Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
File: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft (raw, json)
Hash identifier: AYw0KxwZKuVQn5fIYJSIzjZ+P5y8T4YOHT10AIulqTs=
Subject key identifier: 77:3A:CD:66:DA:26:47:FC:3F:2F:9C:74:84:ED:D1:62:F8:62:7C:99
Authority key identifier: F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
Certificate issuer: /CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Certificate serial: 0194BD1770030D2D83E12992F0991DF9A282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
Manifest number: 03AA
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl (hash: ahtNwNYiuqzhsJTgfQD/zlv79hXK3bTvzR7YUdC/lLs=)
2: 9LD-hrLWBwUSPOko1WfMuzpukWE.roa (hash: IlW9fI4rY7r7GVZoUndhpUDRIk8UJ5M6N9Zdn/noO1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:70:03:0d:2d:83:e1:29:92:f0:99:1d:f9:a2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=773acd66da2647fc3f2f9c7484edd162f8627c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:77:70:f9:3e:13:b0:16:90:77:01:42:b2:
71:ce:bf:6c:b1:ca:af:06:79:9f:42:f3:e8:9c:20:
8e:de:71:1b:95:8d:9f:fa:61:ce:cb:4c:56:3e:10:
22:ca:93:84:f4:05:bd:a0:aa:06:9a:59:3b:73:5d:
30:08:3b:f4:22:a8:49:1e:ba:50:63:06:66:73:4c:
d0:cc:c2:43:85:6c:6b:34:6b:af:9f:43:04:44:86:
34:ce:96:a5:b2:6b:50:68:1c:55:13:8c:44:57:68:
1d:3b:16:13:f3:68:9c:f6:08:29:57:80:1c:e8:58:
a1:68:07:f9:1d:00:54:e5:5a:70:51:90:e0:8d:9d:
b6:f6:97:21:af:e3:bb:de:a8:f1:c4:20:ce:aa:6c:
53:0f:ed:f0:60:3e:f6:7c:a0:e1:23:12:0f:f0:2e:
89:c7:dd:92:8a:07:58:6a:6d:1f:ed:f5:3f:95:ab:
fc:a8:bd:08:06:57:ca:c7:4c:be:86:cd:9b:57:8b:
9d:d6:02:e1:a6:4a:84:1a:10:ac:9f:cc:06:04:6b:
91:bd:d2:07:c4:01:17:28:b8:65:41:25:aa:ef:44:
b0:a4:b8:c6:64:0d:cb:58:8d:25:a0:9d:b5:4e:ee:
6f:f8:a5:9f:b1:ae:ea:ae:e4:b3:bb:ac:77:3b:96:
47:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3A:CD:66:DA:26:47:FC:3F:2F:9C:74:84:ED:D1:62:F8:62:7C:99
X509v3 Authority Key Identifier:
keyid:F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:61:92:ef:1f:0e:95:97:38:74:a7:83:e2:68:b1:64:06:15:
68:79:f7:0c:4b:e1:b3:49:f5:9e:ec:5d:10:18:98:f0:43:8b:
b6:19:68:90:4b:c9:27:6e:fa:61:08:26:06:72:20:57:9c:86:
89:83:24:62:01:48:02:1b:cc:53:af:53:db:40:00:10:85:b9:
37:90:a4:ae:5e:91:6f:31:b0:4f:67:02:95:38:45:d7:8e:bf:
5f:81:45:60:cc:b2:68:18:a6:bb:21:59:68:de:e7:30:bd:c5:
3a:2b:08:ec:cd:40:fd:9c:63:01:e1:89:7d:ab:57:ce:26:20:
2b:06:37:68:f3:1d:92:a2:17:e6:83:0d:b9:3e:85:64:c5:af:
79:d8:3e:3b:cf:fc:bd:8d:28:0d:61:7b:37:df:8c:1b:4a:d9:
e5:b9:f6:9c:5c:17:2b:b6:a5:5b:0a:43:19:58:ea:27:7d:af:
9a:2d:c9:3a:10:1f:26:58:b7:5b:4a:99:01:70:e0:22:94:62:
18:72:32:bd:60:0c:56:06:5b:38:32:72:61:4c:d7:a4:e5:6b:
5b:f0:ca:0a:cc:73:83:9e:56:44:5d:0e:93:08:d2:90:da:12:
e3:97:67:0f:c8:88:29:4f:4c:62:89:99:39:a6:15:13:18:39:
6a:56:3a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:20 2025 by rpki-client