Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
File: 8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json)
Hash identifier: Drj8/wQZ5t4BfnEInYclt+J9uqyauYaBOpN/fhWgxFM=
Subject key identifier: E9:EB:F5:5E:A0:A5:85:70:38:A8:AA:F8:3E:EC:75:63:0B:A9:9B:2E
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Certificate issuer: /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial: 0194BD17CFB1D6A8ACB329077770CD3ECBF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:41 +0000
Manifest this update: Fri 31 Jan 2025 16:00:41 +0000
Manifest next update: Sat 01 Feb 2025 16:00:41 +0000
Files and hashes: 1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: QhcygiI9Z0X4oHHo5WUXWflvfVUIo4odT/gamGLTIr0=)
2: jfUqkf_BnbSeyvKiFitEY3b5cmY.roa (hash: MkQ1kYsqlZvezBQ/uBC4v1whC4HDYOAxUmlDZ4BgXWs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cf:b1:d6:a8:ac:b3:29:07:77:70:cd:3e:cb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Validity
Not Before: Jan 31 16:00:41 2025 GMT
Not After : Feb 1 16:00:41 2025 GMT
Subject: CN=e9ebf55ea0a5857038a8aaf83eec75630ba99b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:2e:65:de:1f:13:53:98:82:9a:01:cf:85:
e5:e6:e9:e3:86:03:67:dd:23:8c:3b:de:33:de:2c:
9a:88:d0:47:bc:4f:83:f3:ae:8e:3e:1d:6d:f9:f6:
58:82:19:db:50:26:a2:b7:8a:2e:a0:d7:79:27:89:
df:9c:41:81:96:a8:c2:50:d8:46:ee:be:ca:7e:6c:
1c:8d:4c:86:bf:17:e9:aa:5f:2e:00:e7:56:00:58:
4e:27:61:41:ad:95:da:11:57:0f:54:b0:e4:ac:98:
3e:d9:e8:4a:21:ea:cf:84:a8:2b:1c:06:e6:9e:bd:
74:47:4c:d6:87:0b:99:30:d0:e1:33:26:2d:d3:34:
d1:23:cb:76:e6:94:fa:30:0d:d9:5f:15:9b:04:3a:
6e:e6:bd:b1:be:22:6e:1f:28:5f:35:55:cf:2b:c7:
f9:05:eb:68:96:ed:ae:6a:a6:c2:91:d9:ea:f3:60:
f1:71:51:78:4c:c4:79:0e:58:d2:3b:94:2c:31:1d:
0f:6e:81:52:55:ec:29:3e:c4:25:7e:74:7f:26:97:
86:e7:0e:72:de:e2:ce:88:a0:f9:63:83:0f:77:2e:
53:ca:d6:50:7c:f4:95:fb:0e:df:cd:6d:6f:70:b9:
ae:6c:01:bc:6c:1e:7b:ba:86:27:7e:56:4c:5d:80:
85:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EB:F5:5E:A0:A5:85:70:38:A8:AA:F8:3E:EC:75:63:0B:A9:9B:2E
X509v3 Authority Key Identifier:
keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7f:12:b3:81:a4:b6:8d:58:21:9e:95:e4:c7:68:a4:17:d4:
2e:05:eb:14:42:96:42:6a:b7:ab:84:62:6c:96:05:ac:b1:38:
bc:24:2a:46:67:0f:6d:1c:01:17:e5:ea:49:39:cd:5f:ac:07:
86:45:fc:85:c8:e7:31:1b:10:40:72:27:1b:2c:c8:87:49:ca:
ae:47:ee:80:b1:c1:75:50:49:aa:b3:85:d2:ca:2b:64:99:ad:
44:ea:7c:69:2c:29:83:b2:85:6f:5c:a5:51:e9:e2:44:db:c2:
59:bc:3e:41:dd:91:cb:b4:37:c9:ce:6b:2d:30:2a:49:d3:41:
98:e4:25:a8:4a:ad:07:2e:cb:96:df:60:00:80:29:9c:d2:65:
01:42:19:f8:7c:cf:55:9b:3e:8d:6f:cb:0c:2b:b6:9f:cb:af:
9e:39:8e:97:4b:12:3f:14:28:26:a9:28:03:1d:45:65:b0:e2:
9c:2e:85:03:32:9c:3b:d8:6f:52:22:e2:8a:b0:3b:59:4d:fa:
7f:20:99:0a:05:b7:ea:9d:b7:26:c9:91:dd:23:b2:b3:e3:08:
ec:4e:d4:34:40:f4:0f:18:d8:41:31:b9:c6:f3:af:22:52:77:
87:00:ea:eb:09:29:51:d9:3b:51:a2:3d:05:ae:3e:b3:b5:f3:
6e:08:b9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:17 2025 by rpki-client