Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
File: 8IoI64-nvuajGD4y3lGi88zUrkc.mft (raw, json)
Hash identifier: 8hGG4cq/KQgSpBKTw3P6vmlw6cB9B8nGaw/QiWYXNEY=
Subject key identifier: 78:B2:03:AF:C0:B1:4F:B8:8A:99:02:A3:FD:CA:D7:6A:02:65:B2:C1
Authority key identifier: F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
Certificate issuer: /CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Certificate serial: 0194BC7314770AE44C76DDA5F8DFC5F0018E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
Manifest number: 0636
Signing time: Fri 31 Jan 2025 13:00:45 +0000
Manifest this update: Fri 31 Jan 2025 13:00:45 +0000
Manifest next update: Sat 01 Feb 2025 13:00:45 +0000
Files and hashes: 1: 8IoI64-nvuajGD4y3lGi88zUrkc.crl (hash: wpsnDRFBmm5hj8YxgovfW3i564ytdxfc67ttCax18KU=)
2: cTkzelFg_-EfS7l9udnxkMrP0Fs.roa (hash: UdEI1k400GkRcUTewdlzP2o8ezwAuPLRkhdPLsyI4ng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:14:77:0a:e4:4c:76:dd:a5:f8:df:c5:f0:01:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Validity
Not Before: Jan 31 13:00:45 2025 GMT
Not After : Feb 1 13:00:45 2025 GMT
Subject: CN=78b203afc0b14fb88a9902a3fdcad76a0265b2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:82:77:25:1e:de:5b:5a:e8:34:39:99:ad:
57:c0:6c:d0:ad:7f:b5:e7:d4:6a:e3:de:bb:83:3f:
80:b4:26:a5:b7:bb:ba:78:8f:32:01:7c:7e:49:c4:
53:d1:96:63:79:4e:e9:87:c8:eb:cf:a8:17:53:44:
d0:f1:88:94:d9:69:2d:7b:45:52:8c:93:ce:8c:12:
a4:5a:a0:f0:6c:ee:33:c0:90:08:b2:98:33:f2:ab:
06:c2:6d:c9:1a:49:59:ed:19:1f:ff:99:f7:22:c8:
68:ba:84:35:f1:11:bb:83:75:05:5d:66:d7:34:bc:
a2:a0:2c:9c:e7:9f:f7:48:c4:8e:87:5e:12:5b:d7:
8f:d9:79:7e:20:c6:e3:1a:0c:2a:1e:b6:fb:af:8a:
3f:e1:8f:0d:35:04:26:3d:65:39:73:86:c5:cb:5e:
33:ee:e7:0f:f5:40:c3:2b:f7:fa:2e:6e:8c:85:f5:
11:f1:7a:96:ee:ba:83:2c:f1:00:f1:dd:c4:c6:69:
3f:08:b4:d5:d9:6e:9d:cb:53:8f:f9:7b:f6:52:da:
32:ec:95:67:21:57:8f:16:be:b3:26:64:c5:fc:ec:
1b:36:8e:54:fc:f5:31:60:cd:e7:93:3f:d6:e6:f9:
dc:0e:5b:b2:70:de:65:65:20:5c:3e:62:03:34:9e:
4b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B2:03:AF:C0:B1:4F:B8:8A:99:02:A3:FD:CA:D7:6A:02:65:B2:C1
X509v3 Authority Key Identifier:
keyid:F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:71:8a:31:fd:7c:8f:3d:92:38:de:9f:c0:84:0d:cd:b9:5a:
50:44:06:e6:f8:48:c6:1e:60:d9:1e:73:24:08:5f:77:2f:25:
c4:bc:4e:9f:cc:28:23:aa:1c:42:8d:e0:4a:00:04:be:0d:d7:
20:84:52:78:2d:24:4e:0c:c8:3d:33:6e:dd:70:3e:f5:41:df:
b2:d0:23:f7:70:82:d3:e2:9c:6c:ba:12:94:17:d3:a7:61:20:
fb:2d:84:77:58:c1:7e:b6:f0:cf:56:2b:28:f9:09:d5:1d:1d:
97:02:b3:11:38:a6:eb:52:d3:40:31:3d:1b:2c:e1:8b:f5:ca:
cd:af:8d:e2:1c:8b:95:49:04:94:5b:33:3a:a1:3e:09:9d:59:
0a:11:94:bc:fe:08:f6:ca:1b:84:96:73:a8:27:44:27:3e:f1:
bf:fa:ee:fd:5a:68:28:bc:97:34:89:b9:e6:8d:e6:3a:82:ec:
02:fe:1c:d8:a4:d4:c7:e3:5b:76:7a:71:d4:17:13:9a:e8:94:
bb:2a:72:2b:34:f7:be:73:86:7c:1e:42:48:30:a2:cb:96:f9:
7c:69:3b:4b:4b:d1:66:ed:67:a6:5a:d5:79:e3:7a:53:94:31:
43:3a:5c:de:0b:3d:cc:d5:bd:d8:bc:df:b6:92:4e:96:a4:a5:
3b:7c:0a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:31:09 2025 by rpki-client