Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: 1hWJxQbHXq0uFhhmyLfZd7YN+7f7V/zaSHYLFPtsH/s=
Subject key identifier: 84:F1:83:6B:EA:86:7F:11:EA:05:2D:F7:5F:79:03:4A:1C:AD:CF:CD
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 0194BC3BD8C11FEC32255D5F22F1756DB775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 0883
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: 4yJA8OoHQcTtyOhoByhjbdQZnV2IkKmjybVCMCtIjzQ=)
2: 9fWa2lfLkLJ8sCmivN6TQyBLwDA.roa (hash: IPb2Fry6AFROnpqPDxpsLGmfQRyiCcADkUuNtSOH1vw=)
3: M0hmVP_O7pmzGC1lZ8auVtUv08M.roa (hash: O6keKWXCa23CBnMYQ5j2NdMEa5h/R6dRjRYYfD56tpY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d8:c1:1f:ec:32:25:5d:5f:22:f1:75:6d:b7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=84f1836bea867f11ea052df75f79034a1cadcfcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a4:a1:bf:7e:68:80:1d:bd:40:f5:8f:9f:f7:
df:ae:79:29:9c:06:b6:6a:8b:7b:d0:0a:65:9d:ec:
6b:63:a5:68:d1:35:90:d5:0c:a7:b0:97:25:21:f0:
f5:ff:d5:df:66:01:10:7d:c3:ec:04:40:da:59:65:
4b:c4:29:32:b9:fc:bf:8c:aa:a0:0c:44:2e:6b:36:
15:aa:7e:2c:0f:22:c3:29:8a:ae:38:e8:e4:0d:cc:
53:c0:93:bd:e5:48:f6:02:7c:97:aa:94:c8:83:6a:
0b:bc:f0:86:61:c2:1b:66:90:a7:28:b9:ca:9a:02:
66:f5:3f:f4:9d:76:6c:c2:78:e6:87:ed:c1:4e:89:
81:a0:73:66:3b:a1:2c:a4:27:26:e6:82:73:63:d0:
2e:2b:93:a9:4e:20:af:66:7b:e1:a6:21:3e:a4:c7:
47:9a:0b:36:34:da:db:51:67:ed:fe:62:da:38:38:
12:e1:55:25:76:30:ef:f4:71:c6:fe:00:f1:14:52:
5f:6e:d5:e9:bb:23:45:ec:66:79:6b:ff:51:62:e2:
9f:fd:3f:b5:61:2f:91:4a:40:39:c1:89:b4:62:92:
00:47:73:32:05:37:3d:58:49:81:b2:59:0b:00:b4:
95:ae:47:6c:7c:80:df:9c:00:91:ce:c6:2c:27:82:
39:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F1:83:6B:EA:86:7F:11:EA:05:2D:F7:5F:79:03:4A:1C:AD:CF:CD
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:81:a9:3b:d8:86:4e:63:a4:a3:59:44:11:97:28:c5:91:87:
39:dc:7b:dd:ee:97:88:5d:77:13:25:f4:12:35:63:82:5c:40:
75:7e:16:15:06:68:a7:35:a5:d2:76:ce:61:39:3e:90:35:6d:
4d:12:48:01:93:ca:2c:10:d7:7d:30:ed:78:76:ff:01:69:fb:
48:aa:24:92:58:0e:9f:36:af:c6:49:44:9f:9c:7c:b1:59:de:
ed:50:d0:39:b4:5e:80:81:0a:92:16:8e:92:8c:fa:bc:7d:f1:
4f:01:a8:e2:6d:48:7f:50:21:65:bc:4b:35:f1:a1:08:6e:af:
00:00:d0:ac:c9:2e:88:6e:0e:0a:5b:98:b9:f4:fb:62:76:a7:
ea:76:8c:25:fa:86:a8:74:7a:50:2c:23:d7:b7:4c:00:25:10:
75:f9:86:5a:cb:49:98:8a:28:0d:8f:d4:82:3a:45:88:dc:64:
08:e3:f2:17:16:f4:a4:29:70:e1:37:0a:ef:b3:4d:2a:e3:04:
79:6d:fd:22:35:e4:d6:13:df:57:0c:42:2e:d0:62:d4:83:2e:
10:f3:f1:61:cf:2c:37:f9:95:f8:17:3a:a2:21:32:c6:71:c9:
9b:44:d0:a2:0c:82:df:dd:c6:50:50:23:5a:66:f3:c0:eb:b0:
11:f9:a9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:12 2025 by rpki-client