Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
File: i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft (raw, json)
Hash identifier: Mh1Jr9l8GIrMWXkm+gCtH6hSBXNsUAgS92j8zVIDmyo=
Subject key identifier: 84:98:F7:B6:94:D4:34:5A:15:95:0D:7E:4B:D9:DB:C4:E2:1B:FD:BB
Authority key identifier: 8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
Certificate issuer: /CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Certificate serial: 0194BC3C765DF5ABF345B38B51F80BEFC218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
Manifest number: 0D41
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl (hash: 6Ere+SlA93WuIBrmBiqygc6tnT+YeAfTLnoyNSwK7xc=)
2: nqo_O7xWpllnpXWgXV-EBK2yLMY.roa (hash: v3gPcs+xtmwPaPJ3A0/t7F8YEQgyHeonW0dBXWdUhwo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:76:5d:f5:ab:f3:45:b3:8b:51:f8:0b:ef:c2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=8498f7b694d4345a15950d7e4bd9dbc4e21bfdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:d0:3e:4f:29:b5:08:70:04:07:ff:3b:1d:
14:da:a5:b2:d7:9b:42:4c:d0:22:a2:2e:2a:bb:d5:
5b:48:04:47:ec:09:6e:63:07:4c:81:eb:b5:ba:e1:
da:d6:bb:c6:91:4a:e4:11:95:73:56:a6:f3:36:75:
30:36:7d:dc:60:8f:7c:23:96:d3:79:3d:1d:32:71:
be:8c:9d:44:9d:40:1c:2b:87:ef:69:35:1b:98:f5:
20:22:83:fb:f9:9f:8d:8f:bb:77:ef:e6:c0:ae:fa:
9f:cb:a3:0d:5b:c0:7d:03:a8:ea:c2:75:21:c0:a7:
fc:0f:94:0f:63:77:69:43:2c:3d:aa:1c:a6:0b:b1:
ea:7e:cf:e0:c8:db:94:37:50:49:16:c0:96:b1:40:
bd:62:10:7c:63:cf:eb:e2:a9:4c:b6:cc:c4:0c:e3:
6a:27:03:8a:4d:cc:20:84:bb:93:1b:4f:9a:fd:34:
b2:14:c8:fd:9e:ef:f9:30:cf:77:9d:66:51:62:f6:
f3:43:92:97:eb:58:6d:da:c7:ad:b2:d2:d4:40:da:
aa:a7:2b:99:ca:d1:fa:f8:8a:15:af:55:04:fe:bb:
3e:a7:bc:e2:20:f0:c4:28:8e:23:82:d7:5b:1f:d8:
bb:9a:4f:f2:a7:5f:35:f9:c0:99:ff:0d:8c:73:75:
dd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:98:F7:B6:94:D4:34:5A:15:95:0D:7E:4B:D9:DB:C4:E2:1B:FD:BB
X509v3 Authority Key Identifier:
keyid:8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0e:f7:48:4a:4d:a2:10:1d:1f:02:8a:f8:2a:a1:f3:f7:00:
75:df:24:9c:9d:79:e4:99:3a:c2:14:03:2d:06:0d:e6:9e:0a:
83:99:64:6c:fd:45:6d:01:f4:30:47:64:9a:4c:b1:b0:da:37:
e7:88:11:fe:b4:5b:3c:d3:96:1a:83:c1:9f:f4:58:fa:63:9b:
d9:42:38:a2:f4:28:f8:08:43:8c:f2:ca:dd:45:67:db:53:5f:
ec:1d:9d:84:09:3c:68:56:98:15:03:53:ea:00:d0:45:bc:3b:
10:0f:a7:a8:af:4a:96:d4:c6:c9:a7:ad:2a:da:ba:30:dd:15:
ea:4e:af:7b:6f:4a:f3:05:55:25:f9:65:95:f0:1d:7e:66:7a:
2f:18:37:55:b3:6a:ec:ad:e1:19:a3:91:a7:d2:35:bc:25:37:
77:9c:2e:0f:a8:a4:40:61:c2:25:82:3a:9a:4d:7f:2c:7d:b9:
98:26:fd:43:15:a7:ce:96:66:39:36:b0:69:fd:9c:31:01:91:
40:50:2c:2b:71:74:f5:82:f6:0d:50:8f:9d:ad:34:90:8e:c1:
14:54:83:ca:f7:4d:db:69:f5:08:9f:54:5a:5a:af:3b:9d:e3:
d2:2d:96:c5:b5:d8:00:0e:29:84:bd:24:5e:52:2f:04:2b:b5:
8f:9e:c1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:14 2025 by rpki-client