Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
File: 8-NiIsy8bHIhNgVAurOp26nyN6A.mft (raw, json)
Hash identifier: Nrd88nnm4EcSrQDq/Im6ODkOxFCTP8v8VYXpPACc1N4=
Subject key identifier: 9E:E6:C7:93:8C:41:CB:B5:3E:31:43:5F:1E:17:40:E9:23:FC:FB:D6
Authority key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
Certificate issuer: /CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Certificate serial: 0194BC3C8EFA77C52D02307C2CF42A138F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
Manifest number: 11E8
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: 4OAQQVO8VIFzfsVpiMv8jSSll54.roa (hash: JMcD21CurSjrVb9e/Fa0SxXVumzBh+XhCdZn2t0vX/k=)
2: 554gdq_ok9HYl3wcKstvNBVgVnI.roa (hash: KPXZ5rw0NzwP5c/cXfxWSL2Bey+lXp0pHFMUbBSidd8=)
3: 8-NiIsy8bHIhNgVAurOp26nyN6A.crl (hash: uNQYdjmxkFqDifW+4q7TDQodkXM8wd3gbRPIwhjU4Gg=)
4: S4_bZaUrYeif2UyHHeNglamlIdY.roa (hash: xW3QM1MxANWCikFD0BTEoT7OwPC4SDKTPMb/5xd/WUE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8e:fa:77:c5:2d:02:30:7c:2c:f4:2a:13:8f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=9ee6c7938c41cbb53e31435f1e1740e923fcfbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:56:53:7a:b0:db:ac:f4:19:2c:aa:00:6a:
a1:51:1b:7f:33:14:36:88:7f:6a:46:48:4f:45:46:
8b:99:3c:d0:e8:04:47:a6:9b:c0:65:1a:fd:92:35:
a1:80:6b:26:c7:4e:17:b0:74:90:9c:5d:4c:ba:ab:
2f:d5:10:e3:74:73:82:a4:57:78:03:ea:d0:f6:2b:
95:6f:aa:5f:9c:de:a3:47:94:58:2f:5b:6a:3d:d8:
9a:64:a2:cd:5b:d6:62:46:b7:76:bc:57:6e:40:68:
0e:77:b1:5c:79:9f:8e:4d:9f:f0:ad:63:63:4e:99:
e9:ae:35:88:d2:f2:18:4d:cd:5d:f7:ce:31:9d:d9:
6a:65:3e:8d:2e:4e:90:4c:ae:62:6f:84:2f:92:d0:
95:72:1f:ce:ea:6d:78:11:be:52:32:2b:eb:61:1f:
1d:4d:77:f4:36:d8:e4:51:57:76:b9:ab:f9:43:9c:
0f:07:bb:be:bf:b6:90:b6:e5:91:8b:7b:07:cb:5e:
82:2e:96:63:10:f3:d1:0a:62:58:55:2c:06:62:9b:
fa:39:52:61:2b:2a:83:8f:9d:dd:87:9e:07:a2:05:
ed:5f:b4:33:17:54:49:69:c8:cd:67:60:6c:a4:0f:
ea:67:12:6f:8e:37:54:2b:9b:d1:34:15:e0:c5:a9:
c6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E6:C7:93:8C:41:CB:B5:3E:31:43:5F:1E:17:40:E9:23:FC:FB:D6
X509v3 Authority Key Identifier:
keyid:F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:33:4f:8c:5d:6c:c3:59:df:fb:5c:a5:05:1f:96:08:0a:b0:
1e:54:86:56:79:9c:1e:13:f7:7d:c4:0b:12:c0:a1:2c:08:31:
d5:2c:91:07:5e:d1:2a:e5:33:45:1f:5e:cc:cc:bf:1b:fb:e1:
54:05:bd:c5:4a:49:ff:89:7a:89:52:33:6d:7b:73:d5:c2:eb:
85:56:4f:0d:74:98:9f:36:86:65:91:76:fd:d3:ed:44:c0:8c:
8e:32:40:da:ed:ac:4f:08:4a:d4:12:5e:af:de:ef:04:e6:35:
00:45:f3:e4:90:b7:dc:e1:c7:bc:2d:9c:74:6d:cb:85:03:e6:
cf:79:39:0c:ce:36:c3:f3:3a:fd:15:f7:9f:87:05:dd:7a:65:
10:d0:e6:d2:15:1b:f4:14:01:ea:3b:54:78:96:2b:77:59:11:
f9:e6:11:2a:55:a0:91:57:dc:a3:78:fc:f8:cc:0d:50:34:e0:
fd:aa:03:5f:4f:0a:b6:23:66:db:93:bc:cc:7f:ca:e4:71:80:
2b:08:13:30:0b:4f:39:6f:a6:6c:3c:b0:2a:ce:ab:63:66:c6:
b7:cd:43:5f:16:dd:1f:d9:d9:f1:5a:32:12:f9:1c:4f:f9:92:
81:ce:9c:b3:cc:13:ab:e8:31:f0:ba:1b:30:6b:79:85:5c:8e:
49:c3:6f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:28 2025 by rpki-client