Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
File: 8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft (raw, json)
Hash identifier: vT1jegMAJ75tdV+e9aBSkQAGtGknqJwHhvfKJhnjjC4=
Subject key identifier: 52:DF:08:C8:20:76:B9:BD:43:D5:B1:69:84:5A:04:91:AD:66:11:EB
Authority key identifier: F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02
Certificate issuer: /CN=f16090c5f6233cbaeaf319dcfae692a956eea102
Certificate serial: 0194BC7301DB275E749FBBC3316A2E9CA64D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: 7Kmoa0mTT-hmQesiS2Vd310k5jw.roa (hash: USbTJdTp4AkhAgtWaDPdpVWCdumqCodGAPlzgsbWpqI=)
2: 8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl (hash: y46TntG/IpdW2a3Nim0JhtWVm68VldXHz4zIFV+J1RI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:01:db:27:5e:74:9f:bb:c3:31:6a:2e:9c:a6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16090c5f6233cbaeaf319dcfae692a956eea102
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=52df08c82076b9bd43d5b169845a0491ad6611eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ee:d9:f0:3a:c5:a9:f4:3d:1e:dc:f2:21:d2:
c0:05:b5:79:e1:cd:c9:35:ed:02:0a:ac:ac:19:a7:
25:6d:8a:d4:22:cf:cb:07:fd:33:a7:c8:92:77:62:
6e:14:5b:95:9f:b5:9c:93:f2:81:31:db:f7:23:42:
b4:dc:18:62:ce:f9:3b:85:ac:5b:09:a6:8a:07:0c:
fd:9e:07:6b:02:57:cb:46:0b:a2:bf:b1:73:a1:ad:
73:87:89:9c:2a:a9:d7:b1:55:5c:42:2c:88:28:ce:
9c:73:05:06:1d:7a:c2:d0:8a:9d:41:7d:0f:32:31:
f8:0a:19:fc:e6:71:3a:a2:15:47:b6:ec:2a:ff:ed:
7b:dc:9e:9a:6e:56:fc:c9:06:7c:da:c6:a9:98:9f:
3b:f2:11:24:33:30:8b:9e:2a:3a:89:b7:4d:f2:d2:
d6:b1:c3:5d:99:90:3e:b1:ad:3e:34:3c:ec:db:01:
e9:d1:3b:16:0a:0a:d7:05:a3:50:dc:cb:77:8e:d4:
06:de:95:38:b4:9d:f7:54:47:0f:7f:3c:eb:92:b6:
48:54:c3:c8:ec:2f:f6:fa:01:16:17:86:65:5c:59:
af:02:99:a4:9e:7f:f5:80:67:cd:e0:44:ff:ea:cb:
cd:cc:8a:7e:71:e3:80:1b:2c:e9:2c:9f:14:59:25:
d4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DF:08:C8:20:76:B9:BD:43:D5:B1:69:84:5A:04:91:AD:66:11:EB
X509v3 Authority Key Identifier:
keyid:F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f9:2d:36:5c:b0:ef:ad:0a:64:b3:11:82:8a:20:5c:36:c1:
b0:8d:16:28:e3:f2:ba:e9:20:5c:55:5e:52:ad:10:48:3f:1b:
db:13:ad:43:21:41:5b:01:f3:81:ca:41:a9:71:ef:84:87:1a:
95:a7:e6:2b:eb:cf:92:d9:e2:61:13:8f:ec:a8:bc:2e:df:a8:
84:33:70:e2:d3:19:13:b0:ea:f2:f8:da:3f:a2:b9:2c:ed:b3:
61:38:86:2f:cd:55:53:dd:08:d8:b0:9b:19:10:ac:f2:d0:9c:
cc:e1:85:f9:fc:9c:46:df:39:15:b0:1f:44:3e:27:19:3a:bc:
85:46:14:8a:a5:2a:46:40:8a:cb:0b:f7:8a:44:61:c5:d0:c3:
90:11:e4:a8:09:b4:87:32:ac:7f:0b:65:11:e6:e5:09:10:fc:
4d:7f:00:d5:6a:b6:c1:af:ac:b7:e9:40:b9:c4:5e:37:b2:d6:
67:13:52:e7:80:72:45:95:9d:b2:8b:f1:95:a5:09:3c:32:a6:
f8:d7:06:4f:57:97:09:2f:f5:ae:7d:ab:e1:40:5e:9d:ec:4e:
bf:74:4a:db:0d:b1:40:7a:da:bd:90:4b:f7:61:fe:83:2b:e1:
33:e0:a0:b4:c5:95:33:b8:ba:5a:d9:71:69:4a:db:dd:f0:5f:
e0:ce:64:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:11:11 2025 by rpki-client