Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier: /U3kfeCKOXSXNfqvyA8dbeDyIhXVf1h1pXElj/+atE8=
Subject key identifier: 68:9E:CE:21:B3:5D:DF:CA:80:20:EF:8A:FE:48:96:95:3F:1E:9A:4C
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial: 0194BC04D227543655113C3BF50C5B473BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number: 0B21
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: e4pOab7mQhLgW3yrb52yaAKJb+avDg3rTRfOd6KOZ60=)
2: oQ6iu5R4Fpm0Yjxuw1qLXncI4SY.roa (hash: H/akZoh4Ps4IHkjkrhcdXyi2oc0+hPspNWAd57bgzLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d2:27:54:36:55:11:3c:3b:f5:0c:5b:47:3b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=689ece21b35ddfca8020ef8afe4896953f1e9a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:aa:2c:93:37:c2:20:ce:cf:8e:26:1c:cb:
60:44:1f:30:43:e8:87:80:c5:d4:b3:e3:3b:32:44:
5c:e4:c4:99:cb:a9:32:26:c9:9d:21:db:b0:d7:85:
9b:ec:0d:12:fb:af:cc:8f:bf:9a:41:f3:49:e5:4e:
5a:d3:75:aa:16:bc:41:09:ca:9e:90:f3:88:e7:ad:
16:ba:6c:de:4f:b2:f6:80:fa:d2:8e:3f:c2:d4:c1:
a2:fe:b4:d3:f5:bb:6a:7e:7a:78:59:05:88:3c:99:
d5:90:d6:b0:1f:1c:93:d3:c4:6e:02:3b:f0:bc:b5:
67:7b:a5:50:e3:72:22:02:de:4b:80:c0:08:b0:f3:
f6:c7:50:69:01:a2:e5:4d:fe:bf:8b:52:29:3b:a9:
a6:29:5d:d2:bc:a6:87:f7:56:14:30:12:4d:86:24:
97:ad:a4:9a:26:23:0e:ee:f1:72:08:a6:af:89:2b:
b3:95:41:2f:3b:22:f5:dc:41:7b:8c:ab:b9:63:0e:
9b:d8:12:0e:e3:cc:ac:f4:e3:db:bc:98:30:5a:63:
a9:76:e6:f6:bd:01:cd:a1:f6:fa:f8:2d:4b:e8:0a:
2f:ad:f6:ec:e5:13:bf:00:c2:61:5d:81:51:86:bf:
0e:e0:53:e7:38:3e:d2:83:80:91:4f:cf:54:77:a6:
a5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9E:CE:21:B3:5D:DF:CA:80:20:EF:8A:FE:48:96:95:3F:1E:9A:4C
X509v3 Authority Key Identifier:
keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4e:50:80:d6:71:df:f2:6b:cc:ef:8d:5e:dc:4d:db:4e:c8:
b9:1c:61:54:af:98:1e:d3:27:42:2e:90:82:27:aa:90:b9:93:
1e:5c:84:0e:37:c6:9b:53:f7:9b:5b:ca:d3:8e:52:f4:d9:de:
a4:83:71:1a:08:ac:0d:af:4b:ff:0a:9e:ac:8a:d4:e1:2e:eb:
97:b8:f7:b7:61:16:90:8f:70:71:c2:1b:61:db:ae:33:87:2e:
d2:87:3d:a1:86:e9:46:87:02:b6:f3:41:64:3f:b8:4f:7e:f7:
b0:07:33:34:3e:2c:ea:3b:8d:7a:97:4b:97:dc:a5:ef:50:90:
e4:c5:49:ce:74:6d:55:8c:31:95:20:0f:01:4c:63:cf:f4:7a:
e5:08:3a:9e:3d:cb:2d:1a:1b:d4:31:f4:60:dd:e5:40:dc:86:
b3:be:f7:16:71:a3:37:02:31:c7:3a:9d:2c:8b:2d:de:2a:3d:
27:3e:06:06:d6:7c:b0:a7:d2:5e:0e:b0:1d:75:78:e1:c2:85:
97:63:1a:bc:42:9d:68:ad:4e:01:49:35:16:2e:8a:7a:dd:f4:
be:27:8b:b3:11:40:61:b2:43:40:41:7d:18:92:1b:e5:6f:17:
c4:44:ff:95:4f:16:59:b2:99:08:ce:6c:02:81:75:c1:35:4e:
73:d9:b4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:27 2025 by rpki-client