Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: vhy5+bFKAxJjDJHBdm7ZFFLuj3B8NBvZX5m3gOfnyIs=
Subject key identifier: 0C:37:62:18:CA:CA:69:B9:04:AC:59:03:60:57:B4:DE:77:B7:D4:15
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 0194BBCE42A9B872C2A9D211C58C7AE18E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 1164
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: D/PIjsz8Kk0GklEGW/dgIEwqmmmUBe9Ctm9r6x9VjDk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:42:a9:b8:72:c2:a9:d2:11:c5:8c:7a:e1:8e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=0c376218caca69b904ac59036057b4de77b7d415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:40:7c:a2:70:70:17:2c:f7:1a:4d:6c:12:ff:
8e:08:9f:ab:c0:22:01:b4:ca:29:45:42:06:e5:65:
54:25:44:92:58:2c:f5:8a:2d:46:a1:09:f6:65:d6:
af:e3:bb:0f:55:aa:2d:04:91:2b:24:13:49:e5:bd:
e6:28:6c:32:5b:b5:f2:5e:4f:8f:72:25:c2:76:97:
1f:76:a9:e7:99:10:3f:65:6b:db:88:43:ab:34:89:
e0:5f:be:4b:ca:ed:4b:c4:f4:1f:e1:80:95:a3:98:
52:dc:20:cb:ed:df:e2:3e:f9:38:03:a2:75:b7:39:
25:72:9a:ac:ea:af:1d:9c:5b:82:65:79:f6:f2:59:
a9:15:e0:e5:03:11:11:16:34:2c:96:3c:bb:de:a0:
53:b1:82:97:89:67:64:d5:fa:93:6a:1f:dd:8c:e9:
46:6b:a7:52:b9:aa:f8:45:b8:d2:74:31:b8:b3:86:
9d:c2:07:f4:f0:c5:2a:96:76:a4:e8:e1:fc:32:f2:
8c:3d:2f:b9:fc:a7:a0:ac:dc:9e:82:f9:a9:a5:63:
ae:38:b5:b5:f9:11:4a:ab:d2:22:71:ce:08:33:8c:
a4:74:96:8a:b1:a7:a0:17:9a:d3:c5:8a:52:96:2f:
dd:f3:a1:80:97:79:51:dd:f0:71:9d:ad:34:45:aa:
ec:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:37:62:18:CA:CA:69:B9:04:AC:59:03:60:57:B4:DE:77:B7:D4:15
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:97:f9:12:ce:11:95:22:38:6e:97:63:2d:fa:9f:da:dc:a2:
9f:24:b6:25:e6:cf:03:b6:fd:ab:d5:2a:f9:73:d9:2d:4c:2c:
3f:73:35:ab:53:4a:a2:7b:13:00:f5:35:12:2e:55:37:c5:08:
e1:ea:d4:1e:45:d8:dc:ad:57:11:f8:85:89:26:2e:13:41:a3:
bf:4b:54:43:07:c3:36:34:58:50:27:75:fe:5b:00:16:7d:14:
0f:e1:ad:70:3e:df:78:95:ae:7a:9c:e9:20:40:c0:4b:8f:43:
4a:1f:9a:3e:99:79:ff:b6:09:24:51:32:47:62:c9:01:59:80:
92:0b:77:f3:39:bc:b2:08:81:8f:c6:3a:cd:59:74:3f:e8:b7:
e8:20:c3:91:7f:09:8d:53:45:6c:de:b7:d3:60:11:44:00:15:
8e:ee:76:0c:55:1b:af:60:54:1c:45:80:45:44:7d:bc:56:35:
09:27:5e:36:f4:a0:b2:77:b1:a4:14:15:17:7e:ce:a9:fb:e0:
cf:73:7f:ac:df:9a:89:6a:0d:a8:1f:aa:61:fc:71:13:34:20:
6a:0b:38:2b:ab:48:f3:c3:fd:72:78:a1:36:85:f7:5c:36:32:
4f:4a:b4:94:b6:bc:be:98:8c:9e:1c:dc:f7:3a:eb:db:ba:03:
cc:20:6b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:13 2025 by rpki-client