Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
File: 8gLwqonAZ9ZjOLTVnSBSujmplEs.mft (raw, json)
Hash identifier: KI45hwWBCZC9KFclyOWGQkXNM6AVByakDMB5oFa/PfA=
Subject key identifier: 2F:00:D6:3B:7E:63:30:EB:B1:E0:DD:09:77:D8:80:97:2F:85:16:C8
Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
Certificate issuer: /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Certificate serial: 0194BD17F3A67CF6E7F35DC5DCF0A00CBAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
Manifest number: 038D
Signing time: Fri 31 Jan 2025 16:00:51 +0000
Manifest this update: Fri 31 Jan 2025 16:00:51 +0000
Manifest next update: Sat 01 Feb 2025 16:00:51 +0000
Files and hashes: 1: 8gLwqonAZ9ZjOLTVnSBSujmplEs.crl (hash: 0H8XCw9UI7NmRWz16bNgHKn7zKMjNIlnQfA06D1RHl0=)
2: gxY3cqQ9AtbDjrB_-otpHb6Irb0.roa (hash: LD3l5OVkY9IZSD+ZJZMYqJis4oBCr+KMHwZEJzzuk0w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f3:a6:7c:f6:e7:f3:5d:c5:dc:f0:a0:0c:ba:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Validity
Not Before: Jan 31 16:00:51 2025 GMT
Not After : Feb 1 16:00:51 2025 GMT
Subject: CN=2f00d63b7e6330ebb1e0dd0977d880972f8516c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e1:9e:4c:7b:ef:76:6e:56:82:d2:64:f7:8a:
0e:fa:73:27:74:fa:05:01:65:39:d9:e7:15:6c:96:
c2:93:a7:9f:ff:95:2f:dc:eb:e4:3f:0c:0d:64:04:
1a:3f:e7:06:09:4e:55:d2:74:fc:66:72:6c:92:7a:
8e:2c:76:48:14:1d:49:d9:5f:32:f3:dd:a5:d4:0a:
3c:9d:85:a0:4b:a1:6e:d9:05:6b:0f:b6:d1:d9:66:
72:eb:d4:52:86:37:d4:39:2a:9a:7a:22:75:41:38:
e9:e9:41:37:4d:c7:64:82:79:81:54:89:de:c1:23:
64:6f:b4:9c:21:a4:36:b7:01:2b:04:f4:1b:1f:a7:
86:ed:5a:a4:87:53:b8:02:69:5e:6a:6e:0b:ba:86:
05:bc:c1:c5:41:2c:34:d6:f3:51:74:1c:e8:6c:3c:
58:bd:ad:4b:6e:2c:27:82:fb:ab:45:73:bd:72:da:
35:ff:a1:ab:21:b8:9f:da:8c:5c:89:40:40:dd:51:
40:4f:44:c0:8e:52:97:e1:1f:da:95:8b:d5:d0:6b:
f7:71:c4:18:3c:c5:09:8b:82:b7:37:4a:c1:69:5d:
2d:35:fe:5b:22:d5:ae:ad:c3:f0:c0:24:06:31:62:
a8:2b:0c:6a:ed:f6:b0:d6:2d:4e:ed:d8:9e:bb:96:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:00:D6:3B:7E:63:30:EB:B1:E0:DD:09:77:D8:80:97:2F:85:16:C8
X509v3 Authority Key Identifier:
keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7d:5b:fd:42:84:8c:fb:e5:ff:19:18:2c:34:aa:0a:e3:d3:
9d:ba:68:6f:a5:4f:e9:be:eb:c9:b9:ba:6a:a4:da:24:26:ea:
10:46:1d:f4:e1:24:4e:7e:09:5d:9e:5a:f3:d5:de:63:84:a9:
a8:82:3f:41:d4:38:8c:21:aa:22:78:bc:51:7f:c1:0b:20:35:
88:25:a2:2b:28:20:21:e8:bc:e7:9a:79:4e:f6:7f:0a:50:a1:
1f:6f:b4:0d:e4:77:fb:0f:51:9e:21:4d:95:70:24:7b:30:db:
5d:ad:53:d9:f9:a1:e8:16:d6:1f:6c:e1:f5:4f:40:4e:e5:6f:
b7:fc:4d:69:0a:c4:fa:e6:e1:b4:bb:5b:d0:20:4b:01:6e:9f:
45:8c:93:5d:ed:28:9e:49:ba:ca:e6:82:f2:6d:05:f6:91:b2:
f1:00:8f:68:f8:3f:98:be:10:79:98:0c:9f:23:56:75:b0:ca:
fb:ce:42:8c:f1:5c:25:ad:a3:e6:30:df:4c:16:31:32:0d:47:
9d:f4:69:87:21:7a:f0:5e:7d:b4:0b:10:27:75:6e:ae:6c:3c:
b8:96:85:7c:31:6c:ac:5b:c4:37:a8:fd:83:c1:c4:7b:79:28:
1e:c8:8a:7e:b0:ed:50:cd:2d:f0:16:f5:95:36:72:0a:8e:0f:
fe:00:bf:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:32 2025 by rpki-client