Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
File: 8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json)
Hash identifier: am9yCYMcFbE11Cx3GzNxasFl5JCDTdjOY3X/koBRYnY=
Subject key identifier: 09:47:D0:5B:20:8E:01:2F:B2:C3:E7:84:DB:7C:AA:BE:2A:B7:79:D7
Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
Certificate issuer: /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Certificate serial: 0194BBCDD8662D19C593183CF4EC43C46013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: 0TX6bG3AW3Ort-Rt8qCc1TR12hM.roa (hash: XGv/DCUiOeegPa2KE+7yV2/GQEE1zmTFiu2PMDuWufY=)
2: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: r2TG8J/Uqoy5SlP0IIDKcEN2DWnCn29KmRd+0BWlA6A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d8:66:2d:19:c5:93:18:3c:f4:ec:43:c4:60:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=0947d05b208e012fb2c3e784db7caabe2ab779d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f3:7c:fe:6b:53:2e:c9:13:dd:8f:4e:f2:5f:
a9:5b:03:b7:c1:b1:c5:97:cd:36:4a:7b:3a:04:45:
3c:08:31:9f:1e:80:ad:b3:fe:22:ad:21:96:fb:72:
3d:60:04:46:64:35:c9:e5:3d:70:c7:d9:ec:c6:20:
91:5b:b1:9f:4d:3b:79:d5:b4:86:02:e2:9f:72:04:
e7:2b:c6:dc:d6:16:b3:9e:04:80:d0:c6:12:91:09:
7f:77:5c:23:50:8a:23:aa:bd:e0:11:35:91:43:a6:
fe:3f:0c:6c:56:f7:e6:3a:17:f9:e5:29:53:8b:b5:
16:fa:d2:72:89:e7:d6:e8:7e:1d:66:84:29:f0:3d:
7d:bf:7b:14:7b:f1:27:2d:35:72:13:0e:38:e7:bd:
66:8f:2b:26:d9:c2:9f:f5:14:31:05:4d:ec:66:90:
c5:d9:50:24:b3:38:ae:2b:b3:6e:cc:b2:ad:b5:d2:
d9:a6:c2:4b:28:f5:7f:a8:9e:18:63:9e:9d:68:35:
c5:b8:39:74:ed:4f:a3:89:34:7f:9f:0a:98:99:6c:
49:34:10:e3:9e:87:df:89:47:17:e8:fb:3d:2b:0e:
42:ab:fa:63:10:f9:c9:3c:58:a7:44:5e:df:e7:94:
7b:49:60:a1:89:1a:ee:60:17:25:d7:c4:88:da:a9:
eb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:47:D0:5B:20:8E:01:2F:B2:C3:E7:84:DB:7C:AA:BE:2A:B7:79:D7
X509v3 Authority Key Identifier:
keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:61:e1:40:41:8a:fa:37:7e:97:af:d3:ba:a7:90:ad:c3:fc:
93:d3:04:bc:34:0e:78:42:df:08:6d:2c:19:ee:f3:d9:08:fe:
6e:bb:78:a0:ae:ad:f0:de:c7:9a:82:3c:c4:3a:89:02:72:94:
cf:e1:b7:71:c0:55:21:0e:59:03:b4:0c:d3:e2:e9:3b:63:05:
a2:51:d7:35:7c:9b:db:5f:f2:7c:81:c2:fc:ff:10:e8:0f:f8:
93:bc:e9:06:20:03:05:a8:cd:d7:7b:00:76:28:a2:d9:e7:a8:
c5:f8:1e:43:db:21:66:3b:83:5f:f0:18:d2:29:9c:61:3a:db:
68:23:63:be:d3:1a:9b:2a:f0:ad:cc:f6:83:49:e3:b9:64:65:
95:64:f3:09:64:34:25:a7:cb:8f:cb:0f:fb:79:5c:22:aa:61:
14:bc:eb:37:9e:48:66:31:5d:ad:86:72:70:dd:b5:3a:96:2d:
d2:4d:87:8e:61:39:26:cd:1f:56:22:f1:96:d7:b4:65:3f:57:
11:76:aa:92:44:20:12:47:04:b9:ba:7d:73:68:4f:c1:d6:a7:
56:db:19:f6:0b:d4:7a:ff:0c:f3:26:8d:06:f6:90:5a:6b:98:
67:1d:b6:62:cb:71:56:8c:aa:fb:9b:12:3d:73:ee:ee:32:10:
84:5c:42:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:37 2025 by rpki-client