Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
File: RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft (raw, json)
Hash identifier: exFQmBQH9y9/T3EiO6SPN19YMAmdbF94/gVqS55Z7X8=
Subject key identifier: 34:AF:8A:22:5B:5D:F6:E7:2A:89:35:EC:60:F7:5F:2A:4B:4B:58:97
Authority key identifier: 44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62
Certificate issuer: /CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62
Certificate serial: 0194BD85646E6BC42C94C634D95485F80745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:23 +0000
Manifest this update: Fri 31 Jan 2025 18:00:23 +0000
Manifest next update: Sat 01 Feb 2025 18:00:23 +0000
Files and hashes: 1: RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl (hash: FDMUUiAkxDkBOo8yOOKTSSkEjdq4Vv58VRK6MPunRMA=)
2: eIPu-oRSt6i1dIgnDCklFRUAlSQ.roa (hash: Sgde8KLLocp16u9bpO8WIWMRQrBpRylsfdhGYkOvJ1g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:64:6e:6b:c4:2c:94:c6:34:d9:54:85:f8:07:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62
Validity
Not Before: Jan 31 18:00:23 2025 GMT
Not After : Feb 1 18:00:23 2025 GMT
Subject: CN=34af8a225b5df6e72a8935ec60f75f2a4b4b5897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:a4:3f:24:ca:8c:2f:6d:f0:0e:63:30:cb:
98:82:9a:89:89:d8:e7:51:79:77:c0:96:74:97:b2:
5f:8d:e9:56:33:f5:6f:4c:62:02:7e:82:25:55:3f:
d3:f7:09:80:27:54:ab:86:2d:b4:a2:c9:4d:a4:a0:
08:55:f2:7e:92:78:e5:f5:4e:ec:54:79:02:bd:70:
36:cd:44:f5:a6:be:25:f5:19:47:97:d3:35:cd:e4:
02:02:52:09:a5:86:f6:ee:09:39:69:94:99:fe:a2:
73:28:3c:54:75:b6:95:85:a5:47:09:94:55:71:e6:
c9:4d:8f:90:2e:e5:04:d7:8a:47:45:1f:06:27:a4:
27:9e:bc:36:ea:c1:34:4d:19:39:60:71:d0:9b:4d:
bf:8f:46:98:ad:20:20:d0:ed:fa:04:32:1e:12:7a:
6f:5a:a0:57:e5:00:91:d8:00:92:6f:e1:87:2b:25:
02:6d:26:e9:1f:5b:68:2f:c6:86:30:a7:dc:a5:bf:
92:62:16:71:db:85:e0:02:2f:9a:82:b3:33:11:cf:
29:3a:95:f4:7a:00:aa:ac:e0:14:5a:1a:fe:3a:5e:
3a:f4:cb:99:b5:b9:4f:b5:32:7a:e0:d9:c8:c9:95:
f4:2d:0d:83:14:25:3e:b5:8c:a1:f9:a2:6f:a2:f5:
07:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AF:8A:22:5B:5D:F6:E7:2A:89:35:EC:60:F7:5F:2A:4B:4B:58:97
X509v3 Authority Key Identifier:
keyid:44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a5:d8:d1:dc:56:5c:71:3c:ad:13:a4:6b:b2:dd:a6:c7:44:
d0:9f:e6:4e:df:fd:7b:9f:8e:7f:62:b1:54:76:17:79:ed:33:
e0:7f:42:f9:f0:0f:4b:44:93:2d:d5:fd:2d:00:aa:c9:19:8e:
a3:99:b8:68:a7:e8:98:3b:b9:ef:40:3f:64:04:e3:a0:f8:aa:
b1:83:ef:a9:65:9d:e8:a2:a7:fe:63:0b:35:a6:e8:81:c9:9e:
27:99:63:dc:3a:e6:a9:91:70:b2:7c:a9:c5:ff:e0:be:69:4e:
9e:e1:f2:ad:8d:51:82:3e:16:84:2b:f0:8b:41:32:18:92:62:
05:c4:a9:0a:e1:20:a2:9d:e3:7f:68:11:f6:d1:c5:f4:15:2a:
fe:75:d6:b6:5b:3e:bf:f8:0a:0a:bc:73:af:a4:2f:fd:28:bc:
1e:81:5a:40:c2:6e:ba:31:30:e1:a6:a2:cf:54:5e:46:69:5b:
e0:bf:d7:83:4b:d5:76:0e:8b:b6:de:52:37:7f:88:89:6a:4c:
8d:50:43:71:7d:94:ff:61:67:0c:0e:5f:3a:76:69:c1:0c:82:
df:93:5a:3f:a1:ec:66:1b:0e:74:52:7a:a7:13:96:51:d3:38:
a3:72:5c:cd:df:01:e0:ee:1a:ed:68:f5:b4:7d:dd:3c:fd:df:
9a:e7:7f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:09:58 2025 by rpki-client