Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
File: A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json)
Hash identifier: cb8kUUvLkTTnpjyMpYXpPPatU7KKytvTrovDXhR++kQ=
Subject key identifier: 45:26:05:FE:FC:62:98:A6:9E:C0:12:63:89:8C:00:2C:0C:0A:37:6A
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 0194BC3BC13CFC383EE2A9705F0810B1BCFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
Manifest number: 0914
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: 1wyf+U9NA2An5yJC4+ST8bXh7armU5lZvgVtJwtwlvw=)
2: EjJhFVjaWqZKGfQWMd97kYWrDlM.roa (hash: /S06YJ/Zh2v+rag/BpoYXesfvJadM63GBkvZQOcn4hU=)
3: GK_repQ6rwK9wKBexoj_8KHn0ps.roa (hash: BVRGH6L3m9qE1hNSh0udH+0Cqw8KHPDP3+FP2Bc+9Fo=)
4: Se_t6NLKu8IA2sTkrVOBiKVsQwY.roa (hash: phtV0BDD2FsHScjhDeHLatllFRKkRPV0UJtMe0PEg8c=)
5: cWH5PPaYfZWUJba_G0n_uzh_rsc.roa (hash: C8oVSKijBzzlBacVotbOoAmP0eM+u3jK9TaM8PG08eI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c1:3c:fc:38:3e:e2:a9:70:5f:08:10:b1:bc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=452605fefc6298a69ec01263898c002c0c0a376a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5d:f2:7c:c2:0a:19:08:05:cb:f0:44:d7:72:
61:38:ee:68:5e:11:ef:fb:b1:8f:a2:93:e9:70:5e:
aa:c5:74:b2:b5:f3:cc:be:e0:6d:ce:d6:1d:ad:e6:
ee:61:fc:7b:86:0c:b2:1f:59:42:f8:de:77:f9:21:
07:2f:9d:04:af:3a:29:99:52:be:89:a6:8a:2a:cd:
97:01:ef:38:df:c2:13:7b:c2:a9:65:4f:81:fd:7a:
82:c7:b3:ec:60:c0:ea:86:96:b1:0a:75:fb:18:8b:
e7:f0:07:cc:69:11:c7:d4:1c:9a:f3:91:64:5f:8b:
a0:f2:f0:e0:a5:92:30:88:b5:33:3d:4a:94:f3:ad:
ef:df:0e:ec:e1:13:22:2e:ac:4f:3b:d9:ab:71:c6:
c3:c2:6c:97:02:8e:06:13:3a:1f:f4:26:82:96:55:
66:49:8b:87:41:da:af:85:3b:fc:90:72:2a:d2:75:
0e:c0:fc:22:1b:c5:b5:ce:74:27:fe:07:26:c9:4e:
50:d1:e2:fa:69:c1:fd:28:ef:03:15:bc:20:f7:aa:
66:cc:9b:46:c9:08:a7:c9:18:63:57:56:09:20:0c:
d7:54:96:c1:2c:6e:f1:1f:58:3c:6f:83:53:f8:fb:
05:9b:ac:6e:76:7c:3a:5b:85:10:ce:b7:68:5d:18:
87:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:26:05:FE:FC:62:98:A6:9E:C0:12:63:89:8C:00:2C:0C:0A:37:6A
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:73:53:af:30:96:4b:eb:eb:4c:4b:84:d6:c8:2c:0a:ad:41:
ec:b6:38:84:8f:8f:ec:62:c8:b6:02:55:00:dd:6a:5c:48:d1:
fd:f0:71:8e:b8:35:d6:0f:b7:27:70:d5:e4:ea:44:d9:6c:41:
98:a8:aa:15:08:f9:29:01:38:01:30:e0:b9:13:80:d7:ce:6d:
d1:b7:27:c1:dd:50:02:d1:d0:b5:63:42:4f:5c:d4:0e:37:cf:
f7:c3:87:4d:4e:8d:b5:80:96:8b:61:73:f3:2f:ae:c0:a2:05:
20:83:ba:d5:f9:ac:2d:42:c2:fd:ad:8e:b4:25:d6:34:65:79:
03:f0:b0:45:f3:d8:32:c9:6d:4c:10:f8:51:a6:1d:22:4a:90:
72:f1:5b:ae:af:cd:24:9c:5d:87:21:2d:06:53:1d:d8:aa:b6:
2d:fb:df:6e:b7:83:71:7e:82:6a:fa:aa:88:55:51:81:c0:4d:
4a:b5:35:46:44:1b:f4:04:5e:6e:eb:b2:a3:ba:e8:01:e2:84:
18:eb:3a:a6:72:63:57:08:58:ef:50:1f:a4:e2:ae:33:da:7f:
bc:79:1f:30:7a:ce:0c:e8:11:eb:6e:60:00:51:4e:97:4b:c6:
f7:29:5c:f4:1c:c5:3b:1a:9e:d7:04:13:34:e9:30:1a:88:3a:
ea:01:6a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:01 2025 by rpki-client