Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
File: 8x7XsfY7UapRap_8sDWjoNaeZaE.mft (raw, json)
Hash identifier: GPr1TUcp6G3y10jbm1klrWq8V9FdVlTi4cvHKheYW1Q=
Subject key identifier: 38:9E:C2:D3:35:E3:D4:26:7F:F9:4A:83:15:D4:9E:DF:22:21:7A:30
Authority key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
Certificate issuer: /CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Certificate serial: 0194BC3BF03032153AA9F0C0AB37C77FCE61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
Manifest number: 0521
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: 8x7XsfY7UapRap_8sDWjoNaeZaE.crl (hash: M5vHAMAS67F8PexQO5ysBhWbrTU+bMaVe964F0mdPsQ=)
2: dRCCrQlbCl5cnPZS_97FGox7KT8.roa (hash: fCuqxntNMN3+hGbFRnYWXO8SO6UnTTss4ZDUz2torlo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f0:30:32:15:3a:a9:f0:c0:ab:37:c7:7f:ce:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=389ec2d335e3d4267ff94a8315d49edf22217a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:69:aa:69:28:ed:47:65:4b:d2:7e:a8:86:0b:
2c:6b:4c:57:29:50:17:23:01:98:4f:1e:04:95:23:
40:b0:be:ae:70:40:c9:a5:71:2f:d9:65:45:a0:58:
b6:93:07:08:1f:8b:61:15:8b:d7:85:56:40:bf:99:
c7:b7:14:71:3d:3c:ce:4f:f7:b4:d4:7a:3b:0f:6d:
ac:67:31:c9:36:c0:a7:48:0a:0e:d1:24:7f:21:5a:
4f:a3:8c:1f:60:b7:58:4f:69:9f:c6:3b:39:fc:f8:
34:c8:c3:f0:7f:c6:23:0d:46:17:ae:01:27:3e:d5:
4b:ae:5f:c2:23:0e:f5:f1:ff:a4:a8:22:f2:bc:7c:
5d:14:68:a3:d9:1a:34:77:cb:5d:48:62:31:3f:94:
7b:c8:5c:76:ae:72:8f:d5:71:f2:04:e8:02:a1:05:
1c:72:0b:c7:a0:5a:18:9b:27:7c:15:5b:2e:06:1e:
8f:f0:32:4f:ce:d0:d8:2e:99:2d:16:a6:bb:bf:74:
bf:74:6c:bb:9b:c7:77:3c:d2:81:92:1f:18:63:58:
e0:f2:f4:8d:9b:81:f1:e9:66:db:f3:00:f1:85:72:
0e:a9:8f:6a:be:17:5d:63:a5:01:42:72:00:de:cd:
17:ff:ba:1a:b9:be:26:33:49:1d:d8:58:09:77:7e:
68:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9E:C2:D3:35:E3:D4:26:7F:F9:4A:83:15:D4:9E:DF:22:21:7A:30
X509v3 Authority Key Identifier:
keyid:F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:08:d3:02:37:af:ba:94:64:b3:d6:9c:1a:b0:dc:ff:f3:fa:
bd:ad:75:bb:c2:5b:26:0b:53:bc:d9:f3:fc:88:75:75:70:9e:
d2:67:9d:d4:15:45:11:8b:84:8e:e7:f6:13:02:97:15:0f:fd:
d2:f9:95:cc:7a:bd:b7:4a:40:c1:fa:29:06:67:d6:bd:71:1e:
e0:45:d2:79:a6:32:ea:cf:22:07:9a:64:58:26:2f:62:07:c3:
ef:e1:03:3d:ef:22:ef:19:22:91:74:34:09:9c:3f:3e:da:2f:
d5:41:59:42:0d:f2:b8:3e:1c:b2:d4:e2:fc:52:09:fc:5a:81:
46:56:18:af:1d:60:8e:ae:06:42:cd:1c:c2:b1:5b:78:29:ab:
ac:50:16:4c:5c:3b:1a:30:c7:59:97:f1:0f:a7:93:18:a2:62:
bd:9a:7c:cd:56:ab:66:4d:a6:73:93:25:1a:45:48:0a:86:5b:
21:62:fb:f7:b9:e6:a2:9f:d3:d2:5e:8c:b7:3f:7f:30:96:23:
5d:36:17:10:9e:07:ab:8b:4d:d7:89:ec:19:45:c0:4d:0e:a9:
78:fb:c1:42:90:6a:52:94:81:4c:88:bb:f9:47:93:f4:1b:36:
90:23:0a:90:a3:8c:ae:f3:2f:31:87:7e:21:cb:48:5a:f6:2d:
30:9d:3f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:24 2025 by rpki-client