Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
File: 8zk0PMbVHduONjgpmhu0lfRYCSE.mft (raw, json)
Hash identifier: ou2CAIIC7EJUAEyu3xCpvphYCI6Zj7ZFr6xl6lID8o8=
Subject key identifier: 39:35:5D:00:AB:D1:EF:F7:E2:CB:CB:B0:00:BE:21:0A:69:70:AA:C5
Authority key identifier: F3:39:34:3C:C6:D5:1D:DB:8E:36:38:29:9A:1B:B4:95:F4:58:09:21
Certificate issuer: /CN=f339343cc6d51ddb8e3638299a1bb495f4580921
Certificate serial: 0194BC0523BEB06A33EA714E87CE355DB0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: 8zk0PMbVHduONjgpmhu0lfRYCSE.crl (hash: F9JN6PagrFnOXHUsZFwXh8C1n5SyM08BDZAIL7eaPX0=)
2: foJ4QycSZoLeX5HBGEgGb3_VDbc.roa (hash: 6GL5/gRhjE26Cz785WY71i1EcVPF5j3FDcpppmWBIT8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:23:be:b0:6a:33:ea:71:4e:87:ce:35:5d:b0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f339343cc6d51ddb8e3638299a1bb495f4580921
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=39355d00abd1eff7e2cbcbb000be210a6970aac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:55:14:d9:f3:f3:97:98:0e:9f:4b:c0:8a:
e5:19:d1:c0:71:0b:c2:c7:b2:00:97:ae:c2:9d:58:
dc:db:e9:14:a7:10:6d:a7:52:f4:13:50:b2:89:4c:
9b:76:5a:de:50:bb:4d:18:2c:f3:db:07:70:b0:97:
50:4e:f1:ba:5d:96:75:ab:d0:1b:40:d0:ab:e1:58:
87:33:75:7c:59:17:b7:0e:4d:0f:40:5b:49:a6:ce:
cf:a4:c9:51:f9:3d:f3:1a:95:86:a7:7d:78:69:0f:
02:fd:f9:56:a3:ba:ce:7e:f8:a1:f8:ab:d7:97:a3:
6c:fa:0e:69:ba:0d:4f:95:d0:93:d7:a0:6f:69:77:
cf:d7:70:c4:bb:59:95:26:e4:2e:82:7a:cf:e9:ff:
08:46:5d:cd:79:1f:db:00:b5:2b:8c:c7:92:71:cb:
4a:ae:ba:d0:ea:5c:94:56:1e:f8:64:0a:cd:1c:a0:
83:b8:31:a0:4b:da:87:00:6f:62:7b:29:16:37:bd:
d1:4d:e8:eb:a0:e6:0b:9d:df:96:47:ad:c1:dd:24:
c7:ee:46:80:e6:a8:86:69:41:3f:b0:8b:58:f7:78:
2a:d0:19:82:2b:c4:0d:c4:10:73:20:60:40:66:f3:
c3:94:46:58:2f:5f:46:66:23:60:ca:06:10:72:48:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:35:5D:00:AB:D1:EF:F7:E2:CB:CB:B0:00:BE:21:0A:69:70:AA:C5
X509v3 Authority Key Identifier:
keyid:F3:39:34:3C:C6:D5:1D:DB:8E:36:38:29:9A:1B:B4:95:F4:58:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:86:0e:34:06:85:d5:f3:b9:1d:4e:fa:b7:41:53:9e:a0:c2:
b6:da:b7:16:20:85:97:61:13:b0:fb:e6:6d:c1:55:a4:e5:a3:
03:67:ff:86:13:2c:c0:58:53:d6:c0:76:2d:dc:d6:98:9d:b9:
9a:a6:88:79:74:80:ed:40:e8:a7:ea:77:e9:a7:89:63:42:06:
22:b7:90:58:a9:11:26:54:f2:cc:5d:0e:76:d4:9a:b5:a3:67:
ec:b5:05:9b:86:3e:6f:c0:19:5e:4d:d9:57:df:a4:52:f9:3b:
83:23:6a:03:94:2a:17:58:34:5b:cd:30:2f:a8:73:16:b8:1f:
74:b7:af:a9:80:88:65:3f:f6:63:af:cc:e1:40:b9:24:91:02:
f2:b5:42:15:5d:cb:42:10:dd:a9:5d:67:27:f1:fd:f3:c1:66:
02:ff:06:15:7b:bb:93:a3:63:db:24:64:2a:e7:b9:ff:9c:47:
d1:9a:df:d1:fd:1b:d3:d5:26:b0:0f:a4:7d:17:58:e9:83:5a:
d3:e1:71:2d:19:b3:db:2f:46:94:35:d4:32:22:16:55:a5:7b:
0f:05:b4:af:c2:aa:c4:bd:af:eb:1b:43:50:17:33:c0:d3:97:
2e:ad:7e:49:32:ee:b6:20:1c:dd:3a:11:2e:53:74:ad:f8:b9:
da:9f:da:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:57 2025 by rpki-client