Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
File: M8Ww18CpzSS3PNy5LIdG6FpKW48.mft (raw, json)
Hash identifier: V/DQmAxYKm6ulStw+dOL6OviUpm+c6OcxbyYQYC1bUs=
Subject key identifier: 42:57:EC:74:5B:5F:BA:57:81:2E:C0:87:AA:77:68:51:A7:B9:3A:61
Authority key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
Certificate issuer: /CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Certificate serial: 0194BBCE0625F0EFA697289D973DA0493AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
Manifest number: 084F
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: G9IMCDRzOQuPbahdvenWDMel-ec.roa (hash: KIE/h3OnsvTFha1HUMyujy3OIfah+sKBRWCgbRO+mg8=)
2: M8Ww18CpzSS3PNy5LIdG6FpKW48.crl (hash: PHQd+AYSj1sHW+PjFEwYOrnpth92Dkrg66wJt6IAhKg=)
3: kaCKh69UCH1e8YxXvfDRSIMinp4.roa (hash: 1RbgYWWGOgFXxNNpggiv1pAr13/5f1ITVmQGcqYLD8s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:06:25:f0:ef:a6:97:28:9d:97:3d:a0:49:3a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=4257ec745b5fba57812ec087aa776851a7b93a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:58:e9:f7:b8:80:62:42:94:7b:e8:03:1f:e5:
cb:78:b0:59:4c:e8:df:03:18:e0:f5:6c:63:a5:92:
11:cd:bc:9b:dd:7c:a4:cc:e5:14:d4:f0:8d:cf:ab:
d0:0b:c5:b0:3e:c3:a5:da:d8:d6:04:dd:3b:ca:97:
6f:88:aa:50:4a:e4:31:df:49:c3:2d:b2:7f:25:85:
ca:e4:7d:50:65:66:ea:b0:a6:54:c8:02:a6:6d:ef:
e1:cf:7a:68:7a:39:56:e7:86:55:72:e4:14:0b:ec:
91:a5:0a:6a:ba:69:43:50:0e:5f:f8:70:1a:0d:14:
11:28:7e:5d:8f:b5:0b:ee:e9:54:d5:4f:ce:58:3a:
bf:47:bc:c0:3b:aa:d0:72:c1:2a:57:59:55:3f:0f:
c1:fa:12:8c:c0:d8:04:eb:1f:a1:71:2b:12:bf:7c:
db:b6:70:e8:36:24:a2:69:5c:f1:f5:ea:7c:d1:fc:
15:f4:33:bc:c5:d0:7a:2f:c9:96:f6:af:74:20:cd:
be:b7:e1:be:ff:95:5b:b9:69:b3:55:66:b9:05:bc:
97:d9:4f:b2:a9:d7:fa:e1:87:a0:4b:ca:9f:0b:5c:
ca:df:bc:1e:99:58:b9:b4:77:c9:06:1d:57:1d:59:
49:12:7b:1d:71:68:94:9a:8f:60:b0:bb:77:e8:1d:
67:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:57:EC:74:5B:5F:BA:57:81:2E:C0:87:AA:77:68:51:A7:B9:3A:61
X509v3 Authority Key Identifier:
keyid:33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d8:18:42:aa:dc:a6:c0:8b:fe:5f:29:d4:f1:3e:ac:23:17:
04:d4:f4:4d:50:91:15:d0:4f:7f:eb:4e:99:df:29:0e:7f:6e:
9a:e0:62:90:e2:d4:41:40:f7:c7:db:88:09:b1:a1:6c:bc:8b:
ce:2d:62:2e:ae:f0:f6:9e:c9:05:53:3b:cd:75:8d:74:c5:a1:
68:dd:5c:5a:ab:c0:dc:c2:40:b1:34:11:4e:95:44:d4:2b:42:
4f:1c:21:c3:80:5c:b7:74:c2:7e:2f:63:36:ce:ec:56:8f:70:
6d:73:d8:74:14:36:13:9e:00:62:1a:0c:eb:9d:95:cc:f8:72:
60:a8:75:64:be:1c:b7:27:06:92:70:c1:d6:3f:a9:08:4d:57:
18:0b:23:11:3e:0d:d9:d5:eb:ea:19:a9:32:76:e8:5d:0a:29:
9a:b9:2d:1d:f3:eb:cd:b1:39:0e:45:16:d8:c4:67:b7:3a:60:
88:80:b5:f8:c3:c1:40:89:e3:a1:fe:44:16:98:10:64:11:48:
3c:3e:4c:4e:21:f4:f6:47:22:b7:91:cc:11:34:5f:0b:c0:93:
6d:64:73:aa:41:5a:9f:1f:23:73:f2:85:c8:b7:d2:e4:58:3d:
ed:3d:70:ab:ba:df:c8:b9:91:0c:1e:42:bc:8b:93:be:76:a8:
1b:f7:d2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:19 2025 by rpki-client