Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
File: 8SsbaOoQk7zueNBxkubYw_cDAs8.mft (raw, json)
Hash identifier: fl/nd/BIv7VGklAc+8Y+UdypRq/OtutWyz6m6QSFFK0=
Subject key identifier: 69:DF:DF:B7:BD:B0:B4:3E:A4:D0:3B:44:29:F6:54:15:23:30:E8:6E
Authority key identifier: F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
Certificate issuer: /CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Certificate serial: 0194BBCDED2D694BDA179221E0E5EF5EE314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
Manifest number: 1316
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: 8SsbaOoQk7zueNBxkubYw_cDAs8.crl (hash: +gQ7z1LwjCfaVswwBbTq8u16fb/VaBDc1YI0kUYjiVE=)
2: bKPhCw0mFqwfHuOY5bTkew_cDWA.roa (hash: GZO9dwOguzhoWcajFIoo6bMBVjK4nlEVTDqTZEZzar4=)
3: u_s4QKsF9p1kSN0KedlqNHJpJkI.roa (hash: 8YDGRlWAcN7f5DRHYPeywi/SAyIqYgv/xJQxk+e27Qg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ed:2d:69:4b:da:17:92:21:e0:e5:ef:5e:e3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=69dfdfb7bdb0b43ea4d03b4429f654152330e86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:1d:0d:ee:c9:d5:3b:2d:d1:4a:d1:04:79:
de:50:d5:09:ea:d6:92:75:09:eb:22:e1:9c:d6:fe:
76:87:7e:a3:ba:9d:a4:ad:8b:b8:6a:02:00:40:15:
fb:e8:dd:9a:51:3f:7e:42:3e:21:d3:20:cf:43:d0:
62:8e:17:90:fd:c9:94:c9:45:62:89:b1:52:fb:5c:
c4:80:c5:48:bd:6b:20:ca:d6:07:24:83:b3:c0:8c:
50:31:01:a7:53:3c:ca:30:76:71:15:d1:fb:35:83:
11:0d:d9:62:a3:af:2a:89:45:b9:e5:6f:c3:b3:b3:
47:83:f3:52:07:48:ee:3b:f0:8b:76:30:aa:a4:ee:
8e:3b:36:8d:2c:44:28:2c:e9:aa:f3:c5:53:db:ee:
9b:b0:1c:27:df:61:1c:4a:76:89:b7:52:ef:f3:94:
fc:f2:87:7d:12:6d:92:fd:d9:16:31:0f:09:b1:a7:
00:72:69:22:87:88:4c:8f:1f:cb:40:f9:21:4c:e9:
f4:17:9e:64:82:09:74:45:6d:a2:38:74:e8:f4:d9:
bd:06:7e:57:75:79:33:7b:97:24:2f:39:3d:b5:a2:
82:2b:04:d2:62:66:8a:fc:47:a4:8a:6e:ca:20:f5:
3d:29:72:b2:69:54:3b:bb:31:12:a2:c5:81:a3:36:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DF:DF:B7:BD:B0:B4:3E:A4:D0:3B:44:29:F6:54:15:23:30:E8:6E
X509v3 Authority Key Identifier:
keyid:F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:af:da:50:e1:3b:99:45:e0:ca:da:8d:b5:67:f9:ee:96:14:
cd:35:bd:a1:fa:71:f8:ff:5d:78:bb:e0:97:65:9b:ff:0d:07:
55:5d:49:81:e9:af:93:db:83:b9:98:26:16:15:fb:f9:46:3d:
0a:81:4a:b9:53:b6:c0:d3:f3:7a:ed:4c:12:36:28:67:82:d4:
28:97:d7:69:9f:9a:f6:7d:54:bd:a4:59:cd:ba:28:5e:dc:db:
ae:b9:72:76:b5:63:8e:02:6f:8b:83:b9:3f:20:28:25:67:99:
fd:22:99:3e:e4:c3:b4:b4:78:4f:c1:10:69:f6:79:2f:96:7f:
a4:d8:d2:67:7b:46:dc:e5:29:0e:c4:df:f6:bf:65:6a:19:7a:
2c:74:4c:70:cf:8e:fe:28:94:b5:c1:2b:22:4f:91:a7:af:b9:
55:cb:eb:64:86:ff:5f:44:d8:50:43:91:a1:f7:77:a3:8f:29:
aa:d7:38:a7:d4:7f:0f:9a:ca:84:7b:15:d6:a0:8d:3a:86:08:
e9:f4:c6:6b:35:ba:56:9e:01:c0:3a:b8:93:fd:78:38:e9:ea:
8a:0f:fb:c6:66:8c:80:5e:5a:4f:d3:2e:0a:84:a9:fd:76:7a:
dc:ea:fc:de:31:df:df:f9:a3:3b:b3:1c:7f:6c:93:01:6b:2e:
9e:71:77:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:38 2025 by rpki-client