Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.mft
File: 8HHkN5gsw0b26BfKZIknI-21QZo.mft (raw, json)
Hash identifier: Ez/rhS5MMx8SPnR9Z+HH0LSRWFHnyxvGmOutWE7jeNY=
Subject key identifier: 6A:07:44:31:AE:3F:FF:83:F9:38:94:71:C8:C4:82:1A:04:F2:A0:F0
Authority key identifier: F0:71:E4:37:98:2C:C3:46:F6:E8:17:CA:64:89:27:23:ED:B5:41:9A
Certificate issuer: /CN=f071e437982cc346f6e817ca64892723edb5419a
Certificate serial: 0194BC72C0BF34A544E79824BC2B93B4F761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HHkN5gsw0b26BfKZIknI-21QZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.mft
Manifest number: 0D8B
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: 8HHkN5gsw0b26BfKZIknI-21QZo.crl (hash: xcWsF+4NNk3LrU5iqgh3ojGDGkdCb7azGrs/hBPM+Cg=)
2: Wb0clcxCuCcUH9RDxENV44_1l9w.roa (hash: IOO34gWbQwbQwVQDhS544nKGrCLE+a+zuAW9waRkyRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c0:bf:34:a5:44:e7:98:24:bc:2b:93:b4:f7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f071e437982cc346f6e817ca64892723edb5419a
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=6a074431ae3fff83f9389471c8c4821a04f2a0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:6a:68:2d:27:e1:4b:a3:6e:51:df:24:41:
6f:66:17:93:d5:4d:79:59:ef:0c:38:f1:8c:c6:87:
9a:7a:44:99:88:40:a4:21:e8:38:c3:29:74:fb:ee:
49:18:b2:e5:70:3e:f4:85:42:dc:8d:56:c4:9c:fd:
91:e3:58:fd:a5:6c:fb:9f:7b:71:79:52:71:37:e5:
dd:99:64:36:d4:62:0c:1d:38:e0:c8:d3:c8:0d:7b:
5f:08:f4:a3:be:57:a4:bc:7c:9f:ef:90:f1:f3:91:
34:0a:c0:88:76:6f:13:3e:c5:23:57:60:4c:25:f1:
93:a8:18:e3:03:06:1e:2d:ab:80:b2:b4:4d:33:d8:
60:5e:cb:de:f9:ce:de:f9:95:56:cc:b3:dc:d4:78:
be:2d:82:f3:0f:6d:85:b9:f9:53:5b:cd:44:68:93:
17:cd:95:28:c8:ab:d9:c3:e5:34:d7:23:1c:02:f2:
ff:d5:f2:5f:75:89:ec:0e:c3:94:71:7a:13:e5:20:
1f:0d:1e:11:04:ba:60:e5:1f:57:e9:96:a4:e7:52:
c9:3b:66:86:db:5c:cf:04:70:dc:80:bb:5f:04:9d:
16:2e:58:05:8c:aa:ef:b9:95:03:4b:1c:6d:a0:0f:
a6:52:b1:a9:3a:cd:f5:f2:3e:1e:7c:cf:e3:01:0a:
68:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:07:44:31:AE:3F:FF:83:F9:38:94:71:C8:C4:82:1A:04:F2:A0:F0
X509v3 Authority Key Identifier:
keyid:F0:71:E4:37:98:2C:C3:46:F6:E8:17:CA:64:89:27:23:ED:B5:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HHkN5gsw0b26BfKZIknI-21QZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:18:cb:e3:43:d4:50:50:0e:9e:64:fe:0b:2f:e9:ab:bf:a9:
f7:71:ca:fa:1e:68:a0:56:35:85:de:fc:64:6f:45:09:12:23:
bf:ee:b2:07:85:20:7d:48:7f:0c:5f:88:6b:82:7b:f8:25:7a:
ab:4c:a4:ba:df:76:52:0e:20:8a:d8:8d:41:ae:8a:36:95:88:
b7:26:93:bf:04:09:ed:8c:21:56:8d:fd:65:64:3f:5f:b6:2b:
69:2a:1f:b2:5c:a6:21:8f:e0:c1:81:cc:9f:f2:9a:47:8b:ff:
d8:35:d7:cc:f9:32:d3:17:19:7c:aa:96:83:68:89:f4:1a:8e:
dd:e7:9b:5a:5e:d7:9b:a4:da:d0:5a:ba:d2:a8:d1:a2:1f:87:
dd:ee:93:5c:ec:f1:17:54:08:7d:e9:97:c5:e1:ea:2f:f1:3c:
4b:e6:33:c2:2e:47:ac:82:32:a8:43:21:15:81:f9:70:44:37:
35:09:74:a0:71:95:f3:2f:07:0b:90:73:68:e4:87:73:14:e0:
e1:d9:2b:4a:5d:5e:b8:d5:24:c0:bd:43:8d:f3:51:ed:b2:dd:
ce:c9:70:74:4d:7f:0b:0a:99:8e:a6:af:fc:20:84:f6:8b:2f:
04:c3:19:e4:0a:81:6c:59:40:81:1e:46:6d:16:44:05:24:ea:
b5:ca:a4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:41 2025 by rpki-client