Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier: Skzlc0EMgBspAv1UyydBJjI6K+P1bJW/L+UPNNAGBBM=
Subject key identifier: 0B:D5:A7:90:36:F6:75:0B:CF:C1:B2:63:45:16:3E:C5:43:4D:52:8D
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 0194BCE0BAF225DFC169262D0AD2F21495D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number: 0A86
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: 4eZ-orLf3Sw1i9FoVC_BgUuV6yY.roa (hash: Hm2QNZ0IWwgkGkpS2MI3Rx4rLkOrxRzbQrRfD6XRt60=)
2: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: Zl1SI5mKeWCsEO522RuQ7JPcp5bqtz/Q1YSdmFASo3o=)
3: PvG7RaoFWA1C7HlDkfB4Ix4UWSE.roa (hash: 3vQKjjJTEuiCPTgwApvaXGsOiHre5b8+kVP9FzsOJUw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ba:f2:25:df:c1:69:26:2d:0a:d2:f2:14:95:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=0bd5a79036f6750bcfc1b26345163ec5434d528d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:61:69:7c:76:6c:d2:9e:91:34:ce:9c:22:
41:47:aa:88:55:31:6f:65:59:9c:e4:32:ac:67:fc:
a2:41:48:68:81:04:ca:f8:97:a5:79:2e:0f:8a:c2:
ab:dd:8b:1b:97:b3:50:01:0d:99:e7:ad:1f:7f:2f:
a1:42:a4:37:5b:09:7b:80:d4:5e:24:48:00:1e:0a:
a9:af:f6:b8:a9:9c:2b:b1:a7:ff:a7:95:f7:66:4b:
20:24:0c:ab:35:b0:f9:b3:6f:5c:90:90:e5:bf:25:
4e:ee:1c:d9:71:66:f8:fd:b4:b0:5b:ae:02:ec:2c:
56:72:30:7a:f0:d9:cb:ae:37:4f:2d:0e:72:c5:76:
71:af:91:cf:cb:01:1d:27:a1:d8:e8:c0:95:ab:5a:
c2:0f:58:4e:30:94:c3:69:9a:b1:55:44:08:ae:33:
82:5e:89:42:39:8d:7f:54:20:81:ff:10:46:0a:18:
b9:1d:e6:b6:25:a1:c3:08:21:07:35:11:2a:0e:54:
77:d0:57:e9:a7:bc:12:d2:fa:49:5a:30:5b:41:b0:
68:81:db:76:ec:51:e7:ed:1f:ad:05:22:ed:9f:83:
22:24:28:3c:52:71:0d:91:62:07:71:0b:51:02:94:
8e:3c:94:b0:87:0b:50:59:92:a9:20:70:3a:42:4d:
89:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D5:A7:90:36:F6:75:0B:CF:C1:B2:63:45:16:3E:C5:43:4D:52:8D
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:bc:c5:9a:49:89:6d:34:b2:a2:ea:7c:6e:89:2d:1e:d6:62:
13:27:ab:6a:e8:05:e1:4e:cd:79:88:b0:ef:6f:99:c5:81:4e:
a6:7a:d3:8b:7e:b8:b3:fc:3c:32:03:fb:f7:59:2b:95:2a:c4:
74:27:20:59:46:36:6c:a1:1f:46:e3:b4:e8:ee:ca:2b:4b:da:
61:60:9e:9e:69:6b:f0:b7:75:57:d6:cf:53:2a:4d:c9:c8:5d:
a6:ea:6f:79:f6:c2:bf:21:14:46:da:26:fa:e5:e8:1e:5a:79:
86:89:bf:ad:f8:6d:6e:94:06:cc:57:12:f0:49:09:df:9c:46:
f9:52:0a:21:89:41:6f:0e:d1:fe:37:51:02:88:db:05:41:c0:
39:22:6c:5f:00:8f:cc:f8:4f:00:d3:17:a2:47:6c:e8:25:e2:
61:00:84:72:5b:ff:2a:b4:8a:16:2c:a2:62:e8:1b:4e:51:d2:
3e:25:54:55:3a:1f:d0:6c:21:2e:7d:b5:77:9b:d1:da:d7:03:
c7:29:b1:46:4c:b1:1a:9a:09:d8:45:9a:38:fa:91:47:b4:a2:
a8:5e:18:9a:9f:8a:b2:9b:57:37:37:0e:9b:c7:a9:9e:11:3f:
81:5a:cd:8d:cd:f1:91:71:5d:96:71:95:d6:16:51:db:f1:7e:
1b:f5:a6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:08 2025 by rpki-client