Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
File: 88iZC9bpMHET6DgyxpFf2lys_C8.mft (raw, json)
Hash identifier: iP++5NVZyESq6cMTTmpP5Smedy7zo5DNYIKyWHOoU/M=
Subject key identifier: 4F:E1:4C:DF:8E:91:4B:9D:1A:5D:56:4A:F3:BB:27:F8:9B:C8:D3:11
Authority key identifier: F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
Certificate issuer: /CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Certificate serial: 0194BD1790F1CEC6EF98655C39625A17EB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: 88iZC9bpMHET6DgyxpFf2lys_C8.crl (hash: 0B3ukTf49QsshFRI9SsjX1CjpZcDz0jbeNDTS+3a61M=)
2: ic2AvQV4fn5mQGurv_9LydC-BbI.roa (hash: mD0dAfaF87izkBorR76KrAgNEqpqvPq8C6YXxT1+QYI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:90:f1:ce:c6:ef:98:65:5c:39:62:5a:17:eb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=4fe14cdf8e914b9d1a5d564af3bb27f89bc8d311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d0:45:36:23:11:ac:b7:df:03:1a:f9:74:de:
59:ae:35:a0:db:4d:0f:f3:a9:3a:aa:eb:51:9c:b0:
ff:1b:ba:ce:74:6d:8e:1a:58:d2:93:26:4c:c4:00:
89:ae:6f:8d:1a:2f:74:29:3a:ba:68:62:16:6e:cd:
29:1e:89:41:16:72:b2:0b:58:3c:5e:50:b7:52:e4:
81:68:4e:4e:85:d8:64:7d:84:48:d0:05:ac:ab:30:
30:85:4d:51:ca:c2:fd:85:ce:62:9f:72:08:75:cd:
1a:ef:b2:54:bb:46:5b:b4:aa:ff:89:7b:47:56:cd:
24:d2:71:b8:0a:fc:15:86:fc:19:05:1d:6c:58:49:
57:65:71:24:a2:2b:3e:59:81:13:eb:c9:27:d5:36:
59:ea:1a:13:9f:ee:7c:e1:44:41:b3:36:f3:8e:36:
4a:e8:c3:5d:0d:65:2d:3b:a8:39:86:81:ad:64:2b:
ee:cc:26:c4:42:d5:29:78:20:84:87:4e:68:89:5d:
42:69:23:9e:d8:81:fa:d7:cf:1a:8a:8b:36:ab:2e:
36:59:31:8e:36:5b:99:10:38:16:1d:38:d9:81:68:
b0:1e:59:33:4b:49:40:7f:69:05:85:54:45:b3:53:
63:7f:85:69:bc:13:c8:d1:df:ad:1d:dc:d2:48:34:
1b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E1:4C:DF:8E:91:4B:9D:1A:5D:56:4A:F3:BB:27:F8:9B:C8:D3:11
X509v3 Authority Key Identifier:
keyid:F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:eb:03:32:b7:1c:62:19:57:11:2d:d9:41:34:bf:7a:5a:1d:
f2:14:2c:3b:24:d2:b7:02:d3:cd:88:29:74:48:ba:ff:d2:9a:
87:50:d6:9a:d1:79:26:fb:35:7b:a2:99:8f:71:40:7e:4a:8d:
1a:ce:b5:4e:e2:fd:4d:51:8a:0a:e8:91:d5:48:aa:05:35:76:
30:8d:c9:1f:9d:52:4e:95:fc:ac:7f:43:f8:67:6d:95:32:8a:
38:e4:bc:f5:48:05:2d:f8:63:67:51:5b:1d:db:5b:00:bc:68:
89:36:18:08:a7:4e:d0:07:70:2c:8d:a8:f5:bc:b7:cc:e5:cc:
e4:87:6e:fc:ac:8c:12:6e:85:2f:e0:74:06:e5:f5:22:c5:14:
e4:ea:13:67:a3:4f:eb:ed:34:0e:9a:97:a2:65:dc:0c:30:db:
74:e4:61:70:5b:28:d6:a9:85:ab:3e:2c:a4:0a:28:1a:8c:d4:
d5:8f:0d:43:37:54:1a:87:bb:3e:27:29:d8:2c:aa:a8:4e:26:
63:1f:87:47:9b:78:75:73:b7:10:90:25:be:6a:2e:a3:d3:c0:
cd:8e:60:7c:bf:bc:75:ec:2e:02:93:f4:ef:46:13:4c:eb:ea:
60:cb:93:61:32:a6:0b:de:87:dc:cd:1f:27:cd:86:b3:36:5e:
14:90:7a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:42 2025 by rpki-client