Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
File: 8spAIO_uYcMQasn-znnHpo9xqcs.mft (raw, json)
Hash identifier: +3FekIUls3+pNuKD4xEqQOsaXANCFI5/wUymcl0w11M=
Subject key identifier: 57:42:64:B6:DC:E0:6C:05:4D:B4:B7:97:ED:75:FD:88:BA:32:27:C8
Authority key identifier: F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
Certificate issuer: /CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Certificate serial: 0194BCA99BA5BC8B5DFA1256041C5FBC28C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
Manifest number: 0805
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: 8spAIO_uYcMQasn-znnHpo9xqcs.crl (hash: aWpuJzkhKWT56j+tE+fWt2WZSPDrJAaqoUE59xPp2g0=)
2: mKP-r2WNz-DcN8jHguqt0IynJdI.roa (hash: 64sCq3JbYFHT/xnTN/Iz1j1wV1/No8n++lWEXivZPic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9b:a5:bc:8b:5d:fa:12:56:04:1c:5f:bc:28:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=574264b6dce06c054db4b797ed75fd88ba3227c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:eb:18:74:e3:12:a0:39:24:58:22:59:70:
2e:4a:74:83:5e:87:88:b5:a8:3b:c9:9b:55:21:f4:
d5:d7:2f:ad:66:ae:92:38:a3:0c:3c:b6:cf:52:6b:
fa:0c:91:56:eb:27:48:5b:f5:11:43:89:9a:32:13:
7a:86:5e:10:7d:f0:36:55:e8:ad:99:7f:ca:e5:c6:
5f:b8:13:7c:95:c6:7e:ae:e0:8f:ce:01:ab:df:1e:
cc:ca:9b:94:f1:5f:35:f1:7c:76:f5:2b:95:b0:bb:
17:09:39:a3:2e:be:9c:67:ba:84:b2:7d:78:7d:b5:
46:3a:57:64:23:20:9b:6f:1a:13:1a:f2:08:ff:4b:
4a:d8:2b:1a:d8:19:54:c0:82:1e:6c:0a:51:78:78:
37:a4:40:15:3b:95:ae:8c:39:e1:70:af:31:3b:84:
d0:1d:77:29:e4:78:85:22:bb:1a:8c:1e:c2:45:dd:
65:d2:36:6c:f0:77:85:66:ad:98:dc:2a:5c:e9:cc:
66:e6:75:87:04:e9:fc:b3:bc:80:36:e8:9c:46:eb:
00:77:34:0d:6c:7f:1f:de:6b:04:ed:9c:1b:25:bd:
9c:8a:ce:26:46:ae:47:71:71:10:bd:b2:62:27:da:
bd:22:15:cc:3c:ed:7d:e7:81:8b:a0:75:b8:6a:b1:
30:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:42:64:B6:DC:E0:6C:05:4D:B4:B7:97:ED:75:FD:88:BA:32:27:C8
X509v3 Authority Key Identifier:
keyid:F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ff:ae:8a:a3:00:c7:ae:42:ca:29:c2:f8:9b:68:bb:26:53:
bb:d2:1b:aa:0e:66:f8:00:05:55:83:86:95:1d:66:46:32:a0:
c4:e5:c7:ef:0c:b2:52:e7:15:88:db:b0:94:8d:f4:35:7f:19:
e4:ac:cb:60:e3:a0:d5:63:9c:32:0e:15:b0:cf:67:e6:9a:30:
dc:e5:e0:e7:3f:32:4f:26:c7:da:2d:e5:aa:1f:79:6a:9e:ac:
b9:1c:3f:a0:d4:74:38:60:f4:82:69:85:e6:d0:9e:3b:43:ae:
12:66:80:6c:cb:3c:a1:ae:e0:fb:e4:3e:bc:b3:f1:c5:be:9c:
60:6d:25:3c:33:a2:8e:4d:84:31:da:f9:3e:e5:9c:4a:bb:c0:
9e:fb:41:cf:82:5c:05:3f:95:63:a9:4e:d5:57:bf:97:d1:5b:
ef:4f:ca:52:f7:b3:0d:a3:e9:0d:ff:6b:0f:4b:1e:c9:28:d3:
b3:1b:aa:f1:d4:74:2c:23:d3:8a:4c:a0:c5:08:eb:77:2e:b7:
8d:66:1f:fe:6b:9e:03:60:0d:90:a6:71:fb:f6:33:c0:81:91:
d3:84:fc:be:2f:44:a4:29:a9:da:a2:75:91:44:1f:90:b2:53:
23:1c:10:35:0b:31:53:a0:82:82:80:db:d9:d6:a4:f5:b9:1c:
79:95:b6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:36 2025 by rpki-client