Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier: RzNxRTTnNDhGqq85BkPM6mhVvKDccQVvFHlIlJNX+UE=
Subject key identifier: 5E:CF:59:4E:E9:95:9F:6D:55:10:B5:E0:2E:75:5B:63:4B:0E:5C:6F
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 0194BC3BD54C8F47ED779167745EC97CA622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: VQALvlLx2mwxp2lSC1CET0GMt7DJGkxXVzyLnQRk0oA=)
2: tZdMpKDB98hJ9pZj681_6AcpB6s.roa (hash: i6o9Pghma18l7gMu2eMNZU5hQVcsb4HmVOsk/64sqkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d5:4c:8f:47:ed:77:91:67:74:5e:c9:7c:a6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=5ecf594ee9959f6d5510b5e02e755b634b0e5c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:11:fc:17:14:97:41:e9:c5:f9:ea:9e:dd:af:
89:2c:df:d4:68:58:fb:9a:91:db:f5:5f:3f:0c:e8:
83:c1:7e:fd:79:db:c9:61:fc:53:f6:b8:f7:9a:c1:
bd:d1:c4:ef:5a:b1:37:3d:11:ac:91:b0:94:8d:e0:
dd:e6:f6:bb:3e:2f:0e:93:3b:8a:62:bb:ba:f5:f8:
a4:97:b2:b4:7d:2a:be:fc:ba:d1:ac:55:9c:9a:b5:
06:ad:c3:d4:1d:b2:11:9c:6e:df:bb:6d:1e:c0:18:
67:25:ff:10:86:b2:46:89:4f:d8:f0:98:91:19:94:
57:a4:8d:e0:87:f9:ed:7a:80:b3:17:91:6a:3a:f3:
6c:41:11:89:b6:79:94:ff:0b:15:f2:4b:aa:7a:f4:
a6:b5:41:ea:24:90:3e:a5:65:42:5d:e1:88:7e:1f:
df:42:e4:5a:78:e4:ca:eb:da:c1:95:3e:3a:f3:c2:
5a:e5:ca:4e:fc:0b:0a:27:0a:ca:a8:3f:1b:34:2a:
03:ee:f6:c4:38:f3:75:94:01:c2:8c:ac:73:9d:79:
41:b6:74:62:ec:3e:48:58:4e:06:5a:c0:35:ae:74:
3b:10:ea:7d:a3:29:71:4a:fe:1d:41:ae:79:23:f3:
0d:67:7d:80:86:bc:70:b6:c9:43:b2:73:3e:43:15:
2f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CF:59:4E:E9:95:9F:6D:55:10:B5:E0:2E:75:5B:63:4B:0E:5C:6F
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:95:a9:e1:b9:45:0a:ab:38:a6:16:1b:5f:60:fe:09:76:39:
34:e2:4d:00:b8:02:63:92:89:38:4d:c1:6e:6a:30:b1:33:6e:
46:91:a4:c7:12:60:22:e7:7d:a7:3d:c7:1f:97:f7:c0:d8:66:
73:4b:23:d6:a8:97:6e:6b:78:b4:55:ff:a8:a7:28:e1:9d:9e:
40:18:c2:72:6a:21:c3:67:2e:62:81:ee:7d:71:f6:11:43:d4:
df:c7:9f:f5:48:24:55:05:9f:6e:9b:fa:6a:8c:44:a2:bc:1f:
7e:3e:9b:9d:ea:f5:f6:92:7d:d2:ef:63:11:1f:88:2f:2b:47:
d5:fc:38:1e:0c:53:b3:90:70:d1:c0:28:18:ca:0b:62:32:76:
36:3b:88:6c:a0:cd:0e:93:cf:ac:c9:a6:3c:fe:6f:1d:b1:76:
db:a4:0b:08:26:12:17:24:e9:ea:b3:56:86:8c:b5:32:d5:0d:
81:5d:98:f4:b4:bd:18:85:13:4d:a3:11:2a:05:c2:df:5c:38:
4c:56:91:89:0b:d7:77:56:b1:c9:ee:f9:62:d3:77:08:9d:a5:
30:92:b3:c7:85:7c:38:4c:97:fe:64:66:dd:a8:47:8f:47:86:
59:15:4b:be:d2:33:ea:f7:e0:59:c6:c3:ef:2f:2d:96:8c:12:
5a:5b:fb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:19 2025 by rpki-client