Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
File: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json)
Hash identifier: BZ4E6LXJsxvA/mjqyT+ho4RBcGm8YHh8qprHLNJpw9A=
Subject key identifier: 37:96:C8:F6:AD:C6:07:8F:4E:FB:2F:22:10:82:00:D0:DF:71:B6:50
Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
Certificate issuer: /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Certificate serial: 0194BD85AFFDB7896000EC8D3E593B12DA13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
Manifest number: 0E1B
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: QR0Hu6EJUpEiGpBEKZMcw2VQ2CzdRYokwl9F2MCdGwE=)
2: qPfR7RG57f18LNEfOXECDUWuxuU.roa (hash: QgXqOHY45cNI3RJ9Yex5GhM6/GX8GPU2S0Ij2p9Y640=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:af:fd:b7:89:60:00:ec:8d:3e:59:3b:12:da:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=3796c8f6adc6078f4efb2f22108200d0df71b650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:32:2f:d6:61:d1:18:da:46:82:f3:2b:c4:67:
fa:70:ce:0e:87:b3:ef:9a:ea:12:9d:57:51:db:22:
22:14:48:10:b6:e8:48:7b:e6:e4:fb:03:31:34:25:
a2:d8:68:90:7b:a9:63:7f:53:fe:d4:8c:36:9c:f3:
f2:b7:47:b0:46:cc:e1:25:71:77:bd:e5:5e:63:b5:
c5:0b:c0:29:6e:b2:b7:e8:57:bf:85:cd:27:b6:a3:
c8:d8:65:10:fd:8c:44:37:b1:18:96:44:07:a7:b1:
f2:5e:33:b8:e2:22:6a:9d:0c:de:83:3c:f2:4f:f6:
f0:02:50:6a:18:48:3b:f6:42:c4:90:54:28:a1:0b:
43:e6:2a:ca:21:5f:e4:f1:4a:51:23:5e:e8:f3:4d:
f8:8f:cb:98:90:cf:df:18:04:de:6d:b0:9a:e9:48:
09:3f:30:ff:47:b7:a5:d7:43:c2:50:58:2a:61:93:
b6:50:12:65:7e:5e:ce:c0:2f:41:4e:f4:fc:09:f7:
21:c5:1c:03:60:4d:ea:13:d1:e4:35:a4:f4:3b:07:
51:e0:92:0f:87:c8:35:17:2e:47:ac:de:7d:fb:89:
3c:eb:f0:0d:91:f1:f0:0a:41:6f:a2:12:a6:33:a4:
44:88:5a:f3:07:59:bb:7a:63:e9:03:ef:37:d0:7e:
a2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:96:C8:F6:AD:C6:07:8F:4E:FB:2F:22:10:82:00:D0:DF:71:B6:50
X509v3 Authority Key Identifier:
keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:df:9d:f0:14:bf:00:ff:cd:18:8a:9b:77:fa:93:4d:d2:11:
56:cd:67:04:70:fa:99:7b:d0:79:83:ba:49:4a:31:c1:ff:cf:
a7:07:33:e3:23:db:e1:b3:d8:b2:b5:fe:71:ea:b8:6e:57:1b:
f5:d9:97:9a:12:92:46:2a:77:e8:27:37:59:24:08:8d:87:e9:
9f:24:4e:be:23:44:3e:ff:d8:86:f3:ce:d3:d7:c9:6d:20:34:
13:21:fd:44:39:01:e6:4c:9d:7a:f1:f1:3a:91:fd:89:ac:6a:
56:16:fe:d1:73:40:32:cd:a5:ef:e8:de:90:2c:aa:88:2a:75:
0a:a7:17:3f:fe:ce:9b:1c:a0:72:6d:cf:03:5c:6f:31:9a:84:
49:dc:2b:73:83:aa:3f:84:12:70:cb:f9:37:d3:59:db:99:c7:
79:63:8b:b3:5e:d0:64:25:be:e2:6a:21:34:67:05:44:13:8a:
87:e5:ec:dd:c9:b8:b8:f6:36:67:7b:de:22:a8:a3:ae:fd:ad:
a6:8d:e7:8d:75:08:8f:05:2c:a5:de:3a:c3:3c:59:13:3b:bc:
d3:07:8e:94:c3:2d:f0:bf:34:b5:6e:6f:fc:b8:cb:41:07:42:
1c:fe:6a:28:3c:f2:b5:7d:b6:de:93:70:a0:9a:49:64:f0:da:
df:d8:8e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:39:57 2025 by rpki-client