Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
File: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json)
Hash identifier: WLg000kp4n29YeXSqnmjIFkIzm5+n90JAeYdH73I53A=
Subject key identifier: 8E:34:E7:76:45:B8:DA:38:A5:2C:80:BF:1D:73:97:57:EA:3E:A2:A2
Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Certificate serial: 0194BC731052D7796C63DC0ACDF7D88152E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
Manifest number: 0975
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: zvM58TFPA2u4584Gx9iKgE/kgVcKvcGMp1xaDq2bW0c=)
2: RcN3Kuq3ry-DnLR50I8ZgxWiZps.roa (hash: 21uJ31ZQvbuNpqex7iYKgjQtgSig9b6f7lgE5wHxtS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:10:52:d7:79:6c:63:dc:0a:cd:f7:d8:81:52:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=8e34e77645b8da38a52c80bf1d739757ea3ea2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7b:22:92:b2:0d:0d:89:35:b3:fb:4f:4d:b3:
51:84:ee:ff:b4:59:f4:9f:6c:8f:28:7d:4b:dc:41:
3b:d1:4b:50:c4:02:37:cc:33:f3:4c:19:ed:9c:e3:
61:67:91:19:7d:d3:f7:58:fa:99:15:36:62:e2:6f:
4a:eb:76:c3:50:89:71:3d:e4:9c:ff:65:80:71:c0:
b6:ce:9f:6b:a5:5b:07:03:a8:86:75:ff:e1:b3:98:
ce:7b:d9:78:29:1d:ec:a2:e0:90:07:0d:4a:47:3a:
f6:97:2f:d0:de:04:50:c5:50:26:fa:a1:e4:72:b1:
55:68:76:e7:4f:43:f6:b8:6c:a4:87:c1:6a:39:8f:
c3:c8:27:f0:27:7b:da:cc:0b:0a:79:c3:c8:84:d9:
34:b9:b5:0b:f8:ae:04:12:25:04:dd:44:a8:d6:1e:
34:c3:9f:2f:ad:aa:41:bc:d2:41:98:69:32:ce:51:
01:47:ca:df:f5:b7:e3:a3:da:2f:4b:4a:08:44:75:
eb:c3:22:56:ea:31:62:04:d8:2c:49:f5:07:8d:f7:
6d:f6:ad:83:4f:d1:20:e9:bd:fe:eb:ca:85:2d:0f:
98:1d:2f:ff:d4:5d:8b:92:48:b4:e3:a1:85:78:e4:
ed:87:7a:2c:c3:6f:f6:d8:b2:69:0b:ea:08:bd:5e:
55:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:34:E7:76:45:B8:DA:38:A5:2C:80:BF:1D:73:97:57:EA:3E:A2:A2
X509v3 Authority Key Identifier:
keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:bc:9b:27:3d:5b:74:71:e1:c3:44:3b:ea:a1:d6:f6:63:d0:
8c:bc:4e:8b:a7:ef:49:89:3f:39:3c:23:4b:5c:63:51:42:ea:
71:06:cd:ed:43:f3:d6:83:ac:63:ba:fc:1f:3a:ad:a2:f5:72:
90:88:7e:f0:1b:c4:3d:34:88:44:b6:69:98:5f:14:cb:74:b5:
99:20:77:16:1f:d9:ea:a7:12:98:54:97:f0:03:b2:42:2d:46:
e9:b8:61:6c:82:6a:ee:6e:de:e2:cc:3c:b7:ce:41:7d:7c:09:
a5:26:52:7c:88:06:11:cc:7b:7f:36:bc:51:44:fb:be:e7:72:
28:9f:69:b2:cf:69:55:6c:d1:7d:50:b9:6b:25:06:62:e6:d0:
de:d1:51:d4:ba:63:d8:84:a2:c1:f8:1c:81:6c:ce:d1:6c:14:
1c:fe:68:4b:12:49:e3:6a:9d:d7:6a:ca:d7:94:6c:0c:e8:2c:
bc:7c:95:74:30:c8:5d:36:8e:fd:42:3e:a0:6c:17:37:d4:ee:
80:dd:5c:89:80:f1:b6:ba:71:a5:4a:f0:82:51:d8:f6:02:c0:
e0:26:a8:cc:e3:1e:b0:0e:7d:08:8a:bd:2d:cb:b9:2b:5f:5f:
43:8a:37:93:2a:a7:c9:4b:85:14:18:8c:43:b4:1b:3f:79:72:
38:8b:fd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:43 2025 by rpki-client