Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
File: 8gI-dqaOpsn3DT6nLfhOU9whck8.mft (raw, json)
Hash identifier: Nrc5ru0qHBdSQGIdb7GQk9/DGMFALhvwC/fB2aOOijc=
Subject key identifier: 9E:3C:FD:7C:A1:B7:AE:9C:53:5E:3C:F5:2F:EC:B3:2A:72:68:19:3C
Authority key identifier: F2:02:3E:76:A6:8E:A6:C9:F7:0D:3E:A7:2D:F8:4E:53:DC:21:72:4F
Certificate issuer: /CN=f2023e76a68ea6c9f70d3ea72df84e53dc21724f
Certificate serial: 0194BBCE40EF70167438F2F31E39B4C8671C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
Manifest number: 0C7E
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: 8gI-dqaOpsn3DT6nLfhOU9whck8.crl (hash: rd6VmGX0XBa905Mj2TKAsydNvL+17VtST7aPAivbIpo=)
2: xmm2JL7TcI6ebRwScNNxmj8JWuo.roa (hash: fkFUQl1m0mbIlDS4H4YUitr8IcfvKPdCtORJm2ZIyMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:40:ef:70:16:74:38:f2:f3:1e:39:b4:c8:67:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2023e76a68ea6c9f70d3ea72df84e53dc21724f
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=9e3cfd7ca1b7ae9c535e3cf52fecb32a7268193c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b9:36:33:74:c1:15:f6:37:ff:39:c7:1b:58:
eb:79:7a:b7:14:f4:97:8d:9a:07:28:5e:93:5f:a5:
44:14:49:ca:15:ca:20:6b:22:a2:e8:43:bf:c1:34:
dc:f5:c1:d2:66:2a:0f:78:2b:86:c1:d8:e8:a2:fa:
e1:f8:dc:42:21:b9:3a:4b:1d:21:bc:ef:60:41:fc:
87:ed:20:ac:89:48:4f:39:1c:cb:e0:3c:1a:a2:2a:
59:ad:3f:83:27:83:0b:a7:18:9c:1f:84:d8:31:1d:
09:43:fb:e0:9a:49:e5:16:e0:f0:58:cf:7e:ab:75:
f8:18:91:88:16:3e:fa:41:01:9c:6c:7b:13:a7:59:
de:b7:4f:2c:3a:b8:83:2f:a2:55:09:ee:6f:2c:53:
d1:36:0b:cb:99:11:40:b7:71:59:de:95:63:1e:0b:
ee:1c:91:0f:77:93:df:cd:8e:a8:cc:bb:98:51:3d:
54:c3:42:be:79:60:6b:95:82:29:62:86:3e:1a:7c:
c6:43:b4:74:5d:ca:cc:59:fe:5b:a6:dd:54:f2:dc:
ea:8a:dc:c6:5f:c5:57:ce:84:bd:51:8b:18:b2:8d:
ed:c2:4d:eb:69:da:69:73:f3:57:ca:53:00:b3:05:
80:55:52:c2:59:5f:bd:be:dd:e1:76:1d:d7:ba:23:
17:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3C:FD:7C:A1:B7:AE:9C:53:5E:3C:F5:2F:EC:B3:2A:72:68:19:3C
X509v3 Authority Key Identifier:
keyid:F2:02:3E:76:A6:8E:A6:C9:F7:0D:3E:A7:2D:F8:4E:53:DC:21:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1f:5c:b0:fa:18:a8:9a:6d:77:3d:12:7b:c3:fd:3c:f2:8e:
c4:db:be:61:25:1e:8b:b4:71:bb:8a:26:b3:36:a3:f9:36:61:
81:0e:20:68:87:99:77:3e:04:1a:85:c3:06:0f:fb:1b:c6:99:
29:da:03:cd:86:23:a6:2d:b5:9f:ff:38:38:d9:e6:1c:16:bc:
40:aa:83:51:c2:d2:fb:e4:5d:fd:81:6a:73:03:1c:67:2a:4d:
d8:ea:e2:c4:a9:93:ae:35:ff:5a:a7:11:22:56:2d:22:6a:4c:
cc:ab:d0:e5:12:1a:0e:8b:52:3f:df:c3:17:5d:be:f9:a2:6b:
37:ce:6b:2d:bb:d0:74:94:0e:57:d1:e4:bd:67:0f:92:3e:e7:
24:86:2c:32:05:e5:bd:40:a0:46:b2:38:40:d9:e1:c5:7e:45:
22:6d:98:3c:ef:78:b9:64:64:d4:06:81:70:04:88:9e:5e:f4:
8c:b0:72:d1:12:c5:91:b8:cb:82:f8:ea:37:c0:e1:25:87:56:
dd:a3:f7:f7:0a:b9:e4:47:36:2b:67:d9:64:ed:f7:21:20:2b:
16:35:78:59:53:32:10:df:2d:4b:fc:06:11:bb:6a:98:17:c0:
4f:92:aa:62:ed:cd:ac:48:1c:b0:7f:8b:19:63:8f:d7:73:0c:
be:56:90:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:13:55 2025 by rpki-client