Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
File: 8fQjYKOXCoCAFv342NujlsWh0DQ.mft (raw, json)
Hash identifier: yf42zi2WUW9ztFhGXCM9bnHOXkkvbAvq74go5ysiBPk=
Subject key identifier: E7:4E:BB:8B:29:8B:3A:7B:5B:86:60:A6:94:03:C3:5C:58:B3:35:F2
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 0194BD853AB64B7699B25EA9BAC70B2CD2BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: 8fQjYKOXCoCAFv342NujlsWh0DQ.crl (hash: Ft9lOpFg/HinT+E2aOdc8nYipWmOsohz7ysCrOmdOQY=)
2: XuSi8kXeBm_B8q7AzG1ldyxBl-U.roa (hash: VfVAqS9+xLim6Zr3WY+RPdJPag+yTxoDEH7wLbaR7Ko=)
3: w31LkDj-LMN5WUk5kbozH3jiIBA.roa (hash: y5CKPYN2xY1V73cNd1uJ1GGyUm72KbaIXZc2V61uNZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3a:b6:4b:76:99:b2:5e:a9:ba:c7:0b:2c:d2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=e74ebb8b298b3a7b5b8660a69403c35c58b335f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5c:d4:e7:3f:6d:86:90:98:a2:60:99:f5:37:
0b:80:cb:b1:86:7d:bf:60:86:f7:c1:a6:c4:e8:e2:
7e:59:d9:11:af:6e:d7:d6:30:4a:ad:87:86:c8:51:
7f:5b:57:87:55:24:95:fa:c7:de:96:4e:fd:f3:36:
ff:7c:6f:74:fb:f2:8a:0c:b2:58:b3:05:e5:f6:85:
1e:9a:fc:9f:bb:86:8a:6b:30:40:54:1a:42:d6:01:
dd:e7:81:db:0f:c5:8e:ce:8a:36:e5:53:e3:b9:37:
6b:0d:25:e8:49:cf:3a:52:d9:46:6e:3c:dd:76:3e:
85:fb:11:f6:64:37:75:dc:b6:1a:c7:3a:82:1d:cf:
a6:a4:f4:89:09:ae:13:89:d2:28:b7:a6:36:a0:fc:
09:47:a9:b7:87:56:97:f6:02:ab:ee:cc:9f:bc:db:
5f:ed:38:16:47:1d:cf:16:92:a9:b5:be:d1:92:96:
13:b9:99:ba:a2:a5:91:90:f6:59:4f:55:00:bb:08:
bf:39:37:fc:a4:2f:7f:ef:7c:79:dc:8e:c3:03:3c:
b6:e4:14:19:75:17:bc:83:35:30:8b:c3:59:cf:07:
f1:82:07:34:b2:6b:e4:65:7d:54:e9:f0:0b:fc:6d:
cd:62:14:79:90:cc:58:b0:26:cc:20:bd:f8:30:75:
75:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4E:BB:8B:29:8B:3A:7B:5B:86:60:A6:94:03:C3:5C:58:B3:35:F2
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4a:b1:b3:9f:16:7e:e2:63:f4:f7:16:7c:ac:d8:c2:a2:7c:
53:50:c8:83:c8:0e:b8:9d:b5:99:d4:2d:01:15:5c:41:79:1c:
9f:7e:36:9c:15:c3:b8:87:4c:ae:3a:f8:4c:02:85:ea:da:84:
c1:e0:e6:7f:dd:bf:a7:fc:f0:79:72:01:47:e8:c6:2a:fa:f0:
65:eb:0e:4c:3e:e5:42:88:c4:05:9d:a7:70:00:6c:d6:1c:a4:
ec:48:9e:81:9b:80:ff:21:8e:95:a5:b8:f9:d5:a4:bc:1b:f9:
58:36:04:71:e3:0b:0d:27:4b:56:22:ee:e2:58:02:2a:ed:c1:
c4:89:7b:18:db:99:cc:73:18:b4:6a:00:82:3f:b9:12:c6:99:
fa:c8:d1:5e:af:09:70:d0:b6:de:20:e9:18:52:f8:bf:34:70:
9b:33:5e:88:74:73:38:5c:7c:59:9e:0e:af:74:6b:e0:ff:aa:
a7:2e:10:1a:04:e6:25:c9:94:15:0b:7f:32:42:f5:37:c7:99:
09:2d:e0:62:68:71:f2:f7:eb:43:13:46:bf:b9:90:63:be:ad:
d7:f6:f4:ae:d9:fb:fe:cb:c6:93:90:df:d0:ee:37:6a:c2:9f:
75:85:18:5a:e5:b6:67:74:2b:2f:80:83:44:1a:a5:b7:fe:e0:
3a:77:63:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:57 2025 by rpki-client