Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft
File: n68L-T_EOB__fnqoa0B2wDMkL_o.mft (raw, json)
Hash identifier: M4SKJMF0M6fyRycGk/HO00YdmBH0ZR6ukBUCmowiXUA=
Subject key identifier: B8:C2:2F:7E:12:47:F7:B5:94:A3:BE:E0:38:CF:32:82:6F:10:AD:E4
Authority key identifier: 9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA
Certificate issuer: /CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
Certificate serial: 0194BCE0E089C43B637016CAEBF8355C54F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: Orf9dx9lP2Aq1RT4wGk6GNHmX0A.roa (hash: gI2QpRe4bPe1SlAUdlEc7QRHCXDom37+yMhhP7/Xj/Q=)
2: lDWyFXs9JgGOhDKJmAMUd3zIK5w.roa (hash: 2q/dpzMOt8Z4VXz7M3w9S5I7SSYKdZBx6BiCTtjP4qg=)
3: n2XhVDe2ggLEf7MqKLu4m2oiDCI.roa (hash: s/3Lc9LGACFlvJc5xu/AbuESJL8OCx+FeCaTIr0OPuE=)
4: n68L-T_EOB__fnqoa0B2wDMkL_o.crl (hash: GHB3BFDws9F2rVikf1+T3U4q8WLjhHxGaGc9S29H7kA=)
5: sU28xKNoz0ebnELHinDQhAfTGOk.roa (hash: LcOsotfaJ4XCbUKW+GqA754WNTnRpE0EUj8P0SYZfGM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e0:89:c4:3b:63:70:16:ca:eb:f8:35:5c:54:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=b8c22f7e1247f7b594a3bee038cf32826f10ade4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:62:c1:ca:c6:5f:7c:18:5a:8d:1a:c1:2e:
c4:b2:8a:d0:13:fa:b1:d2:ec:bb:0d:87:be:14:e6:
47:b9:6b:ea:66:8a:8a:44:a6:16:92:76:84:66:d8:
96:cb:c2:bd:d2:e7:e0:10:6e:3b:02:cb:4a:fd:82:
3a:82:48:fb:b9:39:53:ba:9b:29:cb:fe:03:d2:e0:
7e:cb:47:3d:20:be:af:6a:1b:39:86:9a:95:a7:fc:
99:16:4a:d7:d1:dd:af:31:9b:24:e1:42:c9:22:93:
8d:8e:87:d4:cb:fe:63:2f:d3:66:32:22:6e:9e:09:
a2:db:ac:ba:ae:91:90:2e:aa:12:1e:ee:d6:c1:1f:
9b:d9:6f:18:9f:c4:70:73:27:10:38:00:0d:5e:b1:
39:67:09:eb:c8:61:7a:4c:92:b3:56:59:54:a7:1d:
9c:fd:13:b1:9d:55:df:1a:b2:0c:f6:dc:3b:40:4c:
e3:de:0f:b0:f1:b6:1f:1b:85:f3:60:b1:7f:70:26:
d8:c6:8c:39:e0:99:c2:4f:2e:ad:15:f0:2b:23:52:
f8:5d:d8:2b:c2:80:e5:2d:64:85:60:f4:57:38:c9:
71:b9:e7:e2:c9:42:a8:a0:e3:a8:e1:36:80:48:0f:
0d:ad:63:73:c3:9f:50:6c:b0:cd:72:b0:98:1e:3e:
09:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C2:2F:7E:12:47:F7:B5:94:A3:BE:E0:38:CF:32:82:6F:10:AD:E4
X509v3 Authority Key Identifier:
keyid:9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:90:76:3e:39:ba:08:71:c8:83:ae:5f:8c:17:fa:98:ad:5e:
7f:e2:6c:d9:e4:3f:d1:9e:2f:48:8f:21:1a:c5:46:a5:7e:a9:
93:24:1f:44:d9:97:29:21:30:3e:90:99:9f:6a:ba:8b:04:7d:
44:e7:75:d0:25:31:ac:45:b7:cc:30:6c:cd:d0:04:11:67:f5:
e6:67:78:a9:10:8d:31:50:01:41:7b:fb:30:79:a7:5c:ac:68:
54:cf:01:32:4c:b8:dd:05:32:38:c5:fc:e0:e0:7b:27:bc:4d:
7c:80:5d:2a:4a:54:b2:4c:d3:cd:e4:3e:e7:ba:1d:2e:c9:9c:
4f:10:c0:06:9e:60:2d:10:87:eb:49:a0:02:ef:ff:16:fa:c9:
eb:e5:17:18:15:8a:2f:f4:7f:8c:ea:f6:a0:b5:35:58:28:e8:
29:d9:f8:35:d5:52:f7:84:9d:89:2c:c7:2e:05:60:ea:c3:ed:
50:00:f6:3a:f2:77:d4:3d:1c:9c:8c:13:82:cc:f3:b0:1f:30:
f2:65:43:c3:70:db:9b:65:1a:c2:17:d3:5f:a7:4f:ee:66:89:
9d:4a:db:e4:1b:bb:42:91:be:59:5e:75:7a:fa:9f:bc:b2:dd:
e8:9d:a9:29:d0:ce:0e:d6:48:e5:8f:d0:02:26:0e:3d:c4:39:
26:6d:45:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:01 2025 by rpki-client