Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier: +2qhE2AUdeQ//ElpPMk7NdcZ0SV080mcaAscuz3EdQY=
Subject key identifier: 95:63:5C:DE:49:02:73:4D:3C:EB:43:CD:49:01:98:28:E8:2B:32:D1
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial: 0194BD4E4B0C54C44DCD4A6189A322A862E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number: 0E3E
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: EoMsjFxek7Y3+RvvO1YRpXDVMvM32RJhbxfe2PF69rA=)
2: rPbx58T-x5ORRRx0tEYr-rx7t3U.roa (hash: vSn+krLvdIPvrWL0ipO2XK8jiZxa1ds2oZDzxWzd7dE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4b:0c:54:c4:4d:cd:4a:61:89:a3:22:a8:62:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=95635cde4902734d3ceb43cd49019828e82b32d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:57:92:83:a8:66:47:39:81:f3:8f:30:09:83:
e3:3b:59:30:8a:09:e9:2d:71:c1:a2:b5:78:1b:7a:
79:13:47:ba:11:1d:df:b0:f9:ab:b5:4f:da:dc:65:
7d:d1:14:b9:50:ee:91:8b:4c:50:98:c8:fa:42:79:
52:6e:4a:e4:3b:93:bc:0e:c8:92:8d:0e:b7:0e:34:
de:2a:11:1a:c4:43:e4:bd:eb:1b:b5:be:6b:46:01:
43:18:6d:fd:fa:6b:b2:82:62:20:c0:a7:93:40:68:
f7:5b:86:6b:8d:7d:ec:a3:71:ca:cf:c9:e0:e8:54:
5b:75:75:f3:6e:b1:41:fe:05:d7:38:bc:9b:28:90:
97:61:d5:a7:e1:41:90:68:be:2f:e1:9b:9e:fd:3a:
2a:2c:29:93:a2:53:b8:58:7d:be:cd:b1:fa:2c:e9:
d1:aa:70:c0:7a:1a:8c:34:cd:12:f5:0b:1a:6c:c4:
a0:41:30:bf:50:f3:57:d0:43:73:8a:d5:8d:f9:ae:
e9:de:67:1d:af:51:4d:9a:75:c5:6c:83:f4:26:48:
64:16:60:14:1b:43:5b:bf:2d:ab:63:46:72:56:28:
24:82:59:4e:5c:f5:82:26:b7:74:1a:c7:9b:56:d0:
fc:80:66:5c:76:68:69:55:ab:e1:cf:98:a2:99:88:
26:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:63:5C:DE:49:02:73:4D:3C:EB:43:CD:49:01:98:28:E8:2B:32:D1
X509v3 Authority Key Identifier:
keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:69:3d:3c:af:44:ad:fc:ae:9f:9c:55:45:45:78:fc:9a:62:
fd:93:b6:56:e4:26:60:b2:3b:f6:d4:a3:f0:e0:17:d1:b8:d3:
11:41:5d:80:dd:ca:81:47:22:73:e5:0e:2a:15:53:96:d0:e8:
43:6a:c5:5c:d6:34:a9:a7:13:b3:cc:e5:94:ce:ed:fc:f2:c5:
a3:e1:71:ad:5d:3a:26:33:a6:21:ba:bd:35:46:f5:0c:88:ee:
c3:27:a4:c8:53:e8:df:66:8b:a6:b6:bf:a7:e1:07:c8:eb:6e:
eb:09:07:42:d0:0c:0d:26:87:47:64:04:95:16:18:71:c0:ca:
f6:f3:da:da:5b:a9:7b:78:f7:44:e4:72:5f:b0:80:60:5b:28:
9e:7b:7c:59:ae:ad:e0:44:8b:a8:36:48:cd:2b:4d:06:eb:ea:
61:f2:d1:54:a9:ab:0b:83:a5:ca:c9:d1:ca:d3:75:6f:bf:51:
e6:1c:d7:95:ab:c4:29:21:a0:40:7a:dd:af:20:00:85:52:21:
f6:0f:2b:b7:11:c4:dc:f4:b3:70:4f:2e:51:cb:15:0d:3b:ac:
8c:4c:09:ee:02:84:4b:9c:28:d4:6b:5a:91:71:4b:18:92:1f:
e9:ab:7d:f3:ab:59:f1:23:2b:8e:b7:ce:41:45:4b:3b:a3:f1:
14:49:43:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:42:50 2025 by rpki-client