Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
File: 8AI84rpaHU_QpeIn3nTLxB0rucg.mft (raw, json)
Hash identifier: QnLcl+Numn6qNJCzoEMl6F68Kql+AfLcr0qIC/n870E=
Subject key identifier: 29:C5:10:1D:E2:B2:2D:83:45:27:EC:3D:0B:A2:63:D4:E0:B0:BB:2A
Authority key identifier: F0:02:3C:E2:BA:5A:1D:4F:D0:A5:E2:27:DE:74:CB:C4:1D:2B:B9:C8
Certificate issuer: /CN=f0023ce2ba5a1d4fd0a5e227de74cbc41d2bb9c8
Certificate serial: 0194BC3BD9BCE20262DBB8865D1730FB9160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
Manifest number: 1173
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: 8AI84rpaHU_QpeIn3nTLxB0rucg.crl (hash: QzL/FwzQjEAvqfEqwQeNwSefrMG7apSLWhI91B6YH5c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d9:bc:e2:02:62:db:b8:86:5d:17:30:fb:91:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0023ce2ba5a1d4fd0a5e227de74cbc41d2bb9c8
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=29c5101de2b22d834527ec3d0ba263d4e0b0bb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9c:b4:15:16:24:89:1a:67:41:f2:b2:ff:9c:
72:4c:07:0e:30:de:12:99:a0:a0:91:74:cd:1f:a3:
fd:a5:b7:a6:df:ff:12:3b:b3:ac:84:3b:4d:45:81:
4a:96:a3:90:d5:fb:77:be:8b:79:25:ed:6b:62:92:
6a:48:e7:52:7f:7b:d2:ac:cf:0a:f3:b0:2b:ec:b2:
dc:0f:96:b3:e9:01:30:2e:7d:56:f8:f7:cc:ee:8a:
24:41:06:55:15:ee:a4:8e:1f:ff:a5:f5:61:cd:fc:
9e:09:8d:47:a7:88:5b:90:cf:4e:91:64:a0:69:0e:
5d:1e:aa:30:76:9e:43:97:62:c6:ce:0d:78:f1:ea:
1a:67:f7:71:ea:ae:1e:85:7c:fe:c9:6b:26:82:70:
af:fe:c0:eb:e9:1b:20:23:a0:87:9b:d9:37:13:43:
61:b5:39:b6:be:45:11:5d:26:3f:3c:b7:38:56:75:
0a:b4:b5:f9:e0:de:61:00:1f:05:24:da:b9:12:73:
06:1d:e6:b7:1b:5c:43:d8:74:c9:b7:bd:99:26:73:
ac:1a:27:e7:64:c6:02:15:e4:c8:7f:9d:4f:b5:11:
c1:af:27:ec:8a:2d:6c:ca:23:78:0d:64:12:c0:50:
9a:84:e3:cd:8b:ea:f1:5c:f8:5c:fa:d9:48:0c:81:
99:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C5:10:1D:E2:B2:2D:83:45:27:EC:3D:0B:A2:63:D4:E0:B0:BB:2A
X509v3 Authority Key Identifier:
keyid:F0:02:3C:E2:BA:5A:1D:4F:D0:A5:E2:27:DE:74:CB:C4:1D:2B:B9:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3f:59:dd:ea:07:bc:4a:4c:85:51:e9:bc:81:38:9a:8b:af:
14:f5:dc:67:b4:c2:6d:61:fe:05:db:f5:c9:19:93:1a:7b:24:
0e:91:c3:15:47:69:51:f5:6e:7d:82:93:4c:4c:25:39:9d:fd:
71:2d:54:e8:51:16:b6:7a:aa:89:38:65:cf:f4:86:70:49:7a:
42:1b:e9:89:1d:09:97:02:4c:63:fe:3a:22:75:2d:30:4f:95:
fd:06:5a:24:47:2f:bb:31:11:41:9e:1c:a0:85:e2:ea:26:84:
23:31:31:ad:09:40:28:9c:00:c4:94:c0:dd:ac:87:6e:8f:2d:
5c:6b:74:49:25:40:d5:5e:1b:76:63:ac:b3:b1:f2:fa:c9:17:
16:35:d2:d7:d8:75:ed:50:29:23:46:9a:f7:30:16:a1:ac:0d:
e5:5f:a9:a0:da:8f:ec:18:1c:44:01:e4:7d:c3:81:5c:99:95:
fa:1a:cd:0b:21:b3:64:a3:72:f8:18:85:8b:d0:cf:dd:9b:34:
3f:83:b2:fa:23:70:b8:46:25:08:a9:c6:89:09:42:a7:c3:cb:
e3:a2:03:b7:01:49:1f:f5:c2:29:f6:e0:37:89:b2:1f:26:dc:
75:47:c1:93:d5:29:e8:80:60:5c:59:9a:ef:1b:82:14:b6:bd:
68:56:2f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:51:37 2025 by rpki-client