Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
File: 8KMtISmjhsmgr9u5FeDb8TC6cNU.mft (raw, json)
Hash identifier: KJu34dnASBC104gB4s8hUT1+1FT84wr90RzqKnvricE=
Subject key identifier: 35:CD:88:AD:3B:9A:66:B9:92:EA:19:CE:EE:EE:38:A7:69:3C:26:E5
Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
Certificate issuer: /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Certificate serial: 0194BD17B8CA025AD14C898839950DDC547C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
Manifest number: 062A
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: 8KMtISmjhsmgr9u5FeDb8TC6cNU.crl (hash: Cg6BLvkAV/uIZ7yBSGaddi4fr/cvY77gZzfT9WeJ81Q=)
2: jB8O0EexbXRJ48aM1Kli0Ktl1vI.roa (hash: IcThWozF746RiVAe4jDaPPGv0zWnJg0lyhHJVcObykM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b8:ca:02:5a:d1:4c:89:88:39:95:0d:dc:54:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=35cd88ad3b9a66b992ea19ceeeee38a7693c26e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:5d:44:99:f2:c6:5b:89:c8:b9:a6:4a:9b:
29:b2:df:21:5f:45:2f:ee:fe:de:0a:3d:3d:9d:7d:
74:8f:0e:c8:6a:45:93:18:c0:d7:44:55:c5:93:75:
8d:88:c1:44:b0:50:28:ad:06:5b:e1:02:aa:9f:a0:
00:cb:d6:0b:56:3f:ec:38:45:8f:f2:3f:21:45:23:
9d:bb:4c:28:d2:36:e8:44:87:fb:a0:f6:15:44:be:
fa:25:fe:f1:6e:d1:ff:96:19:6a:f2:e1:dd:1e:57:
08:32:4e:a7:ed:51:c7:02:f3:b4:d9:b1:ed:00:6a:
fc:e7:60:04:c0:41:b6:bc:7d:df:03:f4:6a:9f:c6:
03:12:c0:f1:89:d5:63:8c:62:01:fc:e9:c4:0e:f5:
5f:48:07:0a:b7:d2:99:d8:f2:b7:e3:1b:02:ca:e4:
d2:11:06:84:a2:53:bb:9b:1c:9d:c0:fa:3c:26:8f:
c1:41:de:5a:2d:41:54:8b:a5:a0:77:7c:05:8e:2f:
1b:8b:ae:2e:7f:0b:2c:c4:41:dc:86:16:91:39:df:
c5:e6:ae:37:86:fe:a9:1e:9b:b9:43:84:35:51:68:
4a:a6:7a:6d:7f:97:64:31:3d:23:d9:ee:d4:1c:dd:
80:ae:e9:02:67:67:87:b5:83:50:2e:03:7c:ca:39:
e6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CD:88:AD:3B:9A:66:B9:92:EA:19:CE:EE:EE:38:A7:69:3C:26:E5
X509v3 Authority Key Identifier:
keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ee:a8:61:81:56:cd:c6:fa:f4:88:49:e4:19:a3:5a:bb:b1:
ca:68:e4:91:ba:4b:b8:ea:10:c7:cc:03:cd:c7:3b:2f:88:63:
df:0a:81:0a:7a:de:2d:af:6a:8f:dd:d8:c4:1e:03:cb:5d:40:
11:02:fb:12:83:a7:f9:85:16:59:7e:cd:42:c3:0c:b9:a7:1c:
39:77:3a:ac:35:80:cd:77:c3:ad:6a:10:63:1b:c8:20:2d:f7:
58:28:48:41:f9:a9:05:67:53:19:33:f6:18:fb:e9:45:8a:00:
8e:4a:33:9e:e1:dd:38:23:7a:af:6a:5d:ec:9e:12:0e:43:4b:
f2:ee:b4:b6:d2:44:96:0a:8a:5d:12:cc:0c:2b:85:ad:9f:5a:
66:99:33:c0:b0:20:71:f6:b7:c8:4c:ab:e3:d7:87:70:b5:a1:
a9:ad:30:c7:49:9e:e9:44:4a:d6:de:97:82:b0:1d:0d:af:09:
79:68:f3:48:19:ed:29:57:a9:5c:7c:0a:ed:f5:d5:05:94:f2:
d6:7b:03:00:0c:34:16:a2:48:f3:14:5d:cc:30:c7:f4:b6:de:
a9:ce:8f:90:df:53:41:d9:87:e6:12:0b:e1:4b:28:57:6a:5b:
6c:97:7f:09:64:7d:0d:31:32:a2:7d:53:fb:66:82:09:d4:28:
7e:8b:ae:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:01:46 2025 by rpki-client