Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
File: k8XxCvi8tfxuNKRztKbK560C2QI.mft (raw, json)
Hash identifier: BMVbgImJzcGSivrVHkfoTThM1Ve/tdA+6pxur8+u1Sc=
Subject key identifier: 38:01:4A:2F:C7:0F:AB:77:E1:10:6C:7C:C3:1C:BC:04:EB:4E:19:09
Authority key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
Certificate issuer: /CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Certificate serial: 0194BCA9F98D0B219B145CE44DA276081EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
Manifest number: 084D
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: k8XxCvi8tfxuNKRztKbK560C2QI.crl (hash: 1FLmV1ib8CM3ubOe39w6xSPgto22LfQ9kE7NENZZvOk=)
2: qSlCWIoaBSlT8FJxAqdM3S_JMeY.roa (hash: Zvj6zybG7gbhDX6oesOJPa1rvAoqiKQGPqATyljkt6o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f9:8d:0b:21:9b:14:5c:e4:4d:a2:76:08:1e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=38014a2fc70fab77e1106c7cc31cbc04eb4e1909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:fd:d8:46:9d:85:e5:15:6e:0d:bb:ef:83:
73:53:10:3a:59:be:9c:ca:89:ec:0f:3c:27:f7:18:
7d:aa:e6:ed:3b:df:63:c9:71:de:45:f1:68:a5:fb:
77:dd:aa:87:f2:7f:d5:73:cd:cd:ee:1a:c4:41:d8:
46:f4:8e:94:a8:37:b0:d5:1c:77:13:da:79:78:93:
87:15:c2:9f:4f:ec:68:ed:2d:9a:8b:df:9e:d7:74:
20:b4:e3:fb:d4:06:cb:76:56:9e:1c:1d:37:00:a8:
6d:ed:0d:48:c4:5e:48:52:e9:7a:c2:dd:aa:49:95:
cc:99:9f:d3:07:ee:60:5d:34:8c:d7:68:82:f0:ef:
8b:53:de:c9:99:a3:2d:b0:59:c5:2f:dc:71:f2:cc:
54:5d:e7:b8:5c:40:74:86:45:fb:50:e7:98:f8:ae:
07:c1:06:d0:f2:32:ae:5a:2b:44:d6:10:eb:5a:0b:
77:38:cd:9a:f8:28:8a:97:da:79:ac:39:f1:2f:fa:
86:60:be:c7:ca:49:c3:38:1d:e1:a6:9a:98:84:c4:
8c:d1:c2:b3:01:88:2b:b8:e1:32:b6:a1:65:93:d1:
50:1f:d3:56:ec:f6:fd:ae:89:aa:1e:7f:1c:14:29:
68:8d:54:9f:ee:58:06:9f:6c:ce:ed:00:01:3c:f4:
b0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:01:4A:2F:C7:0F:AB:77:E1:10:6C:7C:C3:1C:BC:04:EB:4E:19:09
X509v3 Authority Key Identifier:
keyid:93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:aa:02:e0:fd:c2:da:23:3d:b8:d4:8d:c2:f8:c8:7d:07:2d:
62:25:cd:09:92:fe:c6:50:7b:8b:c0:cb:20:61:f5:cc:c2:83:
f0:ec:d5:77:d4:4b:c2:74:3a:2d:10:34:6c:b8:b0:d2:ce:32:
9d:1b:0f:4c:50:9f:a0:84:f6:d0:02:af:54:fc:39:89:be:f3:
15:cb:0d:18:b9:9b:2a:52:53:d5:c8:a3:80:18:1e:10:de:d1:
7d:6c:87:2a:b7:46:43:34:4a:bf:18:8c:5f:a3:47:c6:63:ac:
64:e1:24:af:66:7a:69:6e:20:fb:67:dc:10:b2:6d:57:9e:60:
96:e8:f8:6d:3d:68:1b:f7:20:7d:7e:01:bd:7d:96:f3:76:58:
be:e4:94:f1:97:a6:39:fb:9d:fe:a1:18:8e:25:23:7d:81:ac:
36:7d:2f:0f:45:fb:9c:ec:0b:01:87:72:25:a8:d5:0d:7a:fc:
e9:99:73:1a:54:62:37:ba:6c:ac:93:e7:9f:2c:9d:e1:50:39:
1f:1e:12:eb:e8:6f:78:7b:51:8e:bf:fa:f6:09:6f:bd:44:12:
1f:cf:9e:14:17:44:ae:51:eb:16:6e:99:bd:99:ac:a6:b2:3a:
f0:d4:b3:14:3d:2f:db:d5:d9:1d:4b:11:17:d3:dc:08:bf:f7:
1d:92:83:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:24:35 2025 by rpki-client