Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
File: 8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json)
Hash identifier: DMwpTmG+o5JY1XkFefYxzgq+Z1OFMuY6m7LaT6MtqT4=
Subject key identifier: FC:F6:E9:60:1E:02:AA:3B:70:0D:55:71:E3:FC:11:19:2B:24:F8:7B
Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c
Certificate serial: 0194BD4E43C74147C18613E5AAF401EC0B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 17:00:10 +0000
Manifest this update: Fri 31 Jan 2025 17:00:10 +0000
Manifest next update: Sat 01 Feb 2025 17:00:10 +0000
Files and hashes: 1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: fbukq3WV0ZizsZwqcOq9Ve/tyI4c+OZehzI2yVlUh+s=)
2: yT1Jx8Ou-jYtMpuKi40cHf-H83c.roa (hash: Lx4YPLeLSMnJ3NGAZ4PST+Ci/ylYMYy1Z+vRgBl8ZqA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:43:c7:41:47:c1:86:13:e5:aa:f4:01:ec:0b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26144c824959711b652d78c18702bf432f2195c
Validity
Not Before: Jan 31 17:00:10 2025 GMT
Not After : Feb 1 17:00:10 2025 GMT
Subject: CN=fcf6e9601e02aa3b700d5571e3fc11192b24f87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:54:e8:bd:32:93:ff:b8:ee:bb:a8:f2:62:
60:8f:b9:43:6a:0e:64:b5:f4:af:d1:fc:08:eb:3a:
b5:4f:fc:18:12:cf:ce:bb:86:ca:92:fa:42:cc:1b:
16:ad:3f:30:d3:b7:80:f0:60:66:e2:82:0d:8f:a0:
6f:5b:f2:29:52:6c:c7:c1:77:05:0e:3b:86:05:5a:
80:bc:46:46:8b:d5:c2:ef:34:50:ae:d0:f8:94:e1:
f1:f4:b8:1d:9d:85:62:b3:3f:6e:f4:6e:ea:06:51:
1e:62:b0:29:d3:93:ec:56:ab:2b:9f:e9:e6:27:34:
15:24:42:38:32:79:ee:8c:d1:81:57:f6:7f:c6:9d:
7f:f8:21:db:7f:34:89:97:0b:29:e3:02:07:56:3c:
e4:2b:45:48:9e:00:2a:8c:76:6b:d7:42:a5:74:75:
33:79:9f:ed:b8:bd:55:b8:23:4b:40:37:ae:5d:0b:
a9:72:c5:0a:51:02:1a:25:b5:97:c8:ae:8b:5b:22:
3f:61:8b:0a:cf:0a:92:2d:44:71:e2:3c:73:be:f4:
22:40:37:c8:04:37:05:f7:5e:a8:44:37:97:b3:b4:
74:d5:1c:cb:58:e2:08:70:09:6c:9c:dd:25:8c:c6:
9e:b1:79:1b:fe:04:9c:73:c6:13:eb:1e:c4:a7:c2:
eb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F6:E9:60:1E:02:AA:3B:70:0D:55:71:E3:FC:11:19:2B:24:F8:7B
X509v3 Authority Key Identifier:
keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:58:3f:f7:3b:ed:23:85:1d:87:cd:1c:d3:a5:3d:9c:11:43:
43:80:0a:0f:43:03:de:3e:1d:2b:00:0c:01:9b:b9:19:f4:f4:
3e:46:35:d7:1c:53:08:d3:28:6e:1f:af:54:fb:70:85:da:f2:
19:75:bf:d9:55:5b:fb:52:03:43:7a:9f:60:99:eb:cf:f5:30:
50:a9:18:41:ef:89:63:bb:98:a9:15:db:ad:a8:bf:11:5f:c4:
f2:64:a6:eb:28:e3:48:93:4c:91:2c:63:a7:65:ce:3c:00:a4:
99:7d:89:da:d5:fc:c2:85:5c:a4:57:45:d1:b9:62:2b:91:85:
cd:14:e6:a1:5f:f4:e6:bd:09:6a:e1:d0:e7:33:03:30:b6:ff:
83:f6:bc:da:cd:89:69:c9:43:63:a3:99:64:84:18:cb:6f:79:
ee:54:21:0c:11:28:65:4b:75:7b:80:8c:fc:14:d5:9f:b5:1a:
dc:ff:be:cc:75:8a:1b:9f:06:0c:b9:c9:58:1b:16:e5:ce:23:
20:b2:5e:2b:a6:cb:11:1f:db:73:0c:bf:f1:29:ca:9f:85:04:
95:69:00:df:88:df:03:2f:e4:a4:a6:e5:d8:b1:7a:09:f1:a1:
67:76:93:f9:0e:3b:05:a6:b8:e5:9e:e9:a2:b0:a7:f4:a7:45:
d8:cc:e4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:39:56 2025 by rpki-client