Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
File: gh8Shdd1qfWJJD6shErcWridl8k.mft (raw, json)
Hash identifier: zw4vNQ56hPw6NxF6eaoOH+JXvMA7TEeiZu6qTCHFOC0=
Subject key identifier: 0E:DB:B5:3E:F8:62:0D:EA:66:D4:29:DF:BF:6A:A2:8C:40:E2:34:3F
Authority key identifier: 82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
Certificate issuer: /CN=821f1285d775a9f589243eac844adc5ab89d97c9
Certificate serial: 0194BCA9C95DA4E4B01D45EE3C66D22ED664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
Manifest number: 08CF
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: 9ZpW1MFLfzhcDdO5wTaJpRND5LI.roa (hash: eD8scxSV/Ipj3PNHolMKD1Dy5Nq6O0rfumsVRuff780=)
2: gh8Shdd1qfWJJD6shErcWridl8k.crl (hash: TsTx62a2xlvvTcElG2tQDrhOhKc+vGSxAojLILDMyQw=)
3: yGExv6aT2zwwq4E64R4PQ7ZXbjU.roa (hash: UK4ZT9heAIw8jcnXNcqfBznXiBKMuH0NwH/ajGH3z/U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c9:5d:a4:e4:b0:1d:45:ee:3c:66:d2:2e:d6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821f1285d775a9f589243eac844adc5ab89d97c9
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=0edbb53ef8620dea66d429dfbf6aa28c40e2343f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:af:e0:9c:e5:5e:5d:37:f9:74:04:9a:69:
6f:f6:21:1e:16:42:3c:95:d0:84:bd:fe:ec:8b:38:
7d:3b:00:d6:7e:70:2c:b7:3c:c3:c4:b1:9a:0b:56:
85:6b:a6:00:50:b9:40:30:33:f5:d7:12:2f:11:7d:
b0:4f:71:8a:4a:c8:eb:7b:68:56:3d:b6:8c:58:40:
8e:96:3f:dd:3b:64:32:51:2e:72:bf:07:9c:b8:04:
46:9b:43:9a:f1:11:3c:a5:04:a5:f8:b5:f9:92:8a:
08:2f:14:27:f8:70:f2:c9:03:83:66:fd:e4:58:96:
d9:60:52:a9:27:a2:46:d9:0c:34:4f:8f:b3:44:ca:
26:1c:7f:6d:b9:16:07:c4:5d:96:4c:35:8d:58:ca:
4c:bf:10:0d:c5:d3:2e:4e:cb:7a:5d:db:83:5e:b8:
48:a7:3a:1e:17:bc:82:8d:e3:64:e7:20:e2:0b:b2:
3c:8c:0b:8b:7f:89:28:6f:6a:1a:6a:53:25:33:1d:
1b:52:7a:76:f4:71:b8:53:b2:8d:47:82:f5:2a:2f:
80:08:aa:04:1b:9c:92:34:1a:82:6d:99:c9:f0:40:
76:d5:b8:60:83:e2:8f:f9:0b:0a:27:ba:65:ae:41:
46:7c:9f:73:85:c7:47:50:84:a8:64:b4:73:da:33:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DB:B5:3E:F8:62:0D:EA:66:D4:29:DF:BF:6A:A2:8C:40:E2:34:3F
X509v3 Authority Key Identifier:
keyid:82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:85:b1:17:50:3e:54:2f:91:31:08:59:a4:7f:11:db:7f:22:
09:7f:ec:f8:2d:5a:bf:0a:49:73:12:09:6b:88:b0:85:fa:b3:
f7:17:82:75:13:0d:95:53:35:77:f0:b0:fa:df:bb:9a:ed:f9:
30:9c:2d:58:ad:51:43:3c:07:31:08:0d:20:a0:b7:6d:cb:26:
ad:51:56:81:94:2a:d7:f3:19:06:92:4b:76:83:74:59:14:93:
68:5e:32:2f:83:e1:bf:86:5c:95:18:d5:0e:94:23:0b:e5:0f:
0c:d4:65:be:c9:f3:4c:0d:cc:23:11:55:6e:18:c3:3d:59:d8:
80:9d:e0:14:fe:f1:28:38:2c:58:80:f4:ed:cb:fc:f9:52:a6:
3b:4c:a8:48:87:85:7e:53:a3:2c:f4:07:7b:a3:12:7a:07:81:
23:52:f6:c4:68:2e:92:99:53:d7:0b:7a:ef:54:49:86:8d:f3:
ae:c2:5f:b9:42:b8:6d:d3:e5:4f:ce:6f:d3:60:39:c2:3c:e5:
70:b8:fb:f5:e6:d1:3b:e2:38:2d:8d:72:1f:b1:5f:76:89:0d:
2c:5c:16:57:f0:ce:ef:0c:25:71:0e:cc:2e:c2:32:6e:3e:48:
e5:3e:91:b7:cd:4c:00:f5:53:d2:12:e6:36:0a:c7:78:37:e1:
a3:0a:10:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:29:06 2025 by rpki-client