Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft
File: 8CDLT5tfebnaa0gnutnFSiqAxTE.mft (raw, json)
Hash identifier: sxM6iNv5XbhfL482nGXSLOf17fyMCvfCHgA8VP65w+c=
Subject key identifier: A4:F4:82:F6:37:3C:79:2B:65:FC:58:11:AD:92:4F:A5:0D:A5:40:A2
Authority key identifier: F0:20:CB:4F:9B:5F:79:B9:DA:6B:48:27:BA:D9:C5:4A:2A:80:C5:31
Certificate issuer: /CN=f020cb4f9b5f79b9da6b4827bad9c54a2a80c531
Certificate serial: 0194BCA9DB223A92B2818F12D4FA98B7B6B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft
Manifest number: 0CC1
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: 8CDLT5tfebnaa0gnutnFSiqAxTE.crl (hash: 5DJ37FWV8C5oEpPs7tVYtzAMJrgej6Ji3RCEe7AzCzA=)
2: amkS5SoIvujCi9yce4d8VftUldc.roa (hash: +cELHuiQeJpKMXecyPF27q6ZAbek7zvwZNYTMIlI2SU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:db:22:3a:92:b2:81:8f:12:d4:fa:98:b7:b6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f020cb4f9b5f79b9da6b4827bad9c54a2a80c531
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=a4f482f6373c792b65fc5811ad924fa50da540a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:8f:e3:90:f0:81:8d:8a:07:09:26:61:da:
3a:40:eb:e7:9b:a4:28:a9:34:ff:0a:86:3a:ed:25:
0b:3b:c8:f7:08:3d:19:4b:6f:c2:ab:85:2e:8f:c2:
b5:82:25:e1:b6:e2:d8:e3:9d:49:ed:2d:d0:82:db:
93:cc:ec:d4:fd:8a:7b:28:1d:81:40:c2:ce:29:3c:
a2:8c:31:71:aa:eb:a2:85:28:03:dd:2e:98:0c:85:
80:02:51:39:db:94:7b:85:15:be:a9:69:84:21:7e:
ae:1e:d9:4b:18:68:dd:91:f4:6b:03:f6:59:21:78:
53:1f:01:69:75:42:76:a2:c0:0c:58:c5:d6:a4:b1:
f3:6a:85:7c:60:fe:69:df:a3:ff:be:e0:87:40:77:
6e:e7:4a:2f:7e:2d:bd:5d:c0:07:5d:33:86:35:92:
fa:cf:38:6d:b5:e5:95:88:e0:67:2c:60:52:71:68:
83:26:f0:e8:0a:46:55:98:36:75:24:5f:c4:4f:c3:
32:8a:30:42:99:b3:d9:94:b4:47:dc:7a:cf:0d:37:
f0:fc:21:cf:73:7d:3a:6d:31:f1:e0:e9:98:ab:57:
4e:19:c7:14:b7:2f:da:cf:ff:8b:e6:64:f7:a1:16:
89:9a:74:7b:1a:c4:fd:37:e4:ac:61:47:73:c7:54:
35:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F4:82:F6:37:3C:79:2B:65:FC:58:11:AD:92:4F:A5:0D:A5:40:A2
X509v3 Authority Key Identifier:
keyid:F0:20:CB:4F:9B:5F:79:B9:DA:6B:48:27:BA:D9:C5:4A:2A:80:C5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:81:1c:e4:68:ea:ae:00:e3:81:37:1c:af:a1:ad:c1:3c:fb:
dd:4e:3a:2d:cc:ad:76:39:c6:28:a7:7a:60:d4:cf:44:8e:f8:
e6:bf:65:68:62:f0:31:9e:f7:86:79:8b:8a:85:52:49:ca:be:
80:37:b2:4c:95:8c:0e:3b:c0:8c:e8:70:ab:28:ec:79:85:de:
45:51:05:23:cf:81:d1:2b:73:ca:89:7a:af:a3:c2:b8:27:98:
11:ea:43:87:88:14:10:67:8b:ec:ed:56:63:fa:73:36:40:3b:
f7:51:49:6f:48:0f:0d:df:17:3a:de:f8:5b:4d:d9:10:91:fc:
7b:98:5a:83:62:57:02:6f:57:85:ac:4c:42:44:37:25:ca:c4:
ae:fb:f7:0a:5c:bb:fa:a1:a0:fa:0c:b9:de:16:31:d1:32:45:
05:ee:bf:49:87:c1:52:77:94:2c:32:ea:ce:69:94:99:62:8b:
7a:d4:c0:84:49:cf:c8:e2:61:2c:d5:5f:91:95:69:18:1f:d1:
99:ef:4f:fa:31:79:0d:f5:8a:33:0e:34:71:92:de:49:71:0f:
63:1f:15:dd:89:ea:2b:d7:4c:78:46:ca:cb:a9:77:38:a5:69:
73:72:5c:a0:c0:5b:b9:96:79:75:31:b5:4f:26:ec:29:22:80:
45:fd:af:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:50 2025 by rpki-client