Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft
File: 8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft (raw, json)
Hash identifier: 5k7zbiAI/B7SvCe2+FM4wk4AK+jwnUmGelNpsjPo0ic=
Subject key identifier: 13:86:8E:45:43:B9:53:D8:8B:C6:C4:40:67:43:6A:6D:F1:65:B2:C6
Authority key identifier: F0:7B:E9:D1:18:97:71:B7:33:7E:FC:1C:ED:2C:82:5D:C2:47:2A:56
Certificate issuer: /CN=f07be9d1189771b7337efc1ced2c825dc2472a56
Certificate serial: 0194BD4E8F0A183AA81A1ADB2F7AED9111FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft
Manifest number: 0153
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: 8Hvp0RiXcbczfvwc7SyCXcJHKlY.crl (hash: HUaLt9N5pcdjDObQRzSUbqtoB67cxoP11MqYYcjNuqc=)
2: J2wzb8YKKVcFBB9aw2nmFsUG6Ac.roa (hash: uNatwiz0kls9jaP1S1snowxFlS7dqcfH880Un/eLhPs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8f:0a:18:3a:a8:1a:1a:db:2f:7a:ed:91:11:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f07be9d1189771b7337efc1ced2c825dc2472a56
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=13868e4543b953d88bc6c44067436a6df165b2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:c3:88:77:84:13:2d:4a:2b:32:56:da:b8:
91:fb:00:e8:36:9b:5b:5a:3c:e1:9a:5e:24:ea:7f:
36:1e:6d:0c:16:6e:52:f1:5c:ed:1b:f6:a0:34:a3:
5a:3c:ab:c5:e9:c5:7f:d7:e5:ff:ba:ba:e2:cc:c5:
d2:86:27:0e:0f:53:a4:06:45:de:d7:42:71:5a:cc:
8b:01:d3:60:8e:5e:f1:c7:7c:92:26:e7:12:2e:9e:
97:64:f7:d9:2d:20:a6:b2:10:27:19:e5:bb:b6:c3:
b3:cd:9c:69:3a:02:28:17:b1:a6:b6:84:da:71:ea:
ca:79:45:d6:6b:c1:86:2c:bb:e6:39:99:17:8f:88:
53:cc:65:47:7d:d5:40:8a:5f:1a:92:f1:c1:e3:ef:
32:2a:47:be:7a:c8:60:e5:81:73:b8:a5:1a:2a:cd:
0e:28:68:d7:c8:e9:61:80:43:5b:ff:56:4d:ba:53:
73:8f:fc:bc:0c:16:16:43:1e:86:2d:13:e0:d2:11:
fc:76:36:c0:ac:43:e7:24:32:63:a7:69:92:69:ce:
9c:9f:ef:64:cd:91:d8:1d:b8:fc:2c:80:1f:fd:ea:
5e:ad:00:65:45:6e:1b:d5:a4:66:8b:5c:2c:1a:a6:
48:21:23:f3:77:89:34:9e:e1:cc:62:8a:2b:e5:49:
69:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:86:8E:45:43:B9:53:D8:8B:C6:C4:40:67:43:6A:6D:F1:65:B2:C6
X509v3 Authority Key Identifier:
keyid:F0:7B:E9:D1:18:97:71:B7:33:7E:FC:1C:ED:2C:82:5D:C2:47:2A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d4:c8:87:c3:44:3c:80:03:22:a7:7c:20:1d:d0:39:58:be:
92:ad:99:b0:0b:8e:45:d4:22:a9:13:6a:c6:b4:62:de:cb:d8:
5b:3b:d4:15:67:12:c8:ff:5f:14:5a:34:b8:58:96:31:51:4e:
73:7d:d3:43:19:c1:83:02:1c:0b:7c:8f:35:2e:13:6f:5a:6f:
20:c9:9b:11:40:38:45:e0:c3:5f:64:e2:4e:0c:42:a3:b7:67:
67:6f:19:62:13:05:90:f5:49:52:49:bc:c5:80:2a:e9:e9:c9:
16:c3:29:93:a0:4d:d5:14:1c:d5:3a:ab:9c:b0:30:4c:9d:69:
31:69:92:10:90:6b:a6:bd:18:75:0a:9b:82:48:b9:0d:9d:c6:
c5:5a:d7:6d:f4:4b:32:31:5c:4e:10:2c:03:3c:fb:d8:24:f1:
e4:9d:3f:d4:fe:e9:e6:d5:e8:af:18:ae:27:5c:51:00:1d:99:
81:52:aa:b1:31:ba:8a:83:e6:8c:17:f6:54:f8:af:3c:d0:6b:
c1:aa:0d:5d:7f:94:b6:48:91:79:d6:5b:d3:d5:b9:ed:07:32:
79:9a:5e:ac:8b:45:74:7f:be:ba:8b:9b:4b:95:39:dc:14:05:
47:a9:e9:f8:3b:10:cb:a4:45:12:8e:4c:c2:0a:42:c1:42:d3:
14:cc:30:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:10 2025 by rpki-client