Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
File: 8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json)
Hash identifier: KxUGr8yhrUt8VNARjNaaUipzB1oClgRdf+fkF8jx2/Q=
Subject key identifier: FE:B9:4B:D3:1E:DF:97:75:F8:57:D5:2E:3D:0E:90:7B:F0:7B:67:BB
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 0194BC3C4A7A29C41F5CCD092DCACF275F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
Manifest number: 0515
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: AUVeAICXSN3bNwFLYt+ZwWHPsZj+4oBqoNlzeA+iSaQ=)
2: FwjOhi182_59p8dwQga5XgkbJ0s.roa (hash: Mc8kDGGDUHY1tIZcCKRSsVLGZ6kIEWbGczkswWitHog=)
3: tFuBusypscfP0op8t0fbvhVLTp0.roa (hash: pms99WF44PQkWw+lLwCckChT1mv5Etpr0MeX5NnHJWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4a:7a:29:c4:1f:5c:cd:09:2d:ca:cf:27:5f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=feb94bd31edf9775f857d52e3d0e907bf07b67bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:c4:8a:eb:9b:f3:88:50:a7:49:37:6a:9a:
c0:ef:90:11:48:77:b5:3e:88:72:01:88:51:14:33:
a6:c1:51:63:5e:5c:e8:c2:1e:31:c4:c2:27:d1:d0:
16:b9:61:72:64:1d:7f:63:fc:80:67:51:02:08:c5:
f1:92:13:30:14:d1:32:47:6b:05:4b:2e:f3:12:5b:
bc:ce:2e:9f:29:6a:89:a5:4b:5b:88:27:0c:38:b7:
f6:8b:6d:14:4b:74:b5:55:9e:b6:84:04:5c:6b:af:
13:cf:84:05:7f:59:6f:86:d3:aa:58:0d:f1:94:67:
2c:45:a3:89:36:80:d1:9d:76:32:68:a7:d6:cf:62:
c0:8f:07:87:d4:49:f2:fd:fc:21:f6:b0:bb:4a:1c:
ca:c3:48:96:78:5e:bc:67:f0:30:16:ef:3b:d2:27:
40:12:51:5c:03:b6:5b:4d:a9:85:cd:0c:df:b0:52:
3c:2d:ca:5d:bd:20:b2:8d:cd:6b:f0:c5:29:ba:b1:
58:65:eb:1f:08:42:7b:38:d2:5f:1f:df:9d:f6:37:
79:cb:7f:d6:91:e5:eb:2e:38:c1:c5:04:b7:4d:61:
02:a0:f0:9a:0b:62:6d:ea:cf:9e:3e:86:5b:00:82:
3b:09:59:1d:91:08:01:bb:1e:e4:df:42:4e:69:b5:
ea:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B9:4B:D3:1E:DF:97:75:F8:57:D5:2E:3D:0E:90:7B:F0:7B:67:BB
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ca:30:e7:41:5a:5d:6b:9c:6e:8a:dc:a6:5a:b4:65:b0:43:
03:19:ff:2d:aa:5b:39:ab:8b:45:9c:32:92:9f:5f:32:c3:a2:
56:9b:9e:8d:ac:b5:46:3e:1e:27:27:4b:0b:fc:8c:8e:36:9b:
90:b8:73:f0:8b:19:6f:d2:23:c2:90:18:2e:c7:d5:4a:dd:a7:
4c:41:92:41:f6:75:d6:65:06:66:c9:22:df:c9:1b:f9:f8:5e:
df:c2:df:47:b8:21:48:76:f4:a5:e7:d6:d0:fa:2a:94:ae:48:
94:5a:6b:06:66:98:9f:cd:6a:af:a4:c6:8b:9e:b4:9c:45:9b:
4e:dc:77:34:59:09:2c:ab:48:86:b4:fc:61:09:7f:c1:58:10:
3f:38:75:93:88:22:87:a5:1f:f3:d8:be:d2:eb:9e:0a:7c:1c:
f7:f7:ff:62:2d:30:08:e3:3f:e3:20:fb:1c:01:24:9f:78:3b:
3f:26:8c:96:64:20:27:b9:22:63:4d:06:75:d8:cc:20:be:94:
75:8f:2d:22:c1:82:d9:a8:86:30:00:8f:15:fd:98:a3:45:5e:
1b:f1:93:ba:fa:02:da:38:e8:ee:9b:1d:e0:bb:78:ed:21:1d:
54:4a:2f:7b:be:8c:16:c8:65:93:7d:5c:76:14:cf:94:14:ea:
9b:19:87:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:03:32 2025 by rpki-client