Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
File: 8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json)
Hash identifier: k4mHMhLoVXtMTJuTtos/6+24fzTpFAUGtBl5el/P9PI=
Subject key identifier: 42:FC:48:30:39:D2:C3:FF:A0:15:89:6E:47:AB:C6:F9:49:55:B2:5C
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Certificate issuer: /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial: 0194BD17B831CACEAA7672F441995D95C247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
Manifest number: 14B9
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: 3u5ZahOyBhUNG6vDZ4hRGCrx5AE.roa (hash: HJZxVsPJLjA3XvzP/RTBRhqyf06FeLW1mBD5DxrU/Io=)
2: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: eK3NYy0eh6ZlQGB7gfbylXRiRxBoTIXHJgNAffbZZTo=)
3: cPjDDAPFhp5exKudFgW9rB9cqwQ.roa (hash: vni1uQidPYw+O5ctz3Lma2KW6cJ3nacYEyGSieWRGBY=)
4: sioOqEQgSdt-Z2nuvjH-ipYeJ0U.roa (hash: e/yGVe5B1VqGg3IGxSr7CYJ11tiQj+M1xaKJk8xaUwo=)
5: wBll80eEVRcCiVNLyafIlwBJOvY.roa (hash: Vrtbp5BA+79ihdsDatt4sH3YRMZYNvpy4CEr3U+1Q18=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b8:31:ca:ce:aa:76:72:f4:41:99:5d:95:c2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=42fc483039d2c3ffa015896e47abc6f94955b25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b7:3d:1f:fd:e7:b9:2f:ac:5f:56:bd:f9:4a:
35:20:c2:55:e6:18:02:2e:c5:65:9a:d1:a6:41:85:
67:d8:72:5a:ca:4c:83:41:13:d0:09:d2:ce:38:8a:
3f:62:be:19:d1:d1:c2:13:24:4a:ed:70:c5:a5:de:
fb:21:ea:8b:c0:1e:1b:1f:ee:5c:0b:f9:15:e2:2d:
63:fc:05:f0:bc:9c:fe:9f:8e:5d:16:2a:a8:39:71:
86:29:56:c3:bd:a9:41:ec:15:8a:05:f5:1e:29:8b:
14:39:4d:6f:b3:30:93:e6:28:6b:90:69:4c:7a:be:
7a:6f:2e:38:e0:96:cd:87:6a:a1:9c:d8:23:30:93:
e5:8f:83:ff:5e:cc:a0:9a:cf:36:b7:f6:40:7e:42:
84:cc:d5:d5:26:67:cc:fa:ee:b1:e1:f5:7f:89:f0:
74:21:06:a1:9e:e6:cf:02:8f:97:7b:43:f8:aa:88:
8f:7f:f2:ab:c9:68:38:cc:ef:6e:34:7f:07:b2:c6:
1d:67:16:03:94:98:25:a5:75:3b:f5:99:22:a7:77:
2f:1d:4e:80:17:be:b1:70:d0:7e:65:a2:6f:e8:1a:
aa:17:d4:d8:03:8e:82:17:37:60:64:09:17:72:cc:
e0:eb:1c:1a:90:f0:3a:b4:a8:35:51:e4:7e:09:eb:
0f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FC:48:30:39:D2:C3:FF:A0:15:89:6E:47:AB:C6:F9:49:55:B2:5C
X509v3 Authority Key Identifier:
keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9d:c3:7a:d0:c0:19:0b:ac:dc:78:f3:b8:df:ee:01:12:26:
fe:d2:59:be:03:68:50:57:1e:b4:b6:3b:31:17:3a:15:aa:12:
ef:6e:9c:26:84:54:59:48:ce:d0:d5:20:91:7a:27:a4:38:67:
eb:51:4d:1f:82:36:e6:fd:d9:ec:8e:b4:1e:9a:ae:b8:6e:8b:
7d:2f:4e:31:7e:44:68:3a:79:42:34:5b:d3:dc:f8:2a:19:4b:
8a:cb:ec:73:94:bf:4b:ff:07:b3:70:25:55:e6:ef:01:7c:16:
d5:22:20:f1:93:e2:81:70:ea:e5:95:15:a5:8b:13:5d:cb:6c:
a7:f5:6b:a8:7b:4c:cf:e7:16:6c:15:dc:e5:c1:ea:4a:39:35:
52:25:2f:9d:cb:20:29:ec:ee:59:e8:bc:d2:e4:e0:f2:a3:04:
25:13:93:eb:a0:7d:e6:a8:50:46:00:fe:69:d9:2c:dd:72:72:
f3:ac:31:8c:40:95:91:07:42:0e:94:f3:b0:d2:27:79:e9:29:
83:7c:01:9a:84:12:81:a2:85:dd:aa:40:b2:df:d7:f5:bd:1e:
27:e7:16:32:6a:ae:bf:61:58:02:f7:87:59:26:29:7b:bb:fb:
7f:a4:52:85:5c:82:c1:12:b1:09:33:a3:5d:cb:84:e3:44:8d:
41:9d:0f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:24 2025 by rpki-client