Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
File: 8yf6fhlHLlg7cgk2w50P0kJmGf0.mft (raw, json)
Hash identifier: ddC5uGb1L740qcnRz+UN5x5ekvuuRStymJDSDFgIhv8=
Subject key identifier: 29:AA:F3:D1:4B:AF:67:69:44:85:EE:E9:53:21:73:66:33:84:08:40
Authority key identifier: F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
Certificate issuer: /CN=f327fa7e19472e583b720936c39d0fd2426619fd
Certificate serial: 0194BD85715E97F9570F8C448FD77A4A9651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
Manifest number: 07D5
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: 8yf6fhlHLlg7cgk2w50P0kJmGf0.crl (hash: 1FCGXT9tAVh0v2YqIueNSmNxoqm0Uy5oPeN2UmfqHD8=)
2: jteACDbaYC2GMTFvAHtj6JRaDvo.roa (hash: FyyB216euYUAYG4P0lTXHk9/k4BDveAtrAV0IpAsB3U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:71:5e:97:f9:57:0f:8c:44:8f:d7:7a:4a:96:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f327fa7e19472e583b720936c39d0fd2426619fd
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=29aaf3d14baf67694485eee95321736633840840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:83:54:11:e6:82:9f:bd:da:9e:26:f7:a1:
16:85:2c:52:d3:0f:87:cb:6b:ab:81:e8:f8:44:54:
15:05:97:07:53:34:c3:08:62:04:2e:da:60:21:e0:
bd:45:10:b0:26:36:3d:ce:eb:6d:c1:53:37:29:70:
ef:8b:9c:c5:3d:cf:52:de:42:8c:05:de:fa:c1:2c:
28:e2:41:4a:1c:12:a7:45:9b:25:0c:93:cf:1a:33:
6f:7a:4c:cd:22:7d:1f:37:eb:d9:b5:c3:51:99:52:
ba:d0:ca:17:19:c8:f5:eb:71:c7:69:67:78:ec:85:
e3:96:eb:6f:2d:8d:88:9a:d1:dd:42:4b:d2:69:f7:
ef:7e:41:f0:34:c2:e3:bf:15:1d:49:99:cf:21:4f:
34:56:f7:d9:3d:be:91:71:73:f9:2e:15:b4:48:22:
cd:ab:4f:25:3b:30:c5:a4:11:68:34:c7:11:01:05:
1c:3b:30:ca:72:db:29:8d:53:ee:5e:bf:a0:5b:a6:
b8:92:6d:0a:af:15:a9:76:19:2b:a2:fd:26:2c:08:
c9:24:b5:1e:5d:c9:c5:5a:9f:4d:9d:2d:a8:67:b4:
2d:bd:89:6c:85:93:11:f8:39:64:ee:3c:a7:ee:2e:
9b:d2:e0:34:b3:d1:ae:ec:94:48:e1:4c:4c:67:dc:
f4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AA:F3:D1:4B:AF:67:69:44:85:EE:E9:53:21:73:66:33:84:08:40
X509v3 Authority Key Identifier:
keyid:F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:af:e8:0b:67:8a:3a:16:b5:9d:e6:5c:80:e9:f6:24:18:ef:
0d:aa:ac:fe:6a:53:b3:59:81:48:0d:57:28:0c:98:cf:ca:e6:
71:38:ac:7a:1f:0b:35:f5:11:45:32:c2:6d:01:8c:f0:fd:04:
da:e6:b6:fb:d9:2d:d1:79:e2:d8:04:80:d9:be:69:69:75:85:
45:7b:c2:d5:39:91:82:d7:ce:0e:33:27:5a:18:95:47:54:28:
a0:70:cd:fb:9c:20:6e:f0:ab:d3:ed:52:0a:52:8c:4e:0f:db:
36:91:11:20:07:63:6e:8d:f3:a6:97:33:69:b0:62:d4:ea:41:
34:83:61:9a:3e:2d:46:aa:93:c0:fc:2c:66:0e:2d:9d:0a:ed:
c2:fe:6c:3b:42:d9:43:85:cb:a9:57:23:08:4f:85:7b:51:1a:
12:c3:88:6e:63:64:90:cd:ca:86:40:35:8d:3d:6f:ec:99:e8:
cc:3f:6a:64:66:40:92:2a:0c:2f:13:cf:e7:68:cb:44:45:c7:
70:66:60:68:4a:c7:d0:ec:82:54:0d:82:ff:6f:6f:6e:42:cf:
96:4b:54:4c:3b:b2:89:ea:93:2b:0a:38:38:6d:f6:32:7c:64:
a8:24:76:2b:9e:59:87:ac:81:7c:1f:be:2e:78:1c:9b:a5:f8:
a7:fc:c4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:06 2025 by rpki-client