Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
File: 8bv5vuUx897i0Du_Tmnvgu7bma8.mft (raw, json)
Hash identifier: qGSXTbjwGScnyk9Frqn8xfZJ5gbeqycCVF1HwAsgcns=
Subject key identifier: 46:48:9B:EC:B6:65:F5:10:5E:DA:34:FF:36:71:E4:EA:D9:83:EF:11
Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
Certificate issuer: /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Certificate serial: 0194BBCDF65AC33D8E6DC8E15A2C21595BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
Manifest number: 0FD4
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: 0tRdpRIVKa8GC5rndgVUBjWyq_0.roa (hash: zQ8BfDuwqWf4BKhuE29aPhx2YBI5m36iLFxsbczWouw=)
2: 8bv5vuUx897i0Du_Tmnvgu7bma8.crl (hash: 0DGzketoWewvyPgvGD7dmncy+bvfH0Posd2yp5z/mxk=)
3: MkYvLYpqbrY1k1hziBPcgNzDk5A.roa (hash: 9jZ4rUSHtTJBWwTiSaqDWjUP8V/ZrhGAYaJndS1KB3A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f6:5a:c3:3d:8e:6d:c8:e1:5a:2c:21:59:5b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=46489becb665f5105eda34ff3671e4ead983ef11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bf:ce:a8:8b:7a:56:0c:89:d8:12:ad:e9:7e:
d0:d8:89:5a:9f:21:6f:45:cb:f1:da:05:42:42:42:
ea:b1:e4:15:4b:55:45:55:e8:e0:a9:b5:d3:62:b1:
74:c5:68:a8:3c:d9:77:e7:5b:9d:fc:cf:c5:bf:5e:
5d:b7:51:9b:d0:b2:f3:f3:08:31:2f:05:f2:f6:ea:
cc:36:57:d9:ef:c3:45:d8:e1:9e:d9:9b:35:19:d4:
27:5e:d5:57:f5:e6:d5:31:f1:bf:50:ab:6c:56:a0:
e8:61:30:31:ba:34:39:cd:d5:b8:2b:82:44:6a:fc:
e5:93:9c:c7:7f:d7:36:46:c8:d6:bb:39:7a:eb:44:
a8:df:09:d9:8e:f9:c6:2b:b1:01:80:f9:36:5d:70:
c2:f1:5c:28:c3:25:c0:89:3f:f7:59:fb:2a:03:6c:
76:af:e7:2a:01:df:e4:ba:ec:ca:92:15:fc:e0:e3:
8b:ac:fc:6a:bb:af:3f:a0:cc:f6:8b:5f:19:c6:67:
1f:72:47:4f:b9:14:b7:d1:27:df:c1:70:e5:a8:a3:
e8:15:9a:da:ba:18:85:84:0a:93:89:3e:a3:64:1b:
a0:0b:e3:3c:28:09:9d:83:64:a8:3f:cb:c5:b7:a9:
aa:46:d4:87:f4:a4:de:f5:82:15:b7:45:2d:f5:95:
61:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:48:9B:EC:B6:65:F5:10:5E:DA:34:FF:36:71:E4:EA:D9:83:EF:11
X509v3 Authority Key Identifier:
keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7f:ba:19:d8:c2:ae:24:3e:99:50:0a:12:cd:64:21:f1:07:
f7:ad:b3:2e:82:41:60:cf:5f:5f:41:7d:3f:41:6d:c7:75:cf:
1c:fe:b0:c8:86:d7:72:11:33:ee:7e:2d:cf:fd:2b:cf:2c:0a:
24:44:03:4a:26:ca:80:58:4b:6b:eb:d6:f9:26:45:52:11:04:
e5:29:84:11:56:22:19:ea:e4:31:6e:4e:9d:f8:ff:d7:7c:f3:
41:ff:e1:5a:2c:28:c9:d0:7b:c2:e5:62:1d:ad:4c:5d:1c:9c:
e3:5a:21:ef:c7:7b:29:ae:e6:e0:4a:c6:ee:30:b0:7d:c9:f3:
86:0b:5d:e2:e3:19:bd:ee:1a:ab:df:b1:a5:bc:68:23:68:88:
c6:2d:3d:90:05:61:c7:32:82:a7:ea:fd:70:e5:10:ae:b2:c1:
e1:26:c6:69:72:64:e5:16:56:d9:33:24:58:c4:28:a4:4a:70:
82:ec:f2:58:eb:85:ee:78:50:18:93:b0:69:92:b6:96:e3:bb:
06:16:af:07:a5:ba:00:15:59:9b:0d:9d:23:24:c1:bb:16:ab:
da:70:f0:d8:97:62:0b:c7:13:3b:44:60:f5:b0:8d:cd:71:fb:
9d:ea:06:d6:87:c5:8d:a9:6a:67:57:91:fc:c0:6f:6e:39:2d:
31:70:83:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:57 2025 by rpki-client