Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
File: 8aqhbd2NihLf0OUyEXA62VLjshQ.mft (raw, json)
Hash identifier: Av+Ek441IstBx+2IpZljPk/CUHyDx4n79crJ4G/P2yo=
Subject key identifier: BA:9C:EA:FD:6B:AC:45:FA:1B:3D:22:32:EE:38:C0:33:0F:93:6B:AA
Authority key identifier: F1:AA:A1:6D:DD:8D:8A:12:DF:D0:E5:32:11:70:3A:D9:52:E3:B2:14
Certificate issuer: /CN=f1aaa16ddd8d8a12dfd0e53211703ad952e3b214
Certificate serial: 0194BC730EE3D0723CDD6D63722CF033E76E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
Manifest number: 0A78
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: 8aqhbd2NihLf0OUyEXA62VLjshQ.crl (hash: WJbZ/Q3wJYpR79A2JmpxsYOxYTa0CLC583LxiYVLc7g=)
2: lU08unvCcfUmoq9nA8rwwc_EGrY.roa (hash: r4fF+/jooZGKRffBCLRbLiandhCNSPTtKJ/Y1slqur8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0e:e3:d0:72:3c:dd:6d:63:72:2c:f0:33:e7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1aaa16ddd8d8a12dfd0e53211703ad952e3b214
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=ba9ceafd6bac45fa1b3d2232ee38c0330f936baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:54:2d:1d:2e:61:28:28:83:3c:c2:ef:a6:b1:
55:2f:7c:a0:f9:db:09:5a:da:ce:c0:1d:5e:47:b3:
08:64:69:53:74:6a:34:9d:4b:58:cb:ce:11:ef:ec:
ab:1a:e1:34:a6:f6:80:7e:5c:51:27:8d:3f:72:eb:
a4:f8:30:c7:ac:89:7f:a9:63:5e:d9:2a:91:ed:8a:
4a:50:d1:45:d8:1c:80:96:f4:3d:29:5b:18:74:5a:
c1:c5:97:75:62:38:79:27:51:19:9e:a3:f5:c2:c9:
da:37:6d:01:2e:4a:c0:ab:d2:5d:ce:f2:14:69:ba:
bf:2f:9a:08:8d:cd:86:f4:f6:d3:9d:36:d9:94:cd:
4d:46:9a:b6:40:7b:e2:ed:64:9c:85:3a:f3:34:16:
22:85:ce:d6:83:c9:3f:e6:f9:2b:2e:6d:ff:55:ba:
34:51:c9:93:cb:e1:a8:40:d9:15:c9:83:ab:83:47:
9d:a4:7b:98:03:7f:36:d9:15:31:4b:96:d9:c9:08:
71:ec:6e:25:d8:c9:99:d4:78:8c:4f:e4:7a:54:da:
b3:98:5b:36:14:c5:10:cf:ee:2d:0f:f0:be:aa:aa:
57:a1:3a:ad:a1:43:e6:dc:33:c8:6d:45:56:b5:b8:
e5:b2:bc:62:7a:dc:ef:b3:a3:dc:9b:d9:c4:96:6f:
3b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9C:EA:FD:6B:AC:45:FA:1B:3D:22:32:EE:38:C0:33:0F:93:6B:AA
X509v3 Authority Key Identifier:
keyid:F1:AA:A1:6D:DD:8D:8A:12:DF:D0:E5:32:11:70:3A:D9:52:E3:B2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f5:75:e3:30:c9:01:6b:b5:1f:7d:a0:52:3d:b3:b4:2a:37:
a9:b4:d2:62:bc:c1:ad:4c:af:ac:70:c2:38:9e:79:f1:5e:bd:
10:39:06:f9:e6:49:a8:b2:a2:4b:3b:90:7a:9e:e7:76:55:b8:
00:ba:bb:c4:35:cf:81:e4:64:7d:44:c7:95:78:d4:f9:8c:b4:
78:40:31:d1:15:04:a2:6b:16:80:72:8a:73:c2:91:70:8e:9e:
ba:ff:e8:80:9d:d9:c9:cc:b3:d7:cf:c3:ec:db:ea:4b:ff:40:
e7:7b:73:21:40:f4:66:1b:da:03:1b:b5:a3:12:e4:06:23:fb:
7e:64:8d:1c:9b:af:f0:a6:4e:bc:71:5e:9b:ad:92:f0:f1:8a:
91:57:8d:a6:6b:b1:86:3c:6e:ff:aa:3e:17:7b:9d:95:d4:b7:
67:fe:e4:52:59:e7:c2:aa:67:9f:e8:1a:95:9a:30:23:da:30:
61:5e:92:e5:da:5c:5c:38:92:7e:73:46:31:da:9a:a6:41:03:
9c:90:1c:14:7f:0e:20:76:0f:21:08:e6:48:aa:39:71:d8:61:
4e:1f:55:65:67:77:80:04:8d:62:d6:be:0a:b0:ec:03:6f:b6:
57:38:62:57:5d:34:08:66:a2:a1:ce:cb:44:81:02:99:13:c4:
2a:de:b8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:05:48 2025 by rpki-client