Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.mft
File: x8_M1olXoPcEOajWD_PIuNkRowg.mft (raw, json)
Hash identifier: NrBsbptvq7A3mR8WCKkW7Xr80UM6nLRAdqH8Ffrydcs=
Subject key identifier: DB:85:41:8F:51:FA:5B:47:E7:02:C4:F6:40:2C:8E:32:80:CE:5A:31
Authority key identifier: C7:CF:CC:D6:89:57:A0:F7:04:39:A8:D6:0F:F3:C8:B8:D9:11:A3:08
Certificate issuer: /CN=c7cfccd68957a0f70439a8d60ff3c8b8d911a308
Certificate serial: 0194BD17E7DF9CA05F376746D1F3C73C1054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8_M1olXoPcEOajWD_PIuNkRowg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.mft
Manifest number: 0BAD
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: YIZxa7cJn8DAxFe_bq6gP-moAuc.roa (hash: aP/jGcxACW28RpvaLI/m2V4NPNIHiL114dmzUPqAu9I=)
2: x8_M1olXoPcEOajWD_PIuNkRowg.crl (hash: VJ0939JgUaFtea0lt9R4E+LrHuI120A5YoJL+Flnbbs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e7:df:9c:a0:5f:37:67:46:d1:f3:c7:3c:10:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7cfccd68957a0f70439a8d60ff3c8b8d911a308
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=db85418f51fa5b47e702c4f6402c8e3280ce5a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4f:07:f4:f0:9f:c4:8d:81:b5:66:71:1e:9b:
cd:0b:99:b7:bc:2d:b3:16:37:e7:53:fc:0c:3f:ad:
c2:a8:31:1e:37:f2:2f:6e:53:54:8b:2f:0b:2a:34:
a8:3a:ea:8d:8f:c1:3d:14:29:2d:f4:08:5a:b3:8c:
b9:e3:ef:2b:01:16:2e:52:bd:a7:34:b5:39:9b:32:
e4:2a:dd:6a:5e:87:71:81:95:68:40:4c:a9:30:46:
f8:48:46:48:55:54:78:a1:fa:5f:a1:74:1c:63:49:
b8:1c:0d:b3:cc:78:ab:a9:45:92:14:a9:58:90:86:
73:24:23:28:8b:4e:a3:f7:b6:9b:10:1a:e6:04:a0:
bf:05:a3:65:54:1b:3f:76:94:ee:15:53:23:cb:f1:
5d:6c:24:bd:b4:19:f7:49:76:db:b7:d2:91:94:cc:
b0:36:ee:75:97:72:2b:bf:2b:81:9f:2d:e9:e1:4d:
51:52:0a:c3:4d:f0:4c:66:79:a3:39:eb:f7:97:e1:
d0:18:31:89:1c:eb:27:c1:f7:b6:58:1b:68:9f:0e:
70:77:ab:2e:8e:45:f2:7a:1c:ef:01:61:0e:fb:ab:
34:05:be:62:b2:da:8e:7b:cb:e0:78:6f:6f:cd:fb:
7b:f4:2a:14:3b:60:f3:e4:64:65:e1:e7:6e:a8:a9:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:85:41:8F:51:FA:5B:47:E7:02:C4:F6:40:2C:8E:32:80:CE:5A:31
X509v3 Authority Key Identifier:
keyid:C7:CF:CC:D6:89:57:A0:F7:04:39:A8:D6:0F:F3:C8:B8:D9:11:A3:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8_M1olXoPcEOajWD_PIuNkRowg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1c:38:4e:bd:7b:ce:64:3c:d7:32:46:81:2b:07:a5:1d:6b:
9d:20:34:17:a4:d0:39:01:d5:f5:8d:a3:2e:20:56:15:1e:9f:
31:36:47:76:7b:e3:bb:e2:1f:70:08:90:75:bb:70:93:48:60:
70:03:02:f0:86:4b:ea:02:2c:dd:8b:9f:a2:0c:f5:97:b0:8d:
b4:05:9e:74:8a:e5:3b:7e:36:60:7e:37:54:a4:3c:9a:b1:bf:
83:56:eb:ce:d1:3f:92:ff:f3:c5:7c:3c:20:d2:1b:f0:f1:f6:
30:fa:10:03:5b:cd:3e:6f:3b:85:8e:8c:d6:1f:32:10:3a:46:
59:6b:f6:41:9b:cd:07:5d:b9:6e:bf:bc:2c:e3:62:bd:83:50:
88:da:d8:a0:49:8d:22:2e:17:49:79:39:20:fc:26:19:a4:a8:
5e:90:43:47:7f:03:64:ae:07:72:f5:17:47:33:e7:3a:76:42:
be:33:9b:cd:f9:61:5a:16:c0:0f:39:53:9a:37:6a:e5:39:09:
a5:18:f6:da:65:10:52:cb:b7:a8:8a:8b:1d:c8:c4:9b:fa:bc:
ec:08:11:2e:f5:f4:a3:73:38:b1:73:03:43:d8:29:1a:c7:d4:
8a:43:ac:d4:1e:16:ee:80:a0:f5:3e:26:1e:30:ca:7e:c7:00:
e5:c6:30:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:32:55 2025 by rpki-client