Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
File: rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft (raw, json)
Hash identifier: TnfnDD4mw7Gmcjh/meGa6TGtq6vLc0D0ziSDLA6SOK4=
Subject key identifier: 8F:8D:2C:F2:38:81:A6:D3:AD:70:8A:4C:34:F4:AD:EC:CC:7F:91:B7
Authority key identifier: AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
Certificate issuer: /CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Certificate serial: 0194BD4E65B9B778692EBA7214662EC426E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
Manifest number: 04AC
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl (hash: lJjXRDIn6wuZO4ZQNJURQ9PHmqot4hN4yUW5AqsiGAQ=)
2: w4hN4EJQ_3vBdUHqQ3XyJaL8bkA.roa (hash: 4EUB26NuRxe0K3o15R6cS+9ryAyEDIc2bJyCFTz2HoA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:65:b9:b7:78:69:2e:ba:72:14:66:2e:c4:26:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=8f8d2cf23881a6d3ad708a4c34f4adeccc7f91b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c8:f0:d4:d4:e7:ab:db:97:73:69:d3:11:0c:
49:57:fc:e6:0c:bf:da:37:17:fe:44:35:e8:2f:48:
e2:be:c5:a4:78:aa:41:36:ad:2e:d0:c1:88:02:03:
fc:af:a2:e7:74:19:28:b8:cf:27:cb:18:64:e2:29:
cc:59:b2:a3:f6:5c:05:05:83:4b:8d:01:3f:b2:ed:
9d:d3:04:c7:b9:98:c4:a0:84:a0:1d:b7:ec:5e:49:
53:86:7f:7f:ee:29:c2:2d:0a:88:18:34:75:d7:4d:
8d:35:41:1e:a2:39:88:51:eb:b3:25:ab:53:12:dd:
b1:64:c0:eb:52:16:90:f4:32:12:d0:05:06:eb:26:
e8:82:cf:f6:da:93:4e:c3:39:91:ad:cf:2f:8e:81:
8a:ba:5c:af:c4:08:60:70:77:d6:ee:c8:d5:7e:8f:
23:36:7a:88:b9:ee:1b:ed:b5:27:d0:df:b3:e8:8f:
98:0b:5a:b9:b2:35:6c:0d:9c:bc:5a:56:30:fb:0f:
e4:a8:c7:7f:ce:14:75:41:b6:77:2b:22:ff:62:ef:
48:48:b2:97:fb:4f:6d:0a:78:cc:e4:da:ca:43:1a:
9c:88:90:1e:ce:da:26:fb:dd:8f:53:64:4a:ab:a2:
70:11:85:75:df:92:d9:05:16:22:a4:75:2a:6c:7c:
40:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8D:2C:F2:38:81:A6:D3:AD:70:8A:4C:34:F4:AD:EC:CC:7F:91:B7
X509v3 Authority Key Identifier:
keyid:AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:8d:2d:e0:5a:bb:b6:10:c3:d8:21:76:d9:e4:d9:66:e4:2f:
ed:7a:5d:8d:59:90:00:c1:cd:90:9a:35:a2:90:21:bd:b8:d9:
d2:7d:bc:53:f2:a0:95:85:54:5a:58:a7:68:2e:69:dd:20:15:
74:e0:25:80:3a:71:4c:71:a9:f9:2f:ec:4e:8a:a0:02:41:5d:
c2:62:da:10:ae:44:08:47:42:d0:d2:20:b3:a7:01:55:9f:33:
84:d2:f4:8d:10:71:94:f0:51:8c:d3:29:d2:05:79:57:16:cb:
e5:9e:43:80:1e:83:76:dd:c4:02:a1:46:b6:dc:09:31:ee:1e:
14:6f:f9:9a:40:47:f9:8c:57:9e:a1:fe:1a:b8:cb:ac:0a:0e:
72:b2:8a:41:cd:d3:7a:99:bd:8f:96:28:d1:89:31:5d:7a:d0:
06:74:e6:3e:6a:67:0a:00:d8:44:ea:a1:cc:91:3d:b4:48:15:
7a:34:97:3c:c7:1d:00:b5:3b:22:a8:d9:af:06:7e:30:5b:9a:
99:83:49:ba:e7:51:a0:01:1e:e6:69:f2:84:74:1c:1f:26:6d:
70:d8:36:ef:9c:86:58:60:3d:24:a5:10:8d:60:8e:14:4f:04:
4b:ed:e8:93:ad:1d:e1:33:fe:87:74:4b:ec:29:f6:16:ce:81:
9a:10:54:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:00 2025 by rpki-client