Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
File: 8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json)
Hash identifier: +wajeLlIHxoiPhiQKZtvIxP9su6sJchRzdXMa2z3cyY=
Subject key identifier: 14:A8:73:E6:34:E4:DE:3E:E2:9B:0E:A0:F8:76:5D:59:A1:0C:16:C2
Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
Certificate issuer: /CN=f1359ff10c1564421e974573ace1ba62333b82a7
Certificate serial: 0194BD85B74C1EFB2A153F2FFA559A60B365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
Manifest number: 10C0
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: 1/n9ymEupby7VMX0tQF+gyT4e5yF1UZMsziB2b3t7/o=)
2: xcycZms0_ZHCVQVtErEWcPT6uzM.roa (hash: LGvEW3RDqUd1ArWiz/8ADiBje4yqqRUes0HgBtn3AOM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b7:4c:1e:fb:2a:15:3f:2f:fa:55:9a:60:b3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=14a873e634e4de3ee29b0ea0f8765d59a10c16c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e9:1e:06:a2:e7:70:23:19:d1:6c:86:f7:d5:
8f:70:64:84:02:86:b0:b2:e9:67:1a:42:74:df:7e:
9e:77:ec:1d:53:2b:9b:28:a9:31:e1:9a:9c:6b:0c:
30:15:18:55:ef:cc:74:a1:fe:2d:cf:1a:a8:ed:99:
a8:25:67:79:52:ac:7a:f5:f6:4a:bf:03:81:cd:0f:
24:02:c7:cc:af:f8:b6:6c:a4:dd:b2:db:4a:65:c3:
ea:01:77:f7:6b:68:75:62:23:59:c1:7c:df:c4:32:
56:5a:b8:f4:4a:08:b2:e4:77:31:1e:8c:11:c8:f8:
77:1c:4b:4d:a4:54:b9:0d:eb:91:a2:b1:b8:dd:2a:
f9:db:55:94:f0:98:e8:84:d5:57:70:6c:b3:a4:bb:
5a:ce:d2:ca:d9:d5:12:0f:d1:42:d7:0e:a0:50:70:
1d:d6:d6:40:de:9e:92:4d:79:c1:e1:99:66:c5:4c:
6b:3e:81:b4:a8:56:0d:07:57:7d:b4:58:5c:f7:ea:
c7:a8:b3:07:df:d0:62:ca:28:85:ba:32:0b:81:5a:
40:43:c8:c9:9c:5f:69:fb:d7:fe:0e:d4:67:af:d4:
c0:e4:4f:f6:fb:3b:8c:87:4f:86:26:4c:6f:fb:94:
c1:64:71:09:4f:a7:c3:60:37:89:94:56:cd:1b:30:
e3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A8:73:E6:34:E4:DE:3E:E2:9B:0E:A0:F8:76:5D:59:A1:0C:16:C2
X509v3 Authority Key Identifier:
keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:43:cd:32:9c:67:2e:4d:c8:ed:ad:13:b9:ed:87:ae:e9:d6:
85:73:1f:94:d2:1d:dd:4d:bd:c9:2f:99:9e:a3:27:45:e8:d7:
5d:27:ec:74:c8:8c:63:ce:d8:18:d4:61:e6:6c:8d:05:1a:3d:
d3:bf:be:a5:9f:0a:54:39:16:4b:2d:cf:20:41:cc:bb:a5:8a:
d6:9b:77:14:2b:47:bf:41:b1:d7:ab:99:26:be:47:1b:55:cf:
b9:bc:85:84:23:c1:42:87:23:00:c1:e9:78:13:e6:b2:9b:7d:
ab:b7:93:a7:7b:f3:cc:5a:aa:df:67:99:98:80:2e:a3:d6:23:
a6:b1:60:cc:4a:17:1d:33:0a:7c:0c:84:b7:95:f8:bc:b5:dd:
88:70:41:0c:2a:01:16:a3:e9:ac:7f:1f:85:05:97:1a:ba:38:
d1:76:81:04:bd:9a:a3:ca:25:05:a3:2b:2f:9b:37:e3:01:57:
40:16:79:44:e9:95:e5:ec:8c:c3:c1:4c:e9:9a:70:88:af:5f:
61:d0:52:8b:e9:8a:0d:66:59:19:d6:8e:75:e6:53:2c:5d:80:
d4:5f:d5:7d:a0:2d:38:1b:31:ef:b0:cb:97:50:f0:9d:d6:a3:
ff:44:5d:8f:a7:c4:d6:6e:de:62:12:04:bc:10:b6:01:1a:f8:
e0:18:47:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:36:15 2025 by rpki-client