Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
File: 8vZyvbewdlkUflh9RDGqYE92o4Q.mft (raw, json)
Hash identifier: StuvoXAY+TqBeFBihXS6XALy+IYuhaK3O2Muy/QJhsM=
Subject key identifier: 42:0E:2C:54:63:4A:D6:38:95:4F:D8:30:54:2D:7D:D5:91:48:74:BC
Authority key identifier: F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
Certificate issuer: /CN=f2f672bdb7b07659147e587d4431aa604f76a384
Certificate serial: 0194BD4E361D5F84FAD0F96CEA4DD419CFDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 17:00:06 +0000
Manifest this update: Fri 31 Jan 2025 17:00:06 +0000
Manifest next update: Sat 01 Feb 2025 17:00:06 +0000
Files and hashes: 1: 8vZyvbewdlkUflh9RDGqYE92o4Q.crl (hash: tTpO8Pp6rllEQIcFtzT1lljcQ3wTwvDb5rMD0oqjsNU=)
2: MZX1sQ-Npgh0Pud-IcGKNSLyo0k.roa (hash: U9/To+oLXeceO29CXxgG6V0U8rAZo8+5KCoNTba0dLM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:36:1d:5f:84:fa:d0:f9:6c:ea:4d:d4:19:cf:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f672bdb7b07659147e587d4431aa604f76a384
Validity
Not Before: Jan 31 17:00:06 2025 GMT
Not After : Feb 1 17:00:06 2025 GMT
Subject: CN=420e2c54634ad638954fd830542d7dd5914874bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:bf:62:1d:ed:76:ea:f7:cf:0a:61:e6:32:
8f:08:54:fc:da:fc:21:9e:b6:3e:1c:48:d9:ff:8d:
f6:3b:32:02:0d:20:50:73:93:1f:3a:d7:ee:9d:66:
b6:00:8c:66:1c:46:30:43:c0:b6:49:0f:73:72:6e:
5a:94:5a:d1:7d:b5:4a:df:ab:a0:d4:f6:2c:53:89:
7f:79:32:a0:27:0b:24:2a:59:23:4b:e1:93:2a:73:
e4:5f:97:de:b0:38:90:70:e1:37:cb:f6:e4:cc:ae:
24:62:f5:14:38:b4:6e:39:cc:6d:ce:f0:86:36:7d:
75:ae:e5:16:b7:5b:80:d1:7f:2b:cc:42:08:35:ab:
5e:bf:0d:22:e0:ce:c1:e4:32:1c:66:f7:0c:ff:be:
57:1e:4e:ac:9a:0c:a2:75:22:fa:f3:f2:1f:43:1b:
32:97:03:48:26:6e:61:d4:84:d2:2b:94:01:9a:63:
54:c7:22:cb:d4:26:d5:cd:4e:51:6b:db:5d:7d:e0:
bd:44:05:d9:d8:d7:99:50:ec:7d:31:cb:b8:63:9f:
07:f4:a4:a2:dc:c2:46:f2:5b:bb:a4:aa:66:8b:33:
ea:a7:49:d7:59:89:59:38:35:87:99:f0:f3:0f:87:
4e:5e:62:98:15:1e:10:36:73:84:24:22:50:50:3f:
03:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0E:2C:54:63:4A:D6:38:95:4F:D8:30:54:2D:7D:D5:91:48:74:BC
X509v3 Authority Key Identifier:
keyid:F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1d:22:a8:a0:25:f6:4d:0e:58:36:75:59:ef:82:be:6e:c0:
80:54:26:dc:60:80:bd:38:6e:c9:e9:6f:6e:ea:3d:96:1b:39:
c8:3c:9b:34:42:e0:d8:87:90:fb:b7:f8:0a:98:70:76:19:59:
d8:11:58:39:7e:0a:2b:96:4c:aa:fe:65:17:37:d6:51:1b:e2:
81:8e:ee:35:61:cf:e3:f3:12:3d:ae:28:c3:b3:4b:4f:9f:3b:
d0:bf:c7:f6:25:2b:c3:3a:07:f1:60:73:5b:e0:c5:95:2c:af:
6f:14:17:99:95:63:1d:b7:44:de:a4:ff:2b:10:b4:f3:9e:08:
9c:4a:02:dd:e3:ee:76:b5:a5:2b:6c:c8:05:f0:43:33:87:42:
3a:6b:8a:37:ad:54:e4:74:ec:e8:66:2d:5c:60:84:d6:e0:89:
90:eb:2e:7f:eb:c7:9d:84:e5:91:d2:8a:fd:bb:a1:b4:2a:d4:
a0:61:25:09:98:21:6a:1f:df:41:bf:1b:06:fe:98:e4:5d:7a:
e7:2c:85:13:7e:a8:68:e5:d2:bf:36:1e:01:35:65:16:10:f2:
1f:ad:a6:39:20:c5:3f:d6:98:ad:3d:64:7e:8d:8f:ed:5e:6f:
08:29:1a:fe:c3:0b:4d:63:00:7a:b9:55:b5:29:9d:db:7d:91:
0e:7c:68:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:26 2025 by rpki-client