Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
File: s8k12EMWos9WpllXttebevgRpwc.mft (raw, json)
Hash identifier: zXptZZYgbw5UfLRCm0gPCGIgwjcpPSyf7tGBOyjBvnw=
Subject key identifier: 1B:E0:CA:CB:86:93:79:FE:0D:26:EA:BD:9A:5B:4A:F1:60:DB:82:1E
Authority key identifier: B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
Certificate issuer: /CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Certificate serial: 0194BBCEE441BD021566F785D3554673995B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
Manifest number: 071C
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: s8k12EMWos9WpllXttebevgRpwc.crl (hash: ys4LJTSLSXp+J8OC+I34qKEwia4neHSvMhC3e28G31I=)
2: udh3xGDNJXhOcF-5H4cWJu3ktiY.roa (hash: ocPGT+ldVCPhS+IwJUZcLKrDX+p6H2fIq+UgAUlkPrU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e4:41:bd:02:15:66:f7:85:d3:55:46:73:99:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=1be0cacb869379fe0d26eabd9a5b4af160db821e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:80:a1:43:ff:f1:0b:3e:94:ac:43:46:9d:
c1:b8:57:02:4f:be:af:00:65:3c:ef:10:42:98:bd:
38:f6:1f:0b:30:ca:a9:9e:22:5d:96:35:06:28:04:
c8:e0:f9:74:4f:0a:a4:0e:15:b4:b5:4a:21:c9:8b:
78:74:c4:e6:49:ce:15:26:16:69:b4:55:98:4c:ae:
79:d6:18:7e:b6:ec:a9:84:28:63:e6:56:f6:00:be:
e5:a5:96:2b:d2:ad:63:4e:38:cb:7a:4b:07:ef:14:
42:5d:84:79:02:8d:87:0a:d4:a4:45:9d:32:00:a0:
87:83:51:d0:0e:0a:6d:ce:aa:ab:e5:d4:6e:da:df:
8d:80:4f:32:be:47:6c:1b:8b:12:49:a9:bd:94:88:
3f:8f:a6:8e:36:f8:24:f0:d4:f2:c4:b8:36:53:6e:
5f:81:f0:81:79:7d:87:2f:e1:2d:d5:63:50:15:76:
3e:a0:79:01:0e:ad:b9:8f:cb:29:31:0a:d9:8b:4e:
11:bd:ff:d2:74:39:b2:44:67:99:39:6c:a1:97:d8:
1c:db:b7:e1:f2:1c:7f:ab:b6:bf:61:84:71:4b:67:
ce:12:9f:ce:19:6b:09:4c:02:6b:c1:59:5c:94:dc:
66:b3:78:fe:08:84:56:73:c5:78:f2:6b:97:67:1f:
aa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E0:CA:CB:86:93:79:FE:0D:26:EA:BD:9A:5B:4A:F1:60:DB:82:1E
X509v3 Authority Key Identifier:
keyid:B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b1:cf:83:96:45:1b:e8:0d:40:ed:d6:d9:c2:19:95:3d:42:
bf:40:2a:5f:20:31:66:d3:9d:d5:6f:6d:a0:98:b3:f8:73:c7:
22:57:85:d0:84:32:b3:e8:10:7c:53:1e:90:0b:fb:94:3d:2c:
7d:ed:b5:f8:dd:99:cc:51:46:59:06:2a:a6:28:35:03:73:41:
b1:7f:bc:35:e7:53:e8:37:e7:69:37:2e:b8:ce:16:2a:4f:02:
0f:74:67:78:5a:dd:e6:03:77:9d:2c:bd:5d:67:71:76:35:63:
da:bb:a5:5a:5b:74:6b:b6:dc:39:61:4e:22:4d:f9:3e:9e:c6:
65:19:6f:6e:bb:78:73:56:d5:51:26:bb:e8:7b:74:67:17:f2:
6d:98:01:81:f4:f6:d7:6f:cd:84:6d:1a:0a:f2:8a:0c:b7:f6:
eb:f2:27:58:84:17:39:30:8c:da:7f:ee:b8:cd:9e:cd:21:37:
e9:8e:3c:4c:f8:4d:5e:cb:1f:2b:a7:81:35:78:a7:4a:9b:70:
59:f2:8a:4d:f3:fd:b2:03:55:3a:d2:6c:79:85:87:06:86:1e:
26:68:3b:cf:60:c6:fa:82:77:b5:49:4f:8d:67:c9:6c:94:b2:
f2:f4:a4:3e:03:a3:15:3c:80:1d:bd:54:62:20:3a:6f:57:dd:
fd:d1:a1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:36 2025 by rpki-client