:42:
b4:f2:93:27:ef:ea:e5:81:3c:dd:fe:c5:ef:90:fe:
d0:5b:1a:be:35:60:06:0a:11:40:c1:9c:46:81:8e:
f7:9c:64:8d:bd:7b:5b:2a:f6:0e:d9:69:3a:61:36:
5d:9d:4c:4b:63:85:ab:f2:e3:21:c6:82:a0:0a:5d:
e6:c7:3b:ba:1e:bf:ab:5d:00:73:e2:09:a0:50:a3:
ea:5e:09:1c:98:90:8a:b7:c1:c6:3b:de:5e:13:41:
9b:70:fb:7e:8c:fb:69:3b:ca:c2:10:f8:45:1a:76:
1e:41:87:69:00:d6:e9:f8:01:6c:ef:12:5e:df:1d:
14:dc:2d:26:f4:88:54:cc:88:7a:95:07:bb:87:49:
22:13:22:95:9a:e2:10:66:89:4e:d7:ac:b3:cd:7e:
b9:58:b2:c6:81:03:73:be:56:4e:74:fa:87:e2:37:
29:3d:a2:11:3c:fa:1f:ff:31:4b:c1:fc:ab:71:b2:
69:da:3a:97:f3:a4:69:da:0c:fb:68:d8:e0:96:9f:
e7:a1:ec:55:5d:b8:46:a2:96:c8:09:d3:d3:01:8e:
23:d2:aa:c3:19:82:96:0e:7f:0f:05:9b:50:61:17:
ee:98:cb:ae:2b:35:29:91:dc:c1:df:d3:9d:a8:f6:
c7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:31:58:BC:68:78:F9:7F:8F:6E:0E:4F:0A:53:67:D2:6F:C4:2F:2E
X509v3 Authority Key Identifier:
keyid:F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7c:27:95:10:5c:03:7e:45:19:42:ce:c3:ef:79:a3:46:1e:
04:ad:b1:89:54:94:1b:51:69:dc:23:ea:ca:92:8d:83:28:ce:
b7:a3:9a:a3:7d:ca:b7:9a:a8:27:5e:db:a9:79:e3:22:4e:c5:
7c:7a:31:c5:5a:1c:b1:9e:e3:9a:80:42:ca:30:03:b8:4e:6e:
10:c6:68:6b:45:86:40:72:93:b4:cd:57:4b:44:3d:98:51:10:
ed:6d:e7:92:0c:68:0a:90:f9:1e:5f:b0:49:d1:a3:1f:8b:07:
cc:09:3f:b5:78:fc:39:0b:e0:05:b9:bd:a2:45:16:25:2e:68:
f5:ce:a3:28:7c:62:21:39:f8:5e:a3:99:d6:09:14:dd:41:b6:
46:21:b7:9e:39:ff:7b:d4:1f:46:de:49:10:96:2a:50:96:3f:
73:c7:e8:17:a5:d8:a4:8c:18:21:bd:d7:c6:07:5f:c9:0e:fd:
25:b2:9a:da:50:b3:7a:49:1b:2c:25:02:5d:ad:bb:07:61:74:
4e:f1:58:06:6c:0a:de:6c:8a:5e:3a:88:f6:4f:85:68:0d:0c:
6c:9e:84:de:61:3a:e6:4a:03:87:89:40:fa:41:12:ca:2b:80:
6d:de:ab:dc:48:cd:88:b0:d1:67:3f:db:b4:d1:b2:58:6b:5f:
99:e7:eb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:43:39 2025 by rpki-client