Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
File: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft (raw, json)
Hash identifier: UCS8a92NuOptVkpCjOjTRKsjWlPwkEe6JRepErJCDLk=
Subject key identifier: 7B:0B:4E:7F:79:38:4F:A0:4D:B5:54:C0:18:05:45:64:6B:5A:63:5A
Authority key identifier: F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C
Certificate issuer: /CN=f2a959dc16715c8a54c8094267b8e491fe321d2c
Certificate serial: 0194BBCEEEDE90B5D60CF62EC7E8E32ACB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
Manifest number: 132A
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: 0I9cdEj3e4monIOvSXft4r0-CMo.roa (hash: oHyUkagcGp7ShA4v0QeuNwiId+006yb988EUZglB85E=)
2: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl (hash: IsPEFF5yXIWiTZtGEPfadxFHC+Ks/n/FUJpvFBJCl74=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ee:de:90:b5:d6:0c:f6:2e:c7:e8:e3:2a:cb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a959dc16715c8a54c8094267b8e491fe321d2c
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=7b0b4e7f79384fa04db554c0180545646b5a635a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bd:81:ab:89:68:af:1e:01:b4:8e:8e:82:26:
e7:ca:02:3f:50:25:ca:80:16:ad:81:da:ba:4f:b7:
d4:db:fc:fe:f3:49:52:41:d4:d5:44:82:7a:a6:5c:
7e:3f:cd:bb:8c:d6:3f:78:bc:52:28:37:a0:7f:20:
a3:5d:2b:d5:31:6b:4c:d3:b0:7d:e0:12:1f:28:61:
ad:43:eb:d9:79:e4:9a:a4:14:e3:34:3a:60:ca:cd:
54:89:ad:e1:3a:e9:66:68:0c:87:da:0a:0d:e1:62:
9a:2d:9f:f8:ad:bb:da:93:97:62:f4:4e:31:40:dc:
07:37:df:34:24:15:9e:a1:c0:10:0f:dc:bb:18:bd:
03:b8:5c:cd:42:d9:3e:b2:e6:1d:27:84:05:55:13:
43:c7:3e:80:bc:2c:f2:b0:8b:9e:77:ef:87:20:e4:
3c:7a:1f:7d:36:fa:09:c1:2d:f8:dc:51:97:c3:85:
d2:86:75:12:16:12:64:6c:eb:ec:9f:90:4b:77:b7:
98:5b:ff:1f:5c:9d:28:8f:28:b7:5d:2d:aa:77:31:
44:8a:07:06:8e:b5:26:f5:c7:1f:a9:e1:b4:10:7a:
eb:a1:30:4b:59:7d:94:3d:a8:ab:cd:01:46:78:e9:
a1:0f:04:8b:4d:82:09:f0:40:c1:dc:7d:ec:c0:19:
f0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0B:4E:7F:79:38:4F:A0:4D:B5:54:C0:18:05:45:64:6B:5A:63:5A
X509v3 Authority Key Identifier:
keyid:F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d2:98:84:e2:59:43:c2:c4:b5:ba:4e:bf:bb:92:a7:4a:a5:
80:78:e9:77:e1:c1:07:9b:4a:4e:e0:81:d0:7c:a3:89:55:04:
dd:f9:c3:55:fc:49:bf:16:a9:7c:1a:8b:c7:a5:50:80:53:de:
ce:49:21:06:b5:92:d5:43:8f:ed:30:f2:28:da:fd:c0:90:2b:
3e:c2:56:5c:e8:80:63:37:d3:2f:28:0a:7f:c0:d1:e0:79:9e:
db:b3:0e:dd:ac:8a:49:24:5b:73:0c:64:5c:43:8c:f2:82:c5:
e1:41:75:2a:22:82:d9:af:92:b3:b3:d9:cc:a5:92:58:b6:f9:
3a:0e:1b:62:dc:75:61:6c:90:3a:55:28:8e:07:54:d4:30:ba:
2f:dc:f7:8b:f2:94:1c:8e:b2:47:1f:71:5b:97:89:cb:42:a2:
e6:8b:6f:1c:42:e8:a3:6c:73:70:42:94:b3:8f:df:64:07:7b:
5c:ba:5e:a4:75:ff:37:8b:ae:a0:a9:be:9e:64:b3:54:5c:1c:
73:58:4b:24:58:35:79:ad:ff:94:33:91:7b:23:33:66:49:f6:
fb:91:22:18:1a:50:87:08:86:09:ab:d0:86:1b:e5:30:90:1e:
0b:ab:4f:8b:dc:de:74:5d:62:44:b5:63:7a:ca:54:de:7d:56:
de:9e:40:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:36:03 2025 by rpki-client