Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
File: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft (raw, json)
Hash identifier: 8mKQjyLBl++GT2p3NW2JrF+YVLrp95uLScdM1gzXKpc=
Subject key identifier: 41:C0:A9:77:A1:06:27:65:27:95:F6:CF:C3:0F:A7:8B:15:11:8E:EF
Authority key identifier: F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
Certificate issuer: /CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Certificate serial: 0194BD1749C40003BB88294B44AB3D05F8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 16:00:07 +0000
Manifest this update: Fri 31 Jan 2025 16:00:07 +0000
Manifest next update: Sat 01 Feb 2025 16:00:07 +0000
Files and hashes: 1: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl (hash: EqZ3a6jARuaFEBenIEZGyWbhopROE0UqcFn2aXE5YHs=)
2: 9iL04rGDZoryywio-gmg9h9zCvU.roa (hash: gqClxkuVstSkbo5JxbBFKE2JBuMbwOG9F1HTwbBvxv0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:49:c4:00:03:bb:88:29:4b:44:ab:3d:05:f8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Validity
Not Before: Jan 31 16:00:07 2025 GMT
Not After : Feb 1 16:00:07 2025 GMT
Subject: CN=41c0a977a10627652795f6cfc30fa78b15118eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:b9:fc:78:35:54:b0:54:ac:38:29:1c:4c:
e2:1c:d5:a2:e3:b9:9c:da:cd:34:d6:32:46:24:17:
24:22:d0:50:99:b3:75:17:03:fd:b1:8a:06:42:d0:
3b:a4:18:41:39:6d:53:d4:68:c9:e7:32:5f:18:c6:
5e:1a:65:dd:36:95:47:9f:70:fc:42:b9:da:d0:48:
bb:18:b2:d6:39:f4:fb:03:68:25:d3:0d:d2:80:26:
c0:81:57:c2:e7:ad:b7:47:2b:53:26:1a:5d:04:da:
54:d3:65:67:48:19:3c:6f:6e:e1:ff:96:4f:d1:d5:
61:d2:31:05:a2:65:3c:c4:a5:c4:4c:f4:94:0e:d1:
ba:4b:56:3a:b0:47:39:81:4c:b5:76:3a:34:47:bc:
b2:4d:b0:bb:2b:e0:ed:8f:5e:c1:fb:8a:87:95:38:
3b:b1:c2:c2:56:bc:95:25:2a:b9:0f:61:d9:d4:fe:
7d:5f:0d:19:0a:5f:65:63:76:85:c9:ea:b9:a9:f6:
bc:fe:fb:5c:c5:2c:d8:dd:3c:4a:62:a6:5d:4c:d5:
55:9a:d3:74:89:bb:42:b3:ad:05:f2:79:b2:41:df:
aa:db:24:16:6b:c9:29:74:f6:b7:78:82:43:52:0f:
d7:21:8a:18:6e:b5:cd:73:1f:77:90:62:0c:82:28:
22:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C0:A9:77:A1:06:27:65:27:95:F6:CF:C3:0F:A7:8B:15:11:8E:EF
X509v3 Authority Key Identifier:
keyid:F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c1:23:5a:4a:27:c5:5e:01:8b:79:27:54:02:79:df:9e:c1:
30:c0:13:70:b5:74:99:65:cd:5c:62:26:d6:32:64:70:a4:94:
2b:96:4b:aa:ff:3d:85:70:b7:8b:6c:bb:d5:44:90:90:72:21:
2d:7b:33:45:3a:77:90:ec:c8:47:cb:5f:07:a8:94:71:39:29:
e0:28:ad:90:e7:b7:8a:2b:38:b1:ff:89:47:a9:83:82:db:6c:
c7:65:70:f2:8a:98:95:f1:04:85:ce:e9:99:69:44:04:00:29:
b5:f1:8c:e4:d4:d6:36:a2:9f:a4:5a:36:ed:72:18:4b:b5:9c:
1d:d6:31:b9:f3:46:43:b0:c7:80:12:76:3f:80:b8:05:71:dd:
9b:11:36:bc:fe:ea:a5:18:d4:61:94:11:e0:85:49:09:96:7c:
f1:d5:68:14:2c:da:99:e6:09:7c:5c:9c:31:a2:33:16:22:4c:
cd:d0:d3:f5:ec:6d:6b:30:06:a3:dd:23:58:13:7b:16:00:4e:
5e:71:dc:34:dd:a0:af:06:e2:52:47:f9:0a:e0:a4:43:28:57:
81:c0:75:2c:73:f5:0b:78:a1:c7:3e:75:da:2e:d1:f2:ee:b5:
ae:fe:e3:75:f3:94:5b:dc:02:fa:3c:c2:17:32:35:e0:b6:52:
ab:e9:61:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:54 2025 by rpki-client