Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
File: 8BGVyAze5CsGiNuOk6aLRZuFjm4.mft (raw, json)
Hash identifier: 2hxE2nli37lhexl3f0Ugq8ZiTNLI+D1LK+6/OWsmUxc=
Subject key identifier: 44:14:DB:10:D4:7F:59:6A:5C:E5:7E:06:1B:D1:FB:D8:65:D3:8B:5F
Authority key identifier: F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
Certificate issuer: /CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Certificate serial: 0194BC3C0ED229A5BFF8F47473728DC9C5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
Manifest number: 0211
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: 8BGVyAze5CsGiNuOk6aLRZuFjm4.crl (hash: WGqiGrHRF/Y7Q1olg27fdfbPmEoR4Ab3zGoNSrXUJ+A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0e:d2:29:a5:bf:f8:f4:74:73:72:8d:c9:c5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=4414db10d47f596a5ce57e061bd1fbd865d38b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:55:7a:7a:ec:2d:93:24:7c:74:9b:14:84:
ab:a0:b4:7b:48:66:66:d7:43:36:46:c2:ed:57:19:
cb:5d:79:d7:51:f4:dc:be:85:82:4a:78:77:9d:9a:
d6:1f:6d:a2:ed:dc:bd:54:fe:b5:ba:03:03:ed:cc:
f1:68:46:4d:8d:ef:8c:1d:ea:b4:9f:25:10:c1:f3:
39:a9:80:2b:05:9a:18:41:c5:d6:f0:1d:ed:b6:bd:
7e:c5:5a:43:c0:77:dc:a5:26:a9:ca:c8:64:3b:4c:
53:e2:2f:8b:df:66:d4:00:ee:1d:6e:10:63:bc:74:
47:89:ff:38:17:7c:31:1f:85:47:8a:61:b8:e3:10:
d1:8d:a6:89:77:86:e1:7d:2e:e4:85:ef:f2:d0:7d:
89:a1:ee:6f:4e:cd:48:fb:f4:6e:20:7d:bf:73:f7:
7e:28:a8:2e:67:3f:68:ba:87:6a:64:fc:4e:6b:a6:
5d:d3:7e:b2:02:89:a6:76:3d:1a:aa:da:4a:9f:a0:
fc:c7:f5:f4:ce:af:6b:b7:da:a1:24:f3:b2:d5:08:
bf:00:ed:60:51:9e:e5:52:61:7a:09:f0:16:1a:09:
a0:7f:e9:16:6b:af:26:30:ce:6d:18:1f:cf:5f:63:
b7:d2:76:19:b2:5d:ec:c0:ef:5f:36:f3:13:51:26:
8f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:14:DB:10:D4:7F:59:6A:5C:E5:7E:06:1B:D1:FB:D8:65:D3:8B:5F
X509v3 Authority Key Identifier:
keyid:F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ab:ae:fa:cc:ee:a4:0e:74:62:97:3d:32:a4:6e:39:fa:53:
73:d3:13:90:42:13:e1:2f:9a:79:a0:5c:66:87:13:26:8d:54:
d4:5e:9b:83:e0:b4:de:ae:0b:bb:96:be:66:4e:72:8d:7f:a6:
d5:91:8f:5e:1e:8a:d1:78:ce:79:e5:d5:0c:c1:96:e1:15:6d:
19:25:2e:1a:16:d9:c8:6b:0a:bb:7b:88:5f:51:39:23:d6:2f:
fc:f9:78:4b:27:5d:7e:31:4c:bb:64:8d:19:51:8f:6d:e5:8b:
ad:18:35:2b:66:c5:49:a8:63:df:d0:05:9a:ea:4c:ee:f0:39:
df:27:fe:f5:c3:ae:8b:66:5e:b3:07:50:38:aa:11:63:7a:00:
db:78:01:d0:59:4a:70:2b:25:44:4c:42:10:33:6b:89:42:b3:
d5:08:26:8a:be:d4:2a:6c:63:ba:6f:7c:dd:8b:39:7f:79:f4:
14:2c:94:5b:19:17:c5:65:92:60:17:1d:35:50:f1:64:cc:07:
99:33:78:ed:d2:26:35:fd:f1:fb:aa:70:7f:36:80:05:48:e7:
df:11:23:44:95:d7:db:9a:91:57:e1:c6:85:68:f2:5d:95:0e:
4a:3f:c0:c2:f0:a2:9d:9f:d4:57:56:50:a9:08:9f:ea:50:02:
57:be:61:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:24 2025 by rpki-client