Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft
File: 8ihddApeiSzQvm8iT00_Tp1t0cQ.mft (raw, json)
Hash identifier: d0YJZj7kYUQIqQ7acCct9LdC8BuX0Udio6W/+Z0UN+w=
Subject key identifier: FE:47:A6:D2:65:9E:1F:89:E2:32:FC:7B:63:0F:48:70:29:72:13:06
Authority key identifier: F2:28:5D:74:0A:5E:89:2C:D0:BE:6F:22:4F:4D:3F:4E:9D:6D:D1:C4
Certificate issuer: /CN=f2285d740a5e892cd0be6f224f4d3f4e9d6dd1c4
Certificate serial: 0194BBCE64C9BE55343D2A2B4E590AEF6411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ihddApeiSzQvm8iT00_Tp1t0cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft
Manifest number: 03E2
Signing time: Fri 31 Jan 2025 10:00:53 +0000
Manifest this update: Fri 31 Jan 2025 10:00:53 +0000
Manifest next update: Sat 01 Feb 2025 10:00:53 +0000
Files and hashes: 1: 8ihddApeiSzQvm8iT00_Tp1t0cQ.crl (hash: 67n5VZvq0FprR/8J6KGMCnYc0tKKasYByVpNta834ZM=)
2: MHj3Uc-p1kz3nu3McqkQnyvmX5k.roa (hash: jZ2LYvOeYYqufGXlqvtkULLXS9QyefT3nRWf2hFGUNs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:64:c9:be:55:34:3d:2a:2b:4e:59:0a:ef:64:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2285d740a5e892cd0be6f224f4d3f4e9d6dd1c4
Validity
Not Before: Jan 31 10:00:53 2025 GMT
Not After : Feb 1 10:00:53 2025 GMT
Subject: CN=fe47a6d2659e1f89e232fc7b630f487029721306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:2f:3f:c3:66:3c:d7:8c:42:16:d3:76:f8:
f5:30:e2:c3:9d:59:f0:f2:79:ca:66:99:e3:20:47:
2e:23:fa:f9:67:a1:46:70:c7:1e:04:1c:8a:08:ac:
3a:d8:6f:6a:2e:0d:70:db:60:35:d4:4c:14:c6:1e:
59:46:e7:f1:6b:62:b6:90:de:30:13:29:a8:32:e0:
77:15:1c:d0:6d:7c:7b:ac:43:7a:3e:96:52:d2:25:
d5:14:9f:3a:5c:0c:b5:e1:6c:a0:8c:72:75:25:3c:
4e:22:ca:a3:19:c0:55:a8:a2:9f:f8:bb:a0:34:03:
ec:43:a5:95:29:64:42:c4:a8:93:96:a8:a7:50:ed:
fd:cd:fc:78:5d:b2:0e:ce:68:74:1b:c4:2f:3b:13:
4a:cc:5b:62:d0:71:77:b0:6e:3c:91:33:00:6c:0e:
3a:1e:ed:1a:38:dc:53:10:3e:0e:1d:78:c3:1a:bc:
25:1a:b8:ae:e2:54:80:79:02:29:80:8b:52:29:39:
f2:86:6b:96:d8:aa:19:59:3f:af:a7:e5:10:85:87:
93:2e:de:e5:4b:8a:52:d1:d2:e7:50:65:e4:ff:01:
fb:5b:d0:bc:0b:d3:5b:fe:89:1a:ef:a5:14:03:27:
3f:3f:22:08:62:f4:ae:13:af:31:b9:95:62:fa:e8:
52:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:47:A6:D2:65:9E:1F:89:E2:32:FC:7B:63:0F:48:70:29:72:13:06
X509v3 Authority Key Identifier:
keyid:F2:28:5D:74:0A:5E:89:2C:D0:BE:6F:22:4F:4D:3F:4E:9D:6D:D1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ihddApeiSzQvm8iT00_Tp1t0cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:93:8a:a9:e0:87:8e:15:d9:be:f0:42:10:10:da:e9:85:92:
c7:17:f9:fd:ea:01:47:6c:e7:06:cd:3f:88:32:cb:40:57:24:
64:18:19:1e:04:b6:4d:2b:47:f0:9c:8d:e7:cf:28:ab:bf:62:
31:47:29:ee:98:88:70:3f:e2:24:88:c8:b7:c4:63:cf:c3:97:
8b:9b:b7:32:7f:29:d2:43:14:7b:54:9d:d1:e8:2a:e1:25:85:
85:bd:a8:0a:1d:0f:7b:8c:d7:58:ff:5a:04:70:20:a5:95:59:
bb:e6:37:de:ad:60:2f:8b:07:bd:fe:96:00:46:6b:b7:ea:46:
d4:70:b9:d7:5c:52:f3:0e:38:ca:78:b6:43:e4:e8:13:14:f4:
0d:f3:dc:67:ac:20:86:1b:6b:37:89:68:68:09:b6:9a:8f:c6:
19:1d:be:95:bb:2d:4b:b5:be:0f:ef:d5:4f:f9:2d:82:1b:bf:
95:20:1c:c7:23:e5:5e:95:52:32:f7:9b:6a:4b:e5:0f:7d:18:
f8:73:e7:3a:0f:24:b2:92:bf:82:76:07:e4:74:53:4f:8e:93:
36:a7:a5:3d:96:88:e0:04:f4:d9:41:ab:35:1b:3d:bf:7d:b3:
84:90:5d:1e:20:e7:4f:a9:c6:fb:30:7c:b4:90:25:81:f2:c4:
99:7f:9e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:36 2025 by rpki-client