Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
File: 8PY2_se1stGN43l-aYTAaVXnFtc.mft (raw, json)
Hash identifier: Vza9+VvJUXvNmcIFJKl0db1qGXH83pEyKiM3LqqHNy0=
Subject key identifier: C6:4D:F5:10:00:A9:C3:91:EE:3D:E4:F0:99:F6:5E:9D:A1:65:61:37
Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Certificate issuer: /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Certificate serial: 0194BCA9F81F696412A2782BA301517F282F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: 8PY2_se1stGN43l-aYTAaVXnFtc.crl (hash: 4uEiu2xrCvy6zx/AT7P7Aga7FxIPm3nKqdI9p4hRNH8=)
2: rChpwrHAhzHtDWk3Wn4ou5CDTWY.roa (hash: rliHydAwaJdesMgVkjuoZQYXcZjxQiZ7KBN8WESMw/M=)
3: t92LD4JF1zzqhKIJX4gc4PGoZiU.roa (hash: QB9NxoH5XmIj8//Y6YIrgAvA3ml34TrM1hbyfS/v07g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f8:1f:69:64:12:a2:78:2b:a3:01:51:7f:28:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=c64df51000a9c391ee3de4f099f65e9da1656137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8e:f6:ca:04:36:93:13:ba:e7:02:65:a7:15:
70:3f:67:97:5b:5f:ab:a3:71:e6:be:e4:4d:73:cc:
ea:ba:bf:ec:c8:dc:40:e3:42:28:20:74:fb:7b:2a:
c2:2d:5c:fe:bf:fe:f3:cd:c6:21:ab:c2:98:0a:9d:
24:b1:1f:b8:c8:a2:ec:8f:0b:d6:c5:d5:5d:73:7f:
16:87:20:a7:1a:fb:6b:5b:1f:49:13:a4:cb:a0:11:
b0:2e:e5:19:bc:90:9d:f8:99:e2:80:44:e7:98:01:
80:05:24:c5:bb:0e:2e:67:85:cd:61:d9:9a:36:e7:
55:21:2e:5b:26:28:6c:8e:da:4e:a7:6c:a6:36:06:
49:cc:07:ff:92:85:47:98:3f:3b:06:1e:b5:43:a4:
82:a2:0f:36:02:d9:75:0a:5f:a8:4d:b9:61:e7:39:
a8:34:62:4e:f8:c7:f7:e4:9c:f7:36:bd:ea:7b:5f:
87:c5:79:03:e3:7f:65:e4:7a:7e:3e:b5:3d:f5:23:
96:96:22:df:6b:66:81:18:2f:48:64:9e:57:e5:03:
ee:bb:6f:ce:dc:94:d0:92:47:b9:92:c4:5c:69:4f:
b0:f4:dc:00:32:7f:93:f4:cb:fa:52:1e:cf:8e:ef:
c3:5c:d1:8e:06:ce:c1:cb:63:50:45:8c:43:01:d5:
70:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4D:F5:10:00:A9:C3:91:EE:3D:E4:F0:99:F6:5E:9D:A1:65:61:37
X509v3 Authority Key Identifier:
keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ec:5a:2c:bb:b7:1c:6d:e3:26:62:dc:e6:38:ce:5a:c5:98:
37:67:d0:21:0c:82:7a:64:2c:d3:76:6b:14:49:d6:ce:31:64:
12:22:f4:7c:29:b3:99:0f:89:d5:20:8f:d7:9c:5b:7d:f6:15:
64:85:a9:9f:05:8a:60:ca:8f:63:85:23:00:62:b2:b2:3c:fc:
60:f0:17:89:5e:63:a1:c1:8a:f8:2f:44:83:a5:ae:52:6f:bf:
a2:f1:20:e2:7b:c8:44:cf:23:41:76:2f:0b:61:8d:26:7e:8c:
25:48:e1:66:a4:cc:bc:68:e1:57:77:6c:bb:0a:0c:77:7d:5d:
2a:e7:ea:3e:78:d5:f4:5c:7f:46:b1:ed:aa:22:9b:27:86:7b:
fb:54:36:48:28:5a:f2:d9:2e:7b:2b:40:12:cf:82:3c:5e:28:
97:cd:65:ef:60:27:da:aa:e2:29:00:3b:bf:23:0c:10:14:f5:
79:ac:df:22:54:72:99:d7:19:b2:37:f4:59:3e:71:72:0e:a2:
ca:cb:2d:23:5b:f6:65:0f:17:4c:d2:4f:a1:81:7f:b5:5f:ab:
c8:56:7c:b1:d9:e2:5d:ca:ae:98:95:e7:04:75:a5:52:27:21:
54:5b:70:45:c3:e9:ff:f0:87:a5:b0:f1:71:8c:4b:dc:25:df:
96:9c:37:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:48 2025 by rpki-client