Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
File: 8RqaRFV9Rv8tgIiiKIha_wANwqI.mft (raw, json)
Hash identifier: kQ5RyvFKIarbWNdB73mHNwjd+sCwnTgjLf7rUSQbdrI=
Subject key identifier: AF:58:2B:13:5D:41:21:0B:45:45:D1:6E:DD:1F:6A:EA:FF:FF:6F:0B
Authority key identifier: F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2
Certificate issuer: /CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
Certificate serial: 0194BC3C36DBED00B4D89F90767B02D5D632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
Manifest number: 0876
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: 8RqaRFV9Rv8tgIiiKIha_wANwqI.crl (hash: 7PGdGDX8k4Y78SgrTOV2+t6dGAvhWBzFRZen6ly4kOw=)
2: TqtHjEwEgPXdT8pg7HJGWpoB6aI.roa (hash: JiojTj7/u167MnISfmEDzN29ADgR4Ig1J4bZKyBHw7g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:36:db:ed:00:b4:d8:9f:90:76:7b:02:d5:d6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=af582b135d41210b4545d16edd1f6aeaffff6f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:66:54:5a:94:62:e5:7d:cb:71:d7:31:c3:
63:ed:4d:56:39:5a:67:9e:cd:30:08:98:77:bd:1c:
c4:d1:59:d8:6d:e3:bd:1f:fc:da:f8:81:36:98:c8:
8f:7d:14:36:80:35:42:22:57:16:cb:41:69:99:af:
26:bb:13:90:2e:e9:32:01:0e:aa:a6:0c:20:a0:79:
32:c1:7c:98:25:b8:aa:3c:99:10:26:91:74:6f:16:
54:1b:88:df:57:53:f3:43:9a:4b:36:20:13:37:cb:
19:70:26:6b:80:61:51:b5:9b:61:86:25:e1:7c:f6:
3f:cf:a4:c1:fb:ec:bf:46:6a:a1:26:52:2c:ae:0a:
f2:40:3d:8b:8a:45:f6:86:53:e8:e5:36:a5:e6:e9:
19:c3:8e:a3:8d:e5:a5:83:68:d2:27:37:52:78:d8:
61:72:41:8e:33:6d:6b:63:2a:05:cd:04:c2:e5:3e:
98:4d:16:9b:7b:ed:59:fb:79:a6:55:7f:ea:cf:ca:
9a:a1:08:e6:32:ad:55:ff:b4:d5:50:ae:56:dc:56:
f3:3b:d8:22:22:8f:9d:0b:3d:29:f6:51:d0:af:04:
c5:ff:f4:72:ef:07:1c:e8:89:3b:41:d5:5c:8b:30:
9c:1c:9d:4f:fa:4e:ba:d1:e4:4a:e7:c3:57:97:d1:
b6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:58:2B:13:5D:41:21:0B:45:45:D1:6E:DD:1F:6A:EA:FF:FF:6F:0B
X509v3 Authority Key Identifier:
keyid:F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:19:3a:64:2b:8c:76:47:88:a0:1a:1d:19:87:74:41:4a:54:
43:09:3e:5b:fd:a8:8b:03:c5:ea:68:ca:f4:6d:45:59:00:e9:
4c:5e:b6:67:25:27:96:ba:b7:a3:85:40:fd:c1:b1:25:37:64:
96:60:3c:52:68:57:83:c7:5f:83:c3:4f:39:a8:ac:67:d2:c7:
45:84:ea:f7:8d:39:68:dd:54:69:14:af:3f:87:83:88:49:35:
cb:10:8c:42:a9:52:bc:fe:4b:1e:00:62:50:90:c9:77:df:de:
fe:28:21:cc:17:db:77:b5:a2:40:b5:b0:b9:c8:ab:e2:e0:73:
49:03:7f:8e:1a:36:b3:5f:82:3e:c8:02:31:d2:dd:cb:48:04:
b0:d7:55:47:97:a9:5d:d3:f9:5a:a9:bc:f0:c3:7c:48:21:8e:
20:6d:48:5a:ba:77:e7:a2:12:dc:2b:8c:a0:c5:38:1a:a7:8f:
5c:4b:19:62:2a:94:95:43:c1:1e:76:4e:94:c2:eb:e5:ea:d3:
96:fc:15:40:fe:47:c9:4c:f3:53:f4:50:33:8a:a2:ff:b6:63:
ca:af:31:4c:8c:77:1d:55:4d:7e:34:cc:f1:7e:1a:5f:f9:a4:
eb:da:36:18:c8:4d:b0:f8:f9:94:7d:27:42:ae:fe:87:24:40:
ea:5a:e7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:58 2025 by rpki-client