Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File: 08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier: 7tbbziRcV4lsYJEyK3MbGQouQe+l9zDaBZbxn0aoOEI=
Subject key identifier: 8B:67:7F:D9:7E:56:91:11:AA:2D:AA:22:66:2E:49:23:71:D8:D7:D6
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer: /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial: 0194BBCEEB766A54B7B3E8EC2A29AB1957E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:27 +0000
Manifest this update: Fri 31 Jan 2025 10:01:27 +0000
Manifest next update: Sat 01 Feb 2025 10:01:27 +0000
Files and hashes: 1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: TugdogMN2GaMmvQfoOeJAh0AI/eo48YR0kQU3pi5suE=)
2: vhpsA1QTyqlbOgTgwwiSOvjLosU.roa (hash: oOzCVm5vsYLrY+U1GpoNLtBM7Fbrqb31l0clRbwWzyA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:eb:76:6a:54:b7:b3:e8:ec:2a:29:ab:19:57:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Validity
Not Before: Jan 31 10:01:27 2025 GMT
Not After : Feb 1 10:01:27 2025 GMT
Subject: CN=8b677fd97e569111aa2daa22662e492371d8d7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:3e:57:20:05:50:cc:09:50:d9:a9:3c:f4:
75:4d:d3:40:fb:9a:e1:3b:48:94:61:f5:b6:71:ec:
a8:9a:88:d1:4e:8a:f8:df:77:36:00:b8:ca:3f:cc:
e8:40:50:35:0b:03:92:16:9b:51:c0:2d:c8:bc:5f:
e1:1f:73:c0:61:b7:b3:e2:26:12:c2:d8:78:86:9e:
c3:96:36:8c:0b:06:80:4c:bb:7c:84:3f:30:01:53:
81:b8:21:31:b5:76:f4:12:84:36:07:b6:94:a0:5f:
56:3f:16:e3:e4:43:62:85:03:af:aa:52:f0:44:54:
2f:c0:7f:82:91:cb:71:fa:dc:c7:3e:bf:5a:81:29:
4d:8a:7f:5d:8d:d9:7e:3a:ba:53:9d:c8:b1:a1:dc:
86:72:34:72:84:48:4b:f7:97:23:be:de:3c:74:7c:
d2:e9:d5:1f:6b:37:db:5e:7e:86:da:f6:24:66:b6:
b2:e5:a1:98:8d:07:a4:7e:f2:83:7f:db:b6:78:ed:
c2:e6:aa:58:c5:79:94:4b:46:ed:3e:3e:b2:84:19:
89:d0:4a:b0:04:86:b0:f6:3f:22:d6:23:dd:cb:33:
e4:7f:a2:b8:53:89:c3:89:1b:67:65:70:ec:76:bf:
4d:9b:64:ab:b0:05:75:10:21:c6:a6:7e:33:aa:40:
a0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:67:7F:D9:7E:56:91:11:AA:2D:AA:22:66:2E:49:23:71:D8:D7:D6
X509v3 Authority Key Identifier:
keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9a:88:ba:36:e3:62:e5:38:45:8b:df:52:cf:d3:d9:07:46:
c6:72:de:cb:18:6f:4a:3d:27:be:b0:ba:c9:62:22:8b:40:fa:
c7:a7:94:67:bd:7c:b4:2d:7b:4f:07:3d:d6:3e:de:d6:1a:79:
e2:d6:ec:9b:4a:a6:85:84:4e:c9:be:75:8e:de:8a:00:92:1b:
f6:aa:89:1c:d7:88:14:45:9c:21:1d:af:df:08:c1:aa:a2:39:
17:6b:ce:c5:9f:bc:cc:4e:b0:c6:ac:95:cd:c4:7b:cb:ed:50:
24:e7:40:5e:77:82:01:df:84:bd:ed:89:d1:ba:a6:d5:59:ef:
c1:47:d4:76:74:43:49:fd:f7:6b:da:5a:86:a2:9b:61:99:7b:
2a:2e:37:3a:7f:df:a3:6e:cf:ef:ad:a1:15:92:ec:73:4c:76:
0d:f3:dc:fd:2b:94:e9:a7:59:7e:66:63:c8:2e:91:e8:3b:52:
77:aa:2f:4b:a7:5e:2a:4d:4e:ef:12:55:30:04:3a:40:de:c8:
2f:30:ec:d1:09:88:0b:77:a9:62:4f:03:96:c1:c9:25:74:39:
64:66:27:da:07:f5:2c:f2:56:3c:9f:4d:a6:dc:22:0e:4b:ae:
86:30:4e:d7:0c:75:06:08:5c:ca:9f:fe:35:9d:34:b3:f6:70:
28:bd:0d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:07 2025 by rpki-client