Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
File: 8o-houRJGJHBmw8QsIb2VZhPWHk.mft (raw, json)
Hash identifier: lKCdclo6twZ0BDhPMxxJeClTNQgPGnYTLD6JI045zdw=
Subject key identifier: 66:8B:68:3E:2E:10:82:12:B8:0C:A6:69:40:01:FD:EF:01:9A:2B:7A
Authority key identifier: F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
Certificate issuer: /CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Certificate serial: 0194BBCEDB1F4A7C50B79438A2D6F7A4CB90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
Manifest number: 087B
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: 8o-houRJGJHBmw8QsIb2VZhPWHk.crl (hash: FBtQeMXgZkhipFTVIiWYoeJetW4tiDwfx2Ih3xUF6DE=)
2: IAJBt24rgV_us-DgHGqft-brDOM.roa (hash: EYG4N8j/B/VmDjgrJQXF6wEvv1LkIhmvGFmYVI9Ke7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:db:1f:4a:7c:50:b7:94:38:a2:d6:f7:a4:cb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=668b683e2e108212b80ca6694001fdef019a2b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:33:8f:09:0e:2c:bc:05:30:2d:53:85:2a:3e:
28:3b:58:2d:0d:10:1e:1f:09:71:30:c5:d3:2c:4e:
66:ce:15:58:90:93:2a:e4:9f:71:5e:1d:c8:e1:b5:
7b:bb:af:9c:c6:91:1c:13:47:14:1b:8e:6a:9b:5b:
99:eb:5f:a4:42:08:f6:0c:93:e5:2c:20:30:5f:71:
9d:b0:f1:7c:0d:93:5a:ea:75:37:4c:3c:01:fa:91:
8b:66:2e:39:4d:3d:fa:8d:37:8d:45:37:b9:58:26:
0d:4a:89:b0:9f:33:6c:f6:fc:57:f1:4e:a7:7c:f1:
c3:5b:b9:54:73:92:52:f7:7d:3e:4c:9d:96:20:c9:
9e:4b:c8:2f:60:a4:3e:e3:bb:22:24:c9:7e:f0:58:
9b:e9:68:1a:85:c4:2a:72:0f:ed:3a:c8:7e:57:ab:
a3:3a:e5:48:ff:65:29:35:9f:3d:1c:ec:07:2b:91:
19:05:58:cb:66:bb:df:f0:50:52:d1:cd:48:11:04:
a3:c9:4b:a5:fd:4c:9d:33:7a:fb:ff:a8:78:d0:9b:
d1:0d:dd:f7:09:ac:71:23:c2:2f:2e:3f:35:d2:ea:
ee:fc:cc:24:a0:2e:ac:de:03:d5:24:4e:92:7a:94:
99:8a:2f:46:2f:df:a3:02:76:c3:3e:16:f5:83:7e:
df:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8B:68:3E:2E:10:82:12:B8:0C:A6:69:40:01:FD:EF:01:9A:2B:7A
X509v3 Authority Key Identifier:
keyid:F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:31:7d:a6:54:ca:36:ff:d7:a2:7f:a6:2c:5a:69:76:ac:54:
3f:a1:f4:bf:1d:47:52:45:6f:aa:e1:4f:4f:13:57:a0:f6:45:
46:e1:89:f6:94:ec:a9:b4:f7:1d:c4:11:b1:1c:2c:a9:72:de:
5c:80:77:c1:e5:f6:07:ce:88:27:e8:00:65:67:6e:b4:0a:bd:
b9:70:b6:4f:84:a9:88:86:5c:97:e2:2c:72:c9:be:19:5c:be:
af:69:be:ca:e5:c0:c3:72:8d:a9:39:86:64:07:7c:67:35:72:
10:af:f6:3a:9c:1c:bd:36:c2:4d:ce:bd:2e:bd:15:c9:a6:1c:
78:58:2c:cc:76:0c:93:50:04:7d:5b:41:52:65:97:e1:b1:ed:
b2:e2:aa:99:54:49:6c:d2:44:92:9b:26:0f:f3:fd:0f:73:4f:
e0:71:f6:aa:a6:25:0e:f6:e9:65:49:28:40:02:34:c0:69:24:
9a:f4:64:52:2e:59:21:75:12:f3:02:2d:7d:41:a5:1a:3b:b9:
99:1c:c4:64:c3:e0:02:05:f1:bc:f6:f7:37:a5:63:78:d3:aa:
7f:7e:52:66:72:e3:c5:52:e9:99:d5:10:d4:0d:cd:d8:48:61:
21:8e:47:e0:4e:72:e2:79:1c:c7:b1:63:81:47:76:11:72:22:
c9:ec:c0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:31 2025 by rpki-client