Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
File: 8_alfqKpAutJEt6SffgDBMNVqxI.mft (raw, json)
Hash identifier: Buvecw5f3x+sCnh9HHm6uD/955JdTkGlGZX4i1EDRLo=
Subject key identifier: 26:9D:06:7A:97:07:5F:9E:4D:6F:62:9B:A9:51:B6:53:0E:07:7D:36
Authority key identifier: F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12
Certificate issuer: /CN=f3f6a57ea2a902eb4912de927df80304c355ab12
Certificate serial: 0194BC0528F1967E56D2008BDBF720B820B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
Manifest number: 137C
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: 8_alfqKpAutJEt6SffgDBMNVqxI.crl (hash: Kp10jXc+T4e7RoyeZvMyES1RAhkSlw7ObALtnwlIuBU=)
2: u8DCnmiwdvKh2XgFpOMuHJjylj4.roa (hash: pyYbMY7OWkqDVRgEujgw5F9QcQGgPWWbAPnLnwKmM2g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:28:f1:96:7e:56:d2:00:8b:db:f7:20:b8:20:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3f6a57ea2a902eb4912de927df80304c355ab12
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=269d067a97075f9e4d6f629ba951b6530e077d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cc:cb:9e:38:41:00:d2:57:2f:b4:f8:0b:cb:
34:1d:d9:34:7a:b6:ef:4d:71:88:9e:55:f8:52:57:
25:91:11:17:11:89:d3:ac:07:93:04:71:1b:d5:f9:
87:5b:4c:8e:c5:b9:0c:1f:b1:34:77:03:ff:ac:6d:
f1:e6:12:a0:e9:24:72:46:45:e9:12:95:6c:39:63:
e6:55:54:95:e2:18:6e:e8:d1:70:46:24:34:95:42:
50:29:28:f3:60:08:53:d2:51:8e:6b:4b:79:cb:44:
02:e6:df:e8:f6:9b:b3:19:6d:ee:54:9f:1d:d1:43:
d5:f2:fd:7c:74:44:ab:f6:f7:b4:bf:95:3f:64:cc:
73:76:45:34:bd:9a:b6:af:c7:0b:c2:8f:c0:90:83:
74:d3:23:1e:01:76:35:53:c6:a7:b0:73:d8:32:df:
f4:4b:d7:a8:5e:4e:67:92:b4:91:99:b7:1c:9f:a1:
73:fb:a1:23:9a:df:ac:75:2d:09:e4:99:6b:06:e8:
af:8a:c8:5d:75:64:2a:c6:ff:84:b3:fa:a5:cc:8c:
dd:e0:f6:b4:de:86:1b:55:4d:56:89:a3:70:97:68:
2d:38:2f:da:8d:28:4c:f1:70:d6:9d:5c:10:48:f8:
78:64:e4:3f:9d:84:2d:40:b8:86:81:ec:12:d8:e9:
48:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9D:06:7A:97:07:5F:9E:4D:6F:62:9B:A9:51:B6:53:0E:07:7D:36
X509v3 Authority Key Identifier:
keyid:F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a1:73:10:e7:ca:8a:31:7d:38:1b:4f:ea:fa:58:50:e4:5a:
24:f7:72:99:d0:90:49:ec:93:0a:2b:06:36:7f:2b:2f:7f:d9:
71:4e:0e:a3:08:25:52:ef:ea:01:d2:96:e9:83:11:a4:95:fb:
ff:b5:c4:1c:93:28:85:68:16:54:13:25:98:b8:dd:71:10:86:
cb:4a:f2:ea:81:e6:58:6e:2a:03:3b:b7:e1:d8:f9:de:3b:6b:
f0:60:f4:16:59:1f:2d:0d:1d:ae:68:dc:2d:54:9a:83:40:db:
d4:65:f6:dd:ec:dc:3b:df:51:76:6b:60:ac:2d:c3:38:24:d8:
c9:f2:24:6d:c0:b9:f9:db:75:1e:8a:14:97:4c:61:ab:39:98:
02:48:23:a8:95:13:c5:d3:80:b5:e9:60:39:98:1b:4d:46:9a:
7e:28:4b:fe:d8:67:49:c4:2e:da:9f:39:4a:d7:9b:62:1d:b9:
57:d5:b9:57:e9:e2:ef:40:c5:92:2f:51:16:7f:33:f0:a5:3a:
9a:96:d3:33:94:0c:69:51:69:64:de:70:2d:dc:a4:1d:28:fc:
f7:8f:0b:40:6b:e3:9c:50:df:8c:85:8a:dd:76:e2:88:0c:96:
06:49:f2:bf:76:9f:07:99:b4:41:93:62:29:ec:7a:8e:65:31:
f4:e2:de:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:03 2025 by rpki-client