Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
File: 8UPRPHu9KqFfVnfBOawzyGeHnyw.mft (raw, json)
Hash identifier: Z0X4QcVse/O09lmcKOq6PMTC6AFolTLxxOvzrfZCpqs=
Subject key identifier: 3D:6F:6D:09:39:3C:8A:6D:75:7C:00:CA:7D:29:4C:80:72:4A:0B:53
Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Certificate issuer: /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Certificate serial: 0194BD4EAF630B9B11D7276971A49532BD2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
Manifest number: 047B
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: 8UPRPHu9KqFfVnfBOawzyGeHnyw.crl (hash: 8J1kS6JZZesT/yytdfFOZ77esZsSX6eDnYimK9qZGM4=)
2: UMmv-WY7B5qYJViInJvlNV476mE.roa (hash: jHHOgpNZRXbrpDROEuRDFCxUXMl5uaCZV9NM+NW4eXw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:af:63:0b:9b:11:d7:27:69:71:a4:95:32:bd:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=3d6f6d09393c8a6d757c00ca7d294c80724a0b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4f:57:83:eb:44:52:4e:10:18:44:fd:d7:6d:
b0:49:8a:61:20:04:f1:62:28:46:02:0c:b8:61:b8:
31:90:bd:e2:bd:15:e2:ee:4f:6c:ef:5e:24:21:b5:
09:de:e6:7d:23:38:9f:9b:27:2e:02:f0:80:f5:e7:
d7:62:4a:39:1f:36:fe:1e:42:de:11:a3:a8:fa:87:
42:8e:6b:a5:07:42:14:20:dd:db:81:1f:c6:06:4d:
6f:a1:82:2b:b2:42:a4:62:cc:4f:e2:3e:12:96:97:
45:bf:b0:33:a6:03:a1:e4:5f:63:01:bf:b0:85:6b:
b0:95:d9:61:ce:97:cc:18:2a:47:5f:87:90:1c:79:
19:28:c7:a6:14:0e:df:4b:c0:46:a9:ec:58:70:40:
fb:7e:24:e1:b4:cf:ab:87:12:66:fa:d3:fb:73:fb:
8e:18:91:d4:4e:e1:e5:30:96:81:d6:f3:e3:36:74:
bf:0d:bd:da:e5:3c:75:ee:81:7a:78:4e:53:b4:77:
f8:87:bf:9c:97:5c:60:77:ab:ef:03:78:27:c8:d2:
03:0b:47:52:d2:ff:88:48:4c:1d:db:46:c8:65:4b:
94:99:f3:0e:20:39:49:2a:3c:03:83:8e:2d:53:eb:
3d:70:8a:01:28:3d:87:15:d3:f0:61:f9:a4:db:79:
78:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6F:6D:09:39:3C:8A:6D:75:7C:00:CA:7D:29:4C:80:72:4A:0B:53
X509v3 Authority Key Identifier:
keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:31:ce:b1:97:d4:7b:69:3a:24:fb:78:2f:a7:d7:99:ed:26:
09:5a:b7:fd:80:ec:d5:ea:82:a7:15:7e:13:a5:4a:0c:21:9f:
f3:fd:ec:2c:ef:85:ba:55:c6:e8:3d:4b:f6:4a:43:59:d4:42:
3d:67:57:f3:ee:69:5f:30:a7:40:d4:30:ab:57:da:5d:89:0e:
39:92:18:d3:3b:fe:34:c7:5f:11:df:29:93:55:e2:3a:42:a0:
62:51:c6:6c:90:7f:aa:e6:6d:35:55:e7:4c:ab:a0:09:f2:b9:
7b:4d:9f:76:ca:0e:38:1f:84:e8:f1:4a:82:61:85:f8:5e:32:
3c:11:03:68:52:a9:32:fb:10:93:d3:a9:a3:27:6b:79:ee:d2:
b1:03:44:80:97:e5:96:30:5b:1d:97:eb:e9:ff:8b:0f:38:f7:
28:de:ff:e6:54:50:f0:fa:03:e1:ac:e8:65:8e:fa:6e:dc:04:
f0:98:73:d8:5c:11:a4:8e:1c:fc:21:e8:29:9f:05:6a:ab:2e:
80:33:a1:49:5b:6a:f3:ce:14:38:45:e2:49:61:96:6d:45:ec:
8a:f2:d7:b8:a0:5c:d3:f8:7c:94:99:27:ac:0e:47:ca:39:b9:
aa:d9:86:46:b8:8e:8e:d8:9b:cb:f5:ef:eb:41:5e:0d:67:b9:
1a:b3:12:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:37 2025 by rpki-client