Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
File: 8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json)
Hash identifier: M/TL6QYoPHiIWcY8WRRadKwuov7Ehkos7E7JE8LnsbI=
Subject key identifier: 1E:EC:FB:4E:9F:6D:CA:53:A6:F6:B8:AE:2D:7D:13:03:CB:3D:D5:DA
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial: 0194BD855DEEE20FC95CE4AB30805C36EFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: 1-wkMXSOgCsAbfcTJoQ9M_9mEa8U.roa (hash: ChEU1antJRBwFOEOOm1ILlDCVAljbS+GMt59ceUbKBY=)
2: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: QQ/bznBrZ9PFpotQ47VvW3CROA6BgMOuZzKiuUD6hbc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5d:ee:e2:0f:c9:5c:e4:ab:30:80:5c:36:ef:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=1eecfb4e9f6dca53a6f6b8ae2d7d1303cb3dd5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9d:83:1d:b7:2b:96:f5:0b:98:d8:92:6b:af:
c0:cc:68:b4:11:41:f1:93:5a:14:ce:0b:fd:a5:54:
ee:49:c0:20:60:c2:8d:fc:f8:31:d9:23:bc:c4:d7:
d8:b6:dd:68:25:04:62:42:4e:b8:7c:4d:38:f1:a3:
f2:e6:a8:c3:19:5d:a4:35:15:ab:f1:be:60:05:99:
dd:13:5a:5b:9c:8b:6a:2d:40:84:b1:0d:c6:0e:7b:
0a:a3:d6:58:c8:01:87:6f:ea:10:f1:48:35:ea:d1:
c2:4a:1f:d5:1f:4e:00:e2:bb:b2:04:5b:8c:a1:05:
d4:f5:de:99:81:50:0b:a1:cf:39:de:93:4b:b9:17:
c2:24:a3:8c:53:c8:44:b2:ea:30:2b:83:b4:3c:29:
2e:76:f0:94:99:6c:02:92:e0:67:24:17:ce:32:9d:
67:8b:49:c3:a8:fd:48:21:0c:2d:01:be:37:b4:75:
11:1d:a6:88:1d:a3:fb:f2:62:e0:4a:11:df:9d:ed:
cb:7a:1c:a9:b4:8d:28:28:25:f1:22:43:0b:25:7d:
7b:00:2c:e8:f5:9a:a5:7a:2d:bd:23:34:ec:a6:51:
78:2f:f2:55:47:95:da:a4:a4:be:fe:72:49:5c:96:
09:66:e2:a8:b8:78:e9:7a:cd:16:7e:db:7b:46:ad:
da:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EC:FB:4E:9F:6D:CA:53:A6:F6:B8:AE:2D:7D:13:03:CB:3D:D5:DA
X509v3 Authority Key Identifier:
keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:41:c3:61:21:7c:d2:aa:ad:3c:b4:93:59:e4:c1:ae:6e:7d:
f6:1e:c2:69:9b:dd:95:7a:fd:a1:4b:10:e1:11:0d:ea:7b:23:
ec:dd:db:28:2d:03:fc:ac:50:f7:3f:2b:f0:87:33:c0:ad:cd:
12:08:a0:50:d7:75:ab:c2:a2:57:31:9f:e0:f3:35:4e:b4:be:
46:ec:20:ae:47:e6:1a:f0:0a:33:de:e4:91:09:20:c9:fa:f7:
b8:de:50:e2:58:8a:c9:2d:80:aa:64:5d:09:a5:cc:c6:0f:d0:
bb:e4:a5:41:5d:38:29:8c:40:d2:26:b8:ef:af:0d:65:76:b8:
61:b2:a8:99:72:3a:24:92:a9:1c:b0:b2:b1:d2:45:f3:82:f4:
99:e2:81:ab:cc:8e:e8:13:9d:6d:d6:7d:94:a6:06:32:8a:9a:
fb:06:a9:8c:93:43:de:ba:99:10:68:7e:39:da:56:cc:c4:28:
0a:dd:e7:ab:db:8e:c9:f3:18:c7:3a:9a:87:80:f3:a9:34:47:
e3:61:ab:b8:36:15:69:da:e9:89:fc:12:9c:53:2a:d6:0c:43:
fa:d7:fa:6f:55:de:10:ae:e3:55:a8:42:28:d2:d4:2d:fa:ae:
fc:69:62:9a:a0:4c:e2:d7:1b:74:f9:e8:52:c0:2e:f1:51:a1:
60:81:70:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:35:58 2025 by rpki-client