Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
File: 08ixCjj4HGTiASB7_DVEwpcq9fM.mft (raw, json)
Hash identifier: bXeO+v/Xo2+aRhPwFaLzBnFBIhoO+yX5fbjshKCaxRo=
Subject key identifier: 56:1A:F3:76:21:F9:2E:F8:B2:F8:9F:29:31:4B:BC:7D:C9:5E:3F:95
Authority key identifier: D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3
Certificate issuer: /CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
Certificate serial: 0194BD858F2BCFF3E0626E08B164119B5530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
Manifest number: 0DEB
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: 08ixCjj4HGTiASB7_DVEwpcq9fM.crl (hash: 9a+pcSFO+reLZfPYwQheNfE6FwaLKWj107jdHGzbCwA=)
2: 0hYdVdTdrSs-d6BXtENWomMQM6A.roa (hash: Qi+45gX4AdRetJwFY+wBMXn8X8pOs16SCJ6qQzqdA+4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8f:2b:cf:f3:e0:62:6e:08:b1:64:11:9b:55:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=561af37621f92ef8b2f89f29314bbc7dc95e3f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ce:97:2f:97:aa:0e:88:d3:ae:83:99:b2:44:
40:ba:73:82:00:fa:cb:b3:a0:54:78:43:e7:d6:5a:
9f:8a:76:bb:13:4a:bc:11:f8:ba:b6:2c:5e:44:45:
9e:d7:1d:dd:41:69:7a:12:c2:cc:08:b0:ab:7d:bf:
22:4e:a5:0c:cc:33:18:0b:9e:a1:5f:df:63:7f:ae:
11:5d:bd:0e:8d:40:11:bb:a1:0e:f8:68:f4:91:e2:
c6:64:e2:c5:58:fb:85:82:cc:17:78:37:59:91:e9:
28:0e:eb:ba:65:a1:8a:37:a2:41:2c:67:68:5d:4e:
a6:a9:74:ab:f3:7b:1f:3e:d2:2d:ae:c3:ea:31:52:
b8:3b:d9:e7:87:bc:30:de:ec:bb:dc:24:f0:65:6b:
ce:a5:4f:2c:82:c8:6d:86:f8:69:54:ac:36:c1:4b:
ba:03:72:12:54:9c:96:49:ae:b2:b5:ad:30:a4:7d:
ac:56:d6:e7:3f:57:a2:2e:2f:01:9a:3f:e8:75:48:
b4:ed:93:04:ca:24:3a:6c:ff:7b:be:c0:5f:b4:31:
2c:b6:26:16:54:7f:c0:71:fa:25:b1:ea:ee:9c:b6:
0f:a6:63:17:87:33:82:e6:04:68:99:00:92:88:41:
54:43:11:f3:be:cc:c4:7d:70:13:d7:5b:63:ff:99:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1A:F3:76:21:F9:2E:F8:B2:F8:9F:29:31:4B:BC:7D:C9:5E:3F:95
X509v3 Authority Key Identifier:
keyid:D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:21:b1:a5:e6:03:09:de:5c:46:02:0a:f2:67:a9:a0:5e:e3:
0e:1a:d1:97:2a:d3:81:fc:c8:78:ec:a4:23:3e:1e:f3:79:56:
ca:dd:9e:b1:34:d0:33:65:7e:2e:a1:18:45:57:02:8c:ce:79:
09:4b:97:e1:fb:c6:86:6a:07:b4:02:e8:2c:7f:73:9c:e2:1b:
76:90:c6:37:b5:6a:a4:ed:26:6f:42:fb:b8:7f:c9:45:18:58:
34:ba:95:9e:dc:9e:0e:76:86:ad:c6:74:89:f7:42:3b:56:f1:
7a:83:4e:c5:fb:73:95:c5:77:c1:2c:04:48:e9:2d:0d:c4:1c:
94:a1:88:ac:30:e2:75:80:3a:93:0c:21:69:3e:89:d0:76:3f:
02:be:4d:e2:99:15:93:44:78:4f:0d:bb:a8:b6:b3:5a:60:e3:
4f:7d:58:3f:ea:2d:80:09:e2:94:76:50:a6:0e:2e:4b:a4:fe:
21:9b:bf:ca:cc:1c:d1:1d:91:9d:22:4d:09:e0:28:22:f3:be:
27:0b:5a:1f:d7:73:10:38:88:9c:1d:02:e7:f6:3f:ce:3d:d1:
2e:f0:94:4d:36:2b:83:ed:e3:cf:35:8c:e4:31:f8:31:90:3a:
78:ee:70:c6:3b:c1:61:b5:f2:fc:ff:84:cb:1d:8d:ff:b2:3d:
b9:f8:7c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:56:57 2025 by rpki-client