Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
File: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft (raw, json)
Hash identifier: RlnL+lrjf1Dyk2Q6Tt7+dQ0Tdg9Qcf07dsszDjX3QmM=
Subject key identifier: FD:1B:2F:51:73:0A:08:77:81:B0:37:40:3B:CA:26:84:2F:2C:21:9A
Authority key identifier: F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
Certificate issuer: /CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Certificate serial: 0194BD8523A137BAD0F4A9D18B23040A9EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
Manifest number: 0114
Signing time: Fri 31 Jan 2025 18:00:06 +0000
Manifest this update: Fri 31 Jan 2025 18:00:06 +0000
Manifest next update: Sat 01 Feb 2025 18:00:06 +0000
Files and hashes: 1: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl (hash: 7ZtZW/UUBiDaDZm2X7OAL4aLi3WLo41FYPKlqb9FdR8=)
2: xvoTABjzfOJqRlktELqO5-hThXE.roa (hash: x+oF0WQqCiPxjdbp2WUuqGjKnL/p9KwR8r/xmYFnEcM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:23:a1:37:ba:d0:f4:a9:d1:8b:23:04:0a:9e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Validity
Not Before: Jan 31 18:00:06 2025 GMT
Not After : Feb 1 18:00:06 2025 GMT
Subject: CN=fd1b2f51730a087781b037403bca26842f2c219a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:b3:a6:36:b0:bf:98:17:5b:40:a1:90:81:
30:3a:db:73:9e:cc:9c:28:aa:14:b8:d4:20:13:86:
11:bd:b6:55:10:e4:8b:ec:ab:88:24:e1:ff:83:40:
7c:97:1f:16:22:87:1c:5a:a5:fd:6b:1e:00:11:eb:
89:43:3f:6d:65:bc:9e:e9:4a:9f:c6:df:ef:93:8e:
b8:ee:f0:ee:2f:ee:5c:70:00:3a:43:5b:c2:a1:e3:
d3:81:aa:80:f1:ee:b2:61:6c:3b:ad:45:16:8c:d0:
2a:52:02:38:9b:ff:f1:8d:f3:5c:09:2c:cc:34:6a:
78:11:55:a7:dd:aa:25:1f:2a:a3:54:cc:2b:a1:5e:
19:8d:ec:1d:8b:d6:0b:ea:ad:48:e4:a4:be:40:1c:
fe:e5:a3:a9:75:35:b3:29:d0:b2:68:3f:8a:7d:6e:
6a:9e:9e:ac:28:83:d2:0c:8a:99:3a:ac:03:c1:4d:
ed:1c:f2:08:65:76:59:85:f6:96:71:4f:3e:0c:34:
26:3f:b5:58:53:c4:e2:48:eb:34:2a:22:06:8e:31:
45:47:db:22:a0:4c:73:14:f4:74:de:c5:5f:18:74:
d3:61:ce:56:5b:d3:6e:be:11:e2:78:ef:ab:fe:a2:
ee:4a:d1:d9:71:f4:7a:4d:da:7a:6d:a3:74:57:30:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1B:2F:51:73:0A:08:77:81:B0:37:40:3B:CA:26:84:2F:2C:21:9A
X509v3 Authority Key Identifier:
keyid:F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b3:89:ca:1e:9b:1a:bd:19:97:78:01:3f:51:7b:cd:30:b7:
41:35:84:8e:63:cc:29:c7:a1:69:f3:0b:e6:26:9c:d0:36:48:
8b:61:a3:b6:52:1a:6f:12:7d:e9:fa:c7:97:71:29:06:2a:13:
54:f0:8f:f9:53:67:02:1c:aa:61:39:86:b8:62:08:66:dd:91:
b9:ad:36:2e:53:8f:3e:c2:a2:ff:2a:f2:9f:a0:3b:83:24:20:
8b:2f:15:84:bd:9f:14:83:87:2b:5b:79:e3:fe:41:eb:64:2e:
0a:00:c3:2a:07:28:c3:06:25:8c:dd:9c:9c:c1:54:63:dc:ef:
6e:d7:f6:15:a9:e8:36:b2:76:29:89:d5:b2:df:f1:61:2d:d2:
de:d1:3d:a1:2d:4e:9d:aa:d2:13:d6:f5:2c:2d:9c:dd:3a:bc:
ea:e3:5b:aa:8b:96:e7:9d:7f:33:3d:ea:a3:ce:d2:d6:aa:1a:
65:78:f0:87:c9:56:09:38:af:83:24:73:bf:4b:88:7e:36:cf:
cb:8b:53:09:6e:ec:34:5b:fb:61:2e:87:d9:19:e3:7c:04:02:
30:dd:67:91:8b:10:a9:77:b9:dc:f4:bb:81:a0:4e:68:e6:37:
f9:90:08:0e:59:79:60:f3:76:b0:85:e1:a0:9c:ba:5a:c1:ed:
3c:2c:67:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:27:52 2025 by rpki-client