Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
File: 84BJvoAaE244erwUSY5IYETZYng.mft (raw, json)
Hash identifier: YcETHuGIyXIOPCzfK+xCCDBfhMq01SwQCbUx+0p6Jgg=
Subject key identifier: C9:82:9F:23:9E:F8:41:A4:80:0D:E2:00:96:8B:06:BA:FA:91:AF:3E
Authority key identifier: F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
Certificate issuer: /CN=f38049be801a136e387abc14498e486044d96278
Certificate serial: 0194BD17E8CE8CE2ADCAD90E2363E9548C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
Manifest number: 0176
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: 84BJvoAaE244erwUSY5IYETZYng.crl (hash: OqMO/CgCWZdy+/AzFZ/EyWEY495XqD5K0e8BWqLIlwU=)
2: Iu2chtpqWcHWj5ICMYSAAIfiajQ.roa (hash: V17YrAyWPucLnXshp6FV+qrXZ0uT+XGK95n0G3fUe08=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e8:ce:8c:e2:ad:ca:d9:0e:23:63:e9:54:8c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38049be801a136e387abc14498e486044d96278
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=c9829f239ef841a4800de200968b06bafa91af3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7c:1f:0f:d2:9c:18:ad:3e:da:91:3b:15:60:
73:60:00:ee:de:f5:31:3e:84:f4:8c:ff:c5:3e:27:
7e:ef:9c:64:31:90:92:5c:41:9a:bb:76:e6:28:78:
59:a9:7a:81:6b:c4:aa:8e:50:13:cb:b3:46:15:f2:
96:c7:df:2c:15:e3:2a:62:ae:5f:ae:2a:b3:78:c4:
d3:a5:da:a3:59:21:ba:2f:fd:42:5c:7b:7f:6b:0f:
15:fb:2d:3f:a4:81:69:a1:b1:24:3d:88:0d:c4:ec:
ad:39:3f:1a:4c:cc:64:e2:ac:fc:90:a2:a3:43:e8:
df:7c:b4:39:02:a0:75:73:25:e4:2d:e4:01:80:e0:
4e:a9:37:87:7c:91:dc:df:da:13:1f:7e:7a:e9:7c:
c9:2f:50:13:19:6e:f6:c4:a5:77:e0:f2:5c:9b:04:
da:96:54:ce:d9:6b:76:da:4d:cd:cb:fb:d3:4c:50:
34:28:a7:6c:cd:8e:2f:25:3f:4f:a9:ee:89:9a:1a:
e9:a8:c5:75:5e:de:dc:ed:f4:b3:01:b8:3e:fb:f6:
12:de:1f:a7:79:a8:90:11:90:3f:b0:a6:6e:fb:58:
be:f9:4b:03:1b:b4:a2:ec:b5:c6:5b:83:59:d9:20:
ad:3f:cc:d1:19:95:cc:56:70:25:20:69:1a:11:b5:
77:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:82:9F:23:9E:F8:41:A4:80:0D:E2:00:96:8B:06:BA:FA:91:AF:3E
X509v3 Authority Key Identifier:
keyid:F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0c:21:2f:5a:7e:f5:f9:8b:ac:7a:1f:24:22:cb:c4:ea:5a:
02:9f:88:9b:51:16:dc:a0:90:04:6b:eb:82:47:67:ae:34:0d:
9e:71:50:3d:a0:dd:97:14:45:ae:39:90:02:a7:53:ab:2c:7e:
07:65:56:9e:04:0b:ba:72:8a:2b:62:0c:0c:70:cf:b7:2e:da:
fd:ad:f0:e0:3b:d7:fa:a0:43:91:f9:21:79:02:36:f5:a5:77:
fd:9c:77:8a:3a:10:ee:38:19:8a:db:c4:0e:ff:77:b9:cf:2b:
d2:29:50:34:85:fa:d2:f6:50:b4:e8:a9:ab:aa:08:a4:ec:13:
58:eb:6e:84:97:ca:1c:15:03:a9:da:b5:56:ca:62:27:9f:54:
40:ee:e0:8d:3b:c2:84:50:c1:aa:dc:7d:90:db:ab:ec:f2:93:
65:6c:75:66:bf:af:e9:f3:62:dc:b9:5c:5f:f2:1f:3f:23:67:
48:42:6e:b2:ae:87:8a:65:9e:0b:5a:31:aa:f9:9d:ec:ed:57:
81:3e:be:9b:9e:b1:c7:51:b8:24:42:a6:ac:cd:a1:65:e6:6a:
24:7b:c4:6f:1f:7a:5f:1d:40:fb:67:49:1c:dc:42:81:36:d6:
89:8e:17:71:8b:e5:21:48:a6:1d:19:57:64:e0:74:22:42:25:
4b:e6:36:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:52 2025 by rpki-client