Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
File: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft (raw, json)
Hash identifier: QNJt6+FXvnJPlrDrn0dt7UbNlyPb2nmLIseu3khco2w=
Subject key identifier: 22:78:60:25:CB:90:2E:58:C5:14:79:6B:36:B1:EC:96:1D:A6:A3:65
Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
Certificate issuer: /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Certificate serial: 0194BCE0873770CC2C0BE113D59FD9DF400A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
Manifest number: 0EB6
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl (hash: wNBVu0QB5t2D7dZrplqUjRXyGvuxQqO7nq4on045Edg=)
2: iZ5p5MN0N4aCqnIjU0jjwKvIZns.roa (hash: DtCRo0LBdqkJmTlhbB6eN/7hU3EdBp5G+2hoRmL97Vc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:87:37:70:cc:2c:0b:e1:13:d5:9f:d9:df:40:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=22786025cb902e58c514796b36b1ec961da6a365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:eb:79:3e:f3:40:a9:4e:c0:69:d6:58:a2:
c0:8d:ed:c6:b0:94:91:5f:6e:ed:e4:19:cb:34:c4:
4c:e2:ad:1a:b7:a7:3d:4a:dc:b5:0e:bd:13:cc:29:
13:c1:26:1f:59:e1:2e:77:ab:10:63:9e:cf:33:0d:
5f:6a:c7:8f:f1:ae:32:14:95:c9:d8:41:2d:b6:1f:
81:50:b1:44:b2:c9:a6:91:97:49:12:3f:e4:0d:d8:
c3:d4:a7:69:3e:b5:09:44:7f:ae:0a:9d:7c:8c:b8:
f0:6e:9e:89:b0:9f:f8:f7:ef:fb:d8:0f:80:1c:22:
15:b8:28:c7:be:a2:d6:61:eb:0a:a3:61:59:7c:dd:
52:9b:a7:7e:76:1f:2d:27:42:e7:5d:9f:0c:cd:35:
f1:f8:4b:85:ee:42:99:61:e7:16:3f:dd:f5:6b:a8:
de:71:ee:12:e3:bb:b7:e7:32:bb:4d:2b:c4:01:75:
77:21:07:37:65:35:5e:d0:a9:7d:8b:77:aa:f4:ff:
44:ee:3b:ec:c4:b7:91:c9:11:3a:e8:70:08:6d:7b:
0f:72:f0:a2:67:66:f4:87:e7:d4:56:1e:fd:4d:f9:
26:0a:5a:38:bd:29:ff:44:e1:81:28:af:1d:f4:e7:
02:77:e9:df:76:a0:5c:4a:d5:81:1b:89:6f:e2:47:
bf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:78:60:25:CB:90:2E:58:C5:14:79:6B:36:B1:EC:96:1D:A6:A3:65
X509v3 Authority Key Identifier:
keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:de:71:3c:e8:39:4c:d0:1e:a0:47:fe:5a:86:7b:21:7e:6e:
ad:70:92:dc:c3:0a:2f:00:4d:58:ed:98:79:04:33:ec:be:f3:
39:3f:a0:c6:99:bd:cb:58:49:4a:0a:9c:66:b2:7d:a6:b5:26:
5f:c8:45:3f:b2:99:8a:5c:6c:75:d3:01:57:6b:bd:14:f1:5f:
f5:57:1a:f2:ab:af:05:43:70:fc:bd:c6:62:74:10:a5:2c:d6:
59:89:90:ce:fa:14:8f:c9:40:de:c0:25:8d:fc:d4:46:5d:47:
4d:b4:a2:1f:a1:31:41:d2:a3:72:42:42:95:33:1c:e7:ed:15:
c2:28:df:c0:0a:77:76:d9:d1:f3:be:e7:80:4c:87:b8:82:71:
c3:af:30:fa:45:4a:fc:64:2a:4b:eb:02:d0:6c:19:d9:1b:4b:
8c:38:a5:f0:c0:7f:a6:7b:b7:a1:f2:30:40:07:cf:7e:c7:51:
53:32:db:d0:1c:aa:01:97:1e:75:5a:2e:2b:64:c7:9c:40:57:
8d:b5:b5:86:b8:ef:bc:f2:fc:7b:8e:20:07:e3:10:aa:e0:85:
b5:64:ef:50:27:13:65:18:05:bd:54:0f:5b:5a:67:fb:ad:aa:
39:8e:53:96:23:1c:a3:dd:61:7f:14:9c:4d:6c:f1:19:ef:03:
13:a0:e7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:42 2025 by rpki-client