Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
File: 8XShpC1Ap_uCpsCM6XZRy2ar83A.mft (raw, json)
Hash identifier: M3HSPKpG7UI61iaxxOEqHW3QtgbHY7cuTVAT3bMj2u0=
Subject key identifier: 1E:4D:B2:12:1A:45:CD:B6:03:B4:25:84:24:5E:AF:5A:80:5E:1F:63
Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
Certificate issuer: /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Certificate serial: 0194BC3BF49E4E192051C7833690C22E149F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
Manifest number: 082A
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: 8XShpC1Ap_uCpsCM6XZRy2ar83A.crl (hash: NQGdiqyrgN5htQKJrbhlp1RH4WdhZohtCJgVIN2D8dc=)
2: Jzc1N5JK_K9rsqLLazjrhQAzn9E.roa (hash: c37u7+7V7zO9cUACPw1X9wuITqfc2J+4zg3NEuS9Gzw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f4:9e:4e:19:20:51:c7:83:36:90:c2:2e:14:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=1e4db2121a45cdb603b42584245eaf5a805e1f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:c6:d4:9c:90:ae:bf:0c:43:9b:37:b3:cb:
bb:bc:c6:54:38:67:e5:37:6e:75:ec:6d:8c:3e:69:
06:1a:9f:1f:a5:91:97:fa:56:70:00:c5:ce:d6:5a:
3e:28:a5:1a:7a:be:d4:85:08:90:dd:e7:3c:f2:37:
09:7d:b6:bc:78:98:19:57:da:fe:e8:8e:5e:1d:5e:
b8:a9:de:5a:99:57:28:20:f2:dc:51:a9:d8:9a:ff:
44:0f:79:22:6f:89:4d:31:7d:c3:cb:dc:bd:12:11:
ad:06:57:2d:2a:a7:74:e3:cb:39:ab:3b:42:f9:84:
3b:14:9f:2d:e2:6b:fb:64:81:0e:e2:da:e6:6a:af:
4a:bc:e0:d7:94:66:b7:54:3b:7f:17:9e:09:9a:98:
be:2a:2b:f0:43:2d:7b:cb:45:32:b3:69:22:44:10:
5a:cc:ab:14:91:c7:73:da:a9:f5:c4:5d:d0:55:b5:
ad:5d:d0:9a:db:44:d2:cc:e0:47:70:8f:fc:ea:95:
56:d2:bf:a8:19:8e:30:ad:51:f3:fa:53:ce:45:e1:
4b:23:e2:f0:51:89:13:8f:ff:fc:55:10:aa:f6:bd:
29:78:34:2c:1e:7f:ae:fd:8f:47:ef:47:e9:f0:85:
ed:5a:ee:e6:82:27:dd:52:5a:77:ed:e3:f3:63:0c:
a5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4D:B2:12:1A:45:CD:B6:03:B4:25:84:24:5E:AF:5A:80:5E:1F:63
X509v3 Authority Key Identifier:
keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:6f:26:ae:89:c5:a3:ef:cf:d6:ef:1c:ec:f4:ae:52:79:f1:
e3:2d:44:7e:1e:7a:c2:59:d9:ae:9c:e7:54:00:df:af:08:76:
ca:95:92:8f:b0:eb:b7:66:c8:d2:71:ce:14:00:f9:c9:c8:eb:
b4:98:75:e4:f5:3d:99:cd:39:e2:34:72:0b:48:d3:b5:46:59:
0d:9e:44:8f:5f:b4:d5:cb:76:46:12:db:d3:43:82:ea:fe:c9:
fc:17:54:8b:f3:bb:29:ba:5d:10:34:c3:6c:1f:cf:cb:3a:96:
47:3f:9b:fb:c3:7b:f1:9d:98:23:ea:16:04:42:14:e4:7d:00:
9c:d9:7b:e3:a0:92:cd:69:6a:3b:a6:f1:d0:92:b3:44:25:f6:
2a:7f:65:ae:1b:c4:83:8e:3c:63:76:31:54:41:f9:ae:35:38:
27:09:d4:b5:0f:d1:24:8e:9e:45:6f:aa:62:f6:14:f5:0d:d7:
81:7b:64:90:44:e9:e9:5d:9e:ee:a8:04:ab:2f:e9:05:e8:62:
72:b1:e0:b0:23:5d:b3:76:e2:79:af:1f:70:cf:c0:ba:2f:e0:
41:56:19:f4:fd:52:b0:f4:66:7b:4a:1b:54:8a:8e:00:32:71:
78:78:fe:48:4d:88:ac:1b:1a:28:32:9e:f1:c9:8e:2b:43:48:
5b:a0:c5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:29 2025 by rpki-client