Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
File: 8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft (raw, json)
Hash identifier: utD4uxagsUauBg0jT2TIaYHxMP+gNmx3bl3gJZAPxJw=
Subject key identifier: 44:12:E5:78:B1:1F:22:43:83:0A:74:67:FC:E0:37:D8:E4:2F:EB:02
Authority key identifier: F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
Certificate issuer: /CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Certificate serial: 0194BCE07923207D1E07CE86284A10E463B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
Manifest number: 1301
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: 8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl (hash: jVqmlYQxB1u6ixh4dZTetInfXq7H0tyMwNfrnFPMPMw=)
2: kvZo-BdFpFiAumpYOAN_8hogK54.roa (hash: B0ogmfmwZkernYmKh+SkwXZzEeGWetiV/fs+CFuZhi0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:79:23:20:7d:1e:07:ce:86:28:4a:10:e4:63:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=4412e578b11f2243830a7467fce037d8e42feb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:08:ac:05:91:01:4d:67:bf:47:ae:3b:e2:
01:59:9f:ee:0c:ad:cc:56:e5:7e:f0:78:2e:df:4a:
aa:41:2e:37:30:e5:c3:4f:74:fc:a1:b8:c9:c7:53:
78:ee:08:33:97:6e:58:64:24:5c:f3:bc:68:8b:20:
c5:4d:e6:7f:99:f7:55:3b:cf:59:0e:f3:0b:15:97:
c4:42:7a:7b:dd:27:1b:15:d2:18:89:90:61:94:0d:
59:2e:79:31:b5:c4:61:f9:c8:49:c8:0a:a7:e1:94:
e8:41:80:37:17:24:fe:ac:a1:7d:0e:2b:43:b0:67:
11:8b:74:0f:75:41:4a:97:ea:c5:1f:4d:4e:36:6c:
95:8c:14:17:0c:18:22:b6:fa:fb:44:3b:ac:3b:b1:
db:61:96:dc:de:e0:bd:c4:f3:d2:f0:99:ab:06:96:
e9:d6:e8:20:67:92:a5:de:42:2c:28:d5:e4:ac:61:
95:c8:7f:0f:79:0d:45:48:fa:a0:9f:68:84:06:b6:
ec:6c:aa:8b:e8:98:fc:0d:5d:ec:e5:4c:f2:39:cf:
f3:9e:35:d2:c1:25:f7:db:ac:10:ac:a9:ca:52:c1:
be:1c:d6:c6:41:d7:82:32:f3:eb:6e:ec:68:aa:ad:
fd:8a:76:91:b0:8a:0b:e3:be:b5:1b:76:13:8a:a2:
55:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:12:E5:78:B1:1F:22:43:83:0A:74:67:FC:E0:37:D8:E4:2F:EB:02
X509v3 Authority Key Identifier:
keyid:F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:60:49:10:80:e9:13:13:10:7e:c8:35:e2:f5:26:99:d3:53:
39:4b:35:3e:79:e5:df:b3:f4:e5:22:5b:6b:ba:fe:7b:7a:48:
ce:68:36:c9:6d:88:fa:6a:a1:56:67:54:bb:cf:d3:06:8e:35:
f9:0b:73:7e:2e:23:8c:99:4c:ab:68:cc:2a:f2:87:cc:03:d8:
52:75:8e:f8:ad:95:f5:ac:19:a4:14:a0:6f:00:8a:8e:1a:67:
a9:48:4a:d7:ae:ab:f0:4b:cb:16:96:55:2c:af:6c:c3:1d:52:
a1:56:47:e1:af:d5:bc:b4:33:6d:b6:17:42:7c:f9:2a:a6:c2:
f0:13:43:92:b6:43:b1:16:34:05:61:27:92:dd:73:b6:fc:ae:
fc:a4:34:4c:c2:3e:f5:5b:e6:13:0a:b4:9f:2d:a8:b6:89:6b:
35:71:fe:69:61:2c:ea:7e:a4:f7:8e:16:48:b7:db:ab:48:0f:
27:ee:41:89:8c:57:86:fe:9a:7a:55:22:29:d7:83:b8:ce:99:
45:40:ea:c1:d8:35:bc:f6:86:7d:2d:85:bc:97:94:5d:80:5b:
c1:16:45:08:78:35:15:c6:94:37:a3:f5:ed:19:63:96:28:04:
ed:f5:28:1a:13:d8:f6:06:e6:a6:eb:59:b2:b6:02:1d:9b:3b:
c0:e0:7b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:02 2025 by rpki-client