Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier: ShHoeCqgUX0Xo61mG9yKaVQXam0EZKI3+CN1haYVaXk=
Subject key identifier: F6:EC:25:D0:96:A7:DE:1E:7A:77:7D:E5:AD:96:29:07:55:D8:27:C5
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial: 0194BD85802A5207F3892FAC5343DD4C7AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number: 08AA
Signing time: Fri 31 Jan 2025 18:00:30 +0000
Manifest this update: Fri 31 Jan 2025 18:00:30 +0000
Manifest next update: Sat 01 Feb 2025 18:00:30 +0000
Files and hashes: 1: 2Utz6EvNmTYHORm-GQMKm69p8WI.roa (hash: j7FVQ06WFgxEJj//G5Co8Dizh+fdctkzSaSmR5/2mVM=)
2: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: 2UNC8bEC6ef17bQwseX6UHdwKF7GytqzAXM74KUPc2Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:80:2a:52:07:f3:89:2f:ac:53:43:dd:4c:7a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Validity
Not Before: Jan 31 18:00:30 2025 GMT
Not After : Feb 1 18:00:30 2025 GMT
Subject: CN=f6ec25d096a7de1e7a777de5ad96290755d827c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:c1:bd:0b:6b:f0:e7:4f:5a:6c:00:78:bb:
96:c7:02:55:ea:17:76:2f:38:c4:66:d4:89:24:09:
28:2a:3e:27:e0:71:0c:17:5e:6f:29:4a:7d:b8:72:
8e:d0:b9:98:0c:be:b7:34:5d:f7:87:e9:b6:ec:81:
5f:b2:00:43:41:6c:6c:b5:97:ae:e5:f2:2f:61:d3:
28:c3:08:a8:b8:3f:e6:e7:c3:e5:85:bc:c1:27:24:
b9:9f:1f:2a:75:56:9e:87:67:9e:86:50:4d:e6:67:
28:d8:22:c1:23:e5:ad:5a:de:aa:85:69:60:bd:ea:
73:49:64:e5:fa:98:b1:41:fc:c3:d9:18:5c:f6:59:
d0:0a:c5:99:24:c0:8d:ab:e6:29:23:77:9d:ca:ae:
b1:64:7d:1c:a7:a3:45:47:16:0a:b1:37:01:f8:8c:
a3:02:4b:89:fc:9f:6f:0d:5f:b0:e4:92:4e:e8:ee:
41:a0:1f:3a:c0:1d:0a:14:83:c8:90:98:68:d9:25:
aa:6a:3a:9a:a9:c2:3c:37:a6:ca:a2:83:a0:84:ab:
e8:eb:fe:d0:c5:2e:9f:d4:bd:01:35:e2:e2:1a:22:
ba:8d:15:de:76:10:c8:5f:6e:9a:6b:2b:61:08:66:
25:aa:04:e6:83:f3:52:a7:8a:36:0f:ea:d4:3b:69:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EC:25:D0:96:A7:DE:1E:7A:77:7D:E5:AD:96:29:07:55:D8:27:C5
X509v3 Authority Key Identifier:
keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:46:ca:14:d6:25:ea:42:e6:ba:8f:7a:a5:22:52:86:3e:e9:
33:08:4a:46:1d:d8:ad:f4:73:0b:ae:00:22:11:49:44:a1:91:
f6:28:03:21:61:58:29:da:2b:41:9c:30:6c:4f:3a:10:92:7c:
2f:cf:1a:0a:34:69:00:67:d7:75:0f:87:ab:48:f4:47:ca:d3:
a7:c2:23:91:be:a1:15:14:c1:0c:bc:28:9a:3d:0d:13:43:0a:
3b:2f:35:42:56:ad:5a:d5:4f:cb:a9:d7:27:3d:ae:aa:8d:0f:
06:fc:c2:04:43:89:36:eb:10:af:e9:1e:53:2d:c9:5b:ce:4e:
0c:a7:50:0a:ad:f2:be:ee:76:1c:a4:9e:bb:35:ae:f5:aa:3b:
cc:6f:b3:89:dc:be:68:2f:85:29:ec:6f:f8:9e:b5:7f:0a:b5:
7e:06:6b:ff:a1:4d:cd:b5:e7:22:2c:21:9f:20:65:29:61:bd:
f9:c7:3d:03:a3:d7:19:38:97:0b:72:7b:9a:13:9c:bb:68:11:
95:8a:a4:8d:f0:8e:56:65:92:ab:5c:6e:ba:52:ca:cd:8a:b5:
eb:69:52:75:28:37:30:08:d8:f1:24:68:2b:f1:11:81:43:2f:
05:28:40:e4:7d:b8:16:c7:fd:29:f2:4c:54:ad:95:c1:73:e4:
f9:18:a6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:32:38 2025 by rpki-client