Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
File: 8HH00RnQt0-2bjen74eNRJ1U3cg.mft (raw, json)
Hash identifier: /eUqinQyXUXzesTScvY1Kyp67/OTprpX9b7aeWtb5xg=
Subject key identifier: 80:FB:A4:32:BC:92:DA:0A:F8:D7:5C:52:89:16:DB:6C:FF:BE:E1:9C
Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
Certificate issuer: /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Certificate serial: 0194BD857A41081B2614E9A16C76D97D4A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: 8HH00RnQt0-2bjen74eNRJ1U3cg.crl (hash: te2HAebVae/f/epY30s73VXXpPEB4MWQn0o1+Q0NSDs=)
2: uzaT_8pYRSOjnRLn-VDCRDMHjkw.roa (hash: BTL6zzsEp/zMhbPEtqOYQnpjz6sJkx1lWw25F56hHZw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7a:41:08:1b:26:14:e9:a1:6c:76:d9:7d:4a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=80fba432bc92da0af8d75c528916db6cffbee19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:c1:8b:39:d0:b7:91:03:e2:9c:fa:45:78:
7d:c2:61:f1:aa:e3:67:96:df:95:bb:54:31:bd:77:
85:9b:ec:3e:e6:6c:45:8e:0b:ec:03:22:93:20:91:
9f:f4:76:6b:e3:ff:93:f0:75:b4:78:12:5b:b6:bd:
d4:39:ea:6b:43:04:b4:93:78:8b:47:88:88:48:80:
d2:71:f9:96:a5:e6:5b:f9:b8:62:a7:da:26:b6:57:
d3:47:e7:87:38:68:da:2f:cd:69:e0:dc:89:3a:30:
88:bd:23:5a:4c:c9:3f:8e:2e:f3:69:5a:c5:69:83:
b6:20:f9:14:c4:da:bd:83:c9:4d:8b:3c:65:a8:85:
89:c2:e3:b3:6f:9c:d6:3e:a3:52:32:dc:83:98:cc:
a3:62:ec:d7:a2:4b:3a:dd:ed:b7:a3:df:99:20:33:
73:6c:d2:4e:04:be:1d:8c:a8:d7:73:99:53:87:5b:
f9:c5:fc:1e:6f:29:3b:48:6e:47:0a:b3:16:08:b6:
f1:3b:42:b3:6f:4c:0d:37:bc:4a:bd:f2:b5:af:00:
f5:7f:eb:a5:8a:51:d1:ad:8c:3c:2a:10:5e:96:ae:
03:19:ae:9b:d2:ea:5c:ee:32:38:f0:85:ad:f0:7b:
ed:54:b0:4f:c7:0f:9f:a1:28:0a:84:05:13:8c:a0:
2e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FB:A4:32:BC:92:DA:0A:F8:D7:5C:52:89:16:DB:6C:FF:BE:E1:9C
X509v3 Authority Key Identifier:
keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:49:83:74:c4:f7:c8:02:9a:b3:f0:fd:11:0e:61:63:ad:22:
9b:1e:fe:0b:6e:28:2b:83:c9:f2:fb:f9:5d:05:a8:70:ac:b2:
ab:6f:dc:5b:d4:97:a7:ba:db:3f:ea:b1:68:bd:5e:32:4f:09:
89:5d:df:a1:43:48:5b:51:07:6e:11:b8:bd:8a:7a:41:c0:b4:
61:4a:3e:63:c5:b5:c0:9a:3d:c8:18:36:4a:b1:c6:1d:26:89:
dd:6e:04:55:c0:d9:42:2c:7a:26:99:1e:17:58:4b:90:55:b9:
e8:01:82:be:0f:c5:9c:6c:0f:67:21:c7:fd:3a:5d:52:c0:11:
98:22:78:d2:54:fc:1b:7a:72:78:19:cd:73:7d:51:8a:62:e0:
4f:9f:c4:76:1c:6b:f4:2e:dd:cc:d4:48:c0:60:c8:fd:2e:be:
dc:af:f6:3f:62:3d:bd:dc:36:72:b9:71:6d:c8:06:2e:fa:81:
ff:4d:bd:66:2a:dc:87:f1:9f:d2:31:4c:0a:78:e7:27:66:18:
ee:24:86:17:12:aa:d1:81:3f:51:ca:e2:86:4a:37:57:73:31:
ff:70:3b:4d:d6:a3:4f:03:30:35:9e:81:9b:de:7a:f0:e0:0d:
6a:99:94:f1:b9:22:e6:33:43:19:5e:22:12:a2:e8:60:b2:46:
91:14:f0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:18:34 2025 by rpki-client