Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
File: 8WaLESRDpJbpZlHVgrbMZBP7XHY.mft (raw, json)
Hash identifier: FYmYl3dfhZ+ihE3h2LP8Zt5h249aluQX6RW0MLwRc1g=
Subject key identifier: CB:C1:51:5F:75:6E:57:7E:FA:27:0B:CE:C1:F1:DF:91:16:49:6F:A8
Authority key identifier: F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
Certificate issuer: /CN=f1668b112443a496e96651d582b6cc6413fb5c76
Certificate serial: 0194BC72B1A7EBD06E12F7B3C6C105F44C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
Manifest number: 040D
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: 8WaLESRDpJbpZlHVgrbMZBP7XHY.crl (hash: IHZGnP6ZJRRA9r2Mmmp+h8kJPvmegCU9RjLM8YVrcs0=)
2: zTop8kv04M-CPRutWJMmw5M7s5M.roa (hash: h5ZlzzODOy4Yt5G5OttRKd2ppDnce+EkREvBpaIbOxU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b1:a7:eb:d0:6e:12:f7:b3:c6:c1:05:f4:4c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1668b112443a496e96651d582b6cc6413fb5c76
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=cbc1515f756e577efa270bcec1f1df9116496fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:0d:81:7c:3a:8e:e6:4c:69:cb:be:3a:6d:
14:15:91:58:4f:46:c9:95:16:00:c5:07:c3:71:e2:
f6:23:e7:18:3f:54:2a:59:aa:22:47:b9:00:ed:b1:
7e:a2:c8:f4:98:49:dc:43:4f:2e:60:24:3f:01:4a:
57:2b:86:cb:35:78:f0:54:24:f5:8f:0b:3b:1e:7c:
50:57:2f:af:17:8a:4b:e9:a9:ff:6e:fc:48:34:5e:
ea:71:24:c3:3d:bb:17:82:5a:00:b7:f4:e1:f9:b4:
24:b5:8d:49:81:50:76:ba:1e:16:af:8f:22:89:54:
7b:d0:b9:ed:15:6a:0d:0d:78:07:e1:83:29:0c:25:
6f:d3:d4:34:77:4f:eb:31:14:2b:4b:90:b0:9d:60:
21:b0:0f:2a:8a:5b:a0:7d:4f:fe:8b:de:d9:7f:12:
ed:95:35:a5:97:e7:79:5f:69:72:b5:24:90:34:9a:
c5:ba:bb:0a:5a:0f:92:5b:96:15:58:91:2e:c2:e2:
24:4e:63:c5:70:15:74:74:70:f9:37:b6:cb:b8:38:
03:34:cb:b7:c5:ef:97:96:58:b1:f9:50:1f:f1:6f:
36:be:39:68:16:10:17:98:ae:f4:bb:37:97:2b:7b:
a8:d3:13:27:6c:57:39:07:60:eb:45:8b:da:2b:27:
ab:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C1:51:5F:75:6E:57:7E:FA:27:0B:CE:C1:F1:DF:91:16:49:6F:A8
X509v3 Authority Key Identifier:
keyid:F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9e:2e:fb:05:bf:f2:28:32:b7:e9:75:2a:31:22:4b:4a:5a:
49:b5:d5:07:a4:2c:c0:b4:24:b5:2e:41:00:65:88:95:34:50:
2c:92:5d:09:f4:e5:77:33:2b:ab:45:98:7d:2c:c5:c8:a7:1e:
5f:53:15:0d:f2:9f:73:da:91:b0:c6:89:43:56:b0:0a:2e:f5:
39:3e:60:7a:cc:d3:63:b6:c7:ee:74:c3:f5:61:69:aa:ea:ba:
a2:9c:09:58:88:04:a9:d3:74:33:6a:a9:5c:e8:9c:c7:22:b3:
ff:95:5f:20:9e:fe:2c:89:45:a9:e0:3c:b1:ad:e4:1b:0d:0d:
40:9a:e9:30:72:93:7b:37:ff:b3:9f:c8:35:17:87:88:3d:35:
63:a9:28:5e:8f:dd:78:4e:b8:01:9c:59:20:05:0d:19:f1:07:
8b:11:61:b5:c9:79:9f:ee:4e:bb:70:1a:5c:73:d1:97:ec:ef:
f7:0e:44:25:bc:57:be:84:85:85:cd:7c:ea:50:35:e2:47:50:
60:eb:09:1c:c8:3b:7b:d0:99:d1:ba:e1:7f:09:6e:ec:6c:57:
19:37:71:5c:69:34:89:62:0c:1d:45:e5:7b:fd:0f:8d:64:8f:
3f:93:f5:45:b1:e7:f8:2f:39:ac:a9:39:b5:be:b8:01:da:ee:
af:35:ea:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:08 2025 by rpki-client