Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
File: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft (raw, json)
Hash identifier: lo9IJNLTvJQaHyLf1GG+jb12qJ3eZ7HseyzU2Iuv1sw=
Subject key identifier: 00:2E:7C:3F:50:D6:29:40:3B:89:9F:A6:7E:D2:AC:9E:F1:38:03:04
Authority key identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
Certificate issuer: /CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Certificate serial: 0194BC04CBBDD18AB70C8C5B0E92D7BA211F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
Manifest number: 101C
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl (hash: Hd1tQtZPKZ4DHaCZGj0na/liMXeLJsKVUS+9Dw07evw=)
2: F0L-7P2Vilk9HCqFohJsqZcHd3Q.roa (hash: fTuIh58gxrXX3Bba7KkC9bw1yhp77tWXLVMb0qHV7oo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cb:bd:d1:8a:b7:0c:8c:5b:0e:92:d7:ba:21:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=002e7c3f50d629403b899fa67ed2ac9ef1380304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:c1:2a:04:e6:9d:e0:06:e0:56:9a:da:dd:
6a:19:6c:b4:04:71:18:0f:a6:88:c4:5d:18:c6:1c:
d6:43:5e:46:63:87:f0:84:a7:77:81:c9:20:24:a3:
02:92:c7:7d:d1:21:90:47:42:4c:2a:90:11:4f:77:
2e:5b:cc:9b:83:db:59:fc:e2:a7:e3:31:50:ab:8d:
22:fe:18:af:d3:d2:88:da:f7:b8:81:ff:2c:5c:9a:
09:e7:13:78:d2:67:5e:8b:48:e5:de:a5:1d:f4:d1:
01:1f:5f:59:3f:c2:39:94:84:d5:30:ef:1d:dd:30:
f4:c7:63:6c:23:36:60:59:69:41:c9:a2:e4:12:a5:
d3:dd:6e:1b:34:25:5d:6a:48:16:23:34:d1:31:d5:
75:94:ea:63:71:f4:6e:da:b7:12:f0:08:b6:0c:16:
af:d9:ae:ab:44:f5:a9:e7:9c:98:e2:f4:75:ae:fe:
b2:7d:35:22:eb:1a:ff:ab:a9:34:d6:66:be:a9:8c:
36:91:36:75:b1:88:3c:45:e8:e4:10:e8:0d:a8:ce:
c8:68:df:ed:db:96:ae:13:00:65:c8:bd:7c:23:bf:
78:ad:8d:01:c5:fd:78:2b:01:8f:17:62:09:88:e6:
2a:37:0b:c9:ae:81:e5:61:1e:de:90:17:76:31:2c:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2E:7C:3F:50:D6:29:40:3B:89:9F:A6:7E:D2:AC:9E:F1:38:03:04
X509v3 Authority Key Identifier:
keyid:F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:45:86:3c:84:ba:bd:13:31:ff:7b:87:85:06:15:c4:90:b4:
bd:c2:9a:db:6f:0f:65:5b:12:65:cb:da:3d:13:ca:86:97:bf:
d8:82:1d:91:49:16:2a:87:3a:0e:57:a6:02:45:cf:d8:fb:60:
7e:5e:10:7a:e0:20:6a:25:6e:9c:51:eb:d2:d8:55:1c:25:8e:
1a:0c:bd:9c:20:f9:90:91:b8:1e:24:96:c7:4e:c9:20:14:f6:
bf:8f:75:82:2a:9b:fa:ff:49:d8:65:a8:60:ff:3d:17:5f:b3:
1c:57:fb:10:e2:a1:2a:d3:54:0d:90:50:c2:1a:2b:6f:ea:71:
43:ee:7e:5f:db:d2:9c:9f:58:b6:a4:4a:34:83:4b:76:b0:42:
03:12:88:6e:3b:81:a8:78:8e:ae:1b:04:0d:1e:82:0d:c0:0c:
90:99:e2:1c:0e:f9:29:c4:77:cd:f9:40:3c:6f:b8:e3:25:56:
fa:0a:f8:e9:b4:00:aa:35:76:99:9a:10:34:7c:d6:54:a8:ee:
31:53:4f:b1:26:6f:e4:01:82:0d:14:92:0e:24:35:24:85:bf:
7b:58:38:5b:59:3a:7d:9a:36:c4:bd:51:7a:af:af:68:a8:a5:
4c:e1:5a:0a:cc:5d:4e:ca:4e:32:89:b6:08:29:a1:bd:27:06:
69:2b:73:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:42 2025 by rpki-client