Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
File: 8lxlPGBUhmBCpwb3F7JLIf35gag.mft (raw, json)
Hash identifier: H+KCP2wzD+pFseYjRzhSXsAQkSCc1Vftxtm9GAAGUUs=
Subject key identifier: A4:C7:F5:64:97:D7:50:D3:F4:23:33:51:C4:37:07:32:DF:FA:4D:CA
Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8
Certificate serial: 0194BCA9CC83E5759FEC5AD1AE91447E7AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
Manifest number: 042B
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: 8lxlPGBUhmBCpwb3F7JLIf35gag.crl (hash: Z/x0uveXIsjgAAco752I3Kg+U+7Pj4AOB17u2CxY+Ac=)
2: SAkp88S54aJN6C-GCtNeqgpkjzs.roa (hash: xdHHAbJE3WiWjdXV3cBquprUR130i7lr4362iYiFT8M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cc:83:e5:75:9f:ec:5a:d1:ae:91:44:7e:7a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=a4c7f56497d750d3f4233351c4370732dffa4dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5f:8a:81:b2:1c:ec:e8:49:df:5e:b8:6a:b1:
be:d5:b2:fd:42:16:0d:2d:84:94:de:4a:3a:9e:ac:
7f:06:62:e8:72:1c:30:e8:be:2e:99:ae:27:a8:5b:
77:f1:c1:1a:44:cf:43:1b:44:9f:02:12:d0:85:8f:
72:2e:b7:80:82:4e:f4:a6:9e:3d:c5:57:ff:94:c1:
9b:8d:f8:2e:17:72:52:25:3c:20:55:04:28:a9:69:
55:c3:fd:70:05:ad:d7:44:95:a1:e3:b6:e8:af:96:
b4:ac:cb:9e:e2:28:65:69:1a:4f:ff:af:94:82:5b:
ec:1f:ae:b0:2b:11:5b:e8:47:d0:8e:bb:65:37:ce:
d5:7a:32:1a:b2:80:6f:7a:2b:02:77:67:6a:2e:db:
41:7f:4d:35:7d:48:78:62:0a:b1:1d:17:50:b2:5c:
40:28:0e:df:23:29:bd:04:18:26:db:92:a2:89:ce:
fa:8b:57:ce:42:f7:e9:24:cb:ba:fe:da:df:c9:48:
41:c7:d5:af:f4:c3:98:21:92:84:dd:e5:83:60:8a:
09:f7:6e:6d:96:8f:7c:5f:58:60:ae:97:bf:69:fc:
c9:d6:da:8b:93:75:b5:de:e3:b8:24:49:9d:0f:59:
30:34:63:5c:b5:9f:09:48:62:d1:cd:c1:53:a7:e6:
8d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C7:F5:64:97:D7:50:D3:F4:23:33:51:C4:37:07:32:DF:FA:4D:CA
X509v3 Authority Key Identifier:
keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:45:34:be:a3:61:cd:15:73:d0:fa:27:79:41:e4:6a:55:a6:
9e:2c:04:ee:c4:1e:a9:4d:cf:48:47:da:9f:55:bf:dc:08:76:
24:d6:99:92:57:f3:39:c6:55:b0:e6:49:bd:3d:70:c3:95:1e:
f5:ba:bc:20:b4:ff:10:a3:80:73:bb:0f:b0:d7:6c:b3:dc:a3:
eb:59:2e:72:8f:03:92:c5:73:e9:9a:2a:0b:69:69:b1:bd:c1:
ec:76:1d:3b:e9:a9:d1:43:be:58:b6:1a:23:63:b1:30:d0:01:
47:99:dd:52:d4:0e:9a:15:b1:de:6b:19:d6:2b:21:d6:1a:67:
76:1d:6e:42:1d:09:c3:ba:0a:55:f3:40:24:b4:3f:ae:2f:78:
0a:a4:3a:0b:30:da:ad:c1:db:93:7d:ee:d4:ab:99:d7:74:49:
2d:f4:51:7f:5d:83:51:d9:96:85:fb:e9:b8:3c:43:72:09:62:
65:fb:23:5e:00:3c:d7:8a:9a:02:9d:01:c9:e1:bc:c2:33:81:
e9:0e:38:57:38:1d:a1:05:4b:75:91:67:52:68:fd:51:67:d9:
62:e8:2c:e0:e5:3a:79:bf:f4:f4:e6:64:25:34:cc:c1:9d:ef:
a1:66:85:f1:f4:a4:ce:67:25:6c:65:a7:04:f4:65:4c:3c:ba:
94:c6:fa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:41 2025 by rpki-client