Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
File: 8GGl-jflzRAVCFJj7AKeGv95ONc.mft (raw, json)
Hash identifier: ZXQgtkx2VFJMez/lqKzmIN7szVgIwWkK+Vvshldo5NA=
Subject key identifier: EF:4C:A5:45:70:66:39:07:81:41:83:28:3C:A8:F9:CE:2B:4C:11:E6
Authority key identifier: F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
Certificate issuer: /CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Certificate serial: 0194BD17CE625F9A35FF93309C914EE62442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
Manifest number: 03C1
Signing time: Fri 31 Jan 2025 16:00:41 +0000
Manifest this update: Fri 31 Jan 2025 16:00:41 +0000
Manifest next update: Sat 01 Feb 2025 16:00:41 +0000
Files and hashes: 1: 8GGl-jflzRAVCFJj7AKeGv95ONc.crl (hash: TqZFvmUc5/PgZndi/bdy6Z17SM5Z/fN5Hm/bwxDrqYM=)
2: W2Q925JmFS3PAyR39rSH9evVFK8.roa (hash: dB1h3fqhkVejlYoXFAHZ1BfXovUsbFUZPS3VPbEBgtM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ce:62:5f:9a:35:ff:93:30:9c:91:4e:e6:24:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Validity
Not Before: Jan 31 16:00:41 2025 GMT
Not After : Feb 1 16:00:41 2025 GMT
Subject: CN=ef4ca54570663907814183283ca8f9ce2b4c11e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:10:10:67:c6:3b:64:7c:fc:88:11:76:66:bd:
43:17:4f:97:8d:39:40:47:3e:49:11:5d:0c:cd:51:
2f:1a:b3:0c:8a:da:40:4b:bf:10:0d:24:16:5e:3f:
70:5f:7f:24:d0:ba:5d:a7:c1:cd:3b:64:70:42:e8:
0f:99:65:56:76:65:08:e3:b6:70:85:7c:d7:9c:89:
bc:e3:50:40:bf:70:97:fe:64:d7:a3:75:38:e6:a9:
01:58:4f:28:58:2f:37:e0:d0:c4:45:df:58:7e:41:
37:1e:55:31:8b:18:92:1c:f2:f8:f0:cd:39:15:91:
08:73:7f:34:5a:13:b0:c4:44:fd:30:fa:df:fb:3b:
8c:75:fd:3c:86:5b:65:bf:e8:cf:1f:d5:67:20:a5:
f8:4b:cd:95:1e:27:6b:62:ea:72:c0:a6:e2:5f:5d:
0a:ac:37:5b:2c:85:e5:81:60:6d:3b:5c:3b:33:68:
82:f3:9b:ed:70:9e:ef:b3:fc:cc:91:f3:36:31:e9:
53:a2:ce:16:7a:8b:79:f0:1e:57:24:ff:45:21:7c:
77:18:f7:00:43:8f:02:2d:23:06:e8:82:43:9d:3a:
4e:f0:4b:8d:2c:7b:e2:43:95:a6:b6:5d:ac:e0:1f:
ab:c6:87:68:eb:50:34:8d:0e:3e:d3:8a:af:8a:03:
6b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4C:A5:45:70:66:39:07:81:41:83:28:3C:A8:F9:CE:2B:4C:11:E6
X509v3 Authority Key Identifier:
keyid:F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:61:0f:02:0f:8a:5e:f2:ab:33:db:b5:10:63:c5:a9:39:4b:
a2:e7:ed:35:39:56:79:ae:e6:6b:87:69:88:9e:7c:34:a7:d0:
a1:41:c7:6f:fc:a6:51:08:76:c9:81:e3:6c:cc:3d:51:11:15:
88:c1:f1:01:66:4a:2c:21:e7:4e:67:ec:fa:c7:2c:77:6b:e4:
fb:17:8e:9f:17:05:b2:c2:d8:98:52:b6:08:51:98:41:98:6f:
04:f1:2c:5a:40:c0:7e:a9:11:26:80:c5:56:34:54:de:19:60:
17:66:19:43:01:1e:fa:7e:51:c2:45:85:12:13:1c:98:67:32:
10:d7:7b:d2:7d:8b:01:ce:6c:e6:10:f1:1f:6f:93:c6:10:41:
58:04:20:88:bf:c5:22:90:74:11:2b:bb:66:a8:92:bd:3b:b3:
e4:38:c3:77:de:25:af:9c:9f:43:51:78:99:74:2a:95:ee:aa:
ed:28:74:38:60:85:e0:33:9f:eb:0a:fa:fb:21:4f:dc:9b:a9:
07:ac:dc:31:a2:0b:76:91:4c:9b:cc:e2:56:3c:c8:88:38:1f:
15:4d:8e:8b:df:d5:56:81:80:dd:03:dc:7f:70:b3:5f:45:4d:
84:b1:47:9a:c3:12:23:a3:ba:b6:c4:64:63:d7:36:ff:15:10:
c0:c7:77:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:17 2025 by rpki-client