Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
File: R8CqLp6CAO7mcCaUKixSSIAvM7g.mft (raw, json)
Hash identifier: i4Eokx/GWvkJ+QhwdQVT2wJO/lztscZyeDZAe98owZ8=
Subject key identifier: C4:93:CD:C9:07:C7:21:EB:26:FC:6E:B9:F0:53:81:02:66:59:FC:02
Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
Certificate issuer: /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Certificate serial: 0194BD1757713616C9C836C49BC23EE1B178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
Manifest number: 121F
Signing time: Fri 31 Jan 2025 16:00:10 +0000
Manifest this update: Fri 31 Jan 2025 16:00:10 +0000
Manifest next update: Sat 01 Feb 2025 16:00:10 +0000
Files and hashes: 1: R8CqLp6CAO7mcCaUKixSSIAvM7g.crl (hash: JMtszkvrXz6aJVTv0y/XFwB/8Vwmz6Ig551hBdHKWrc=)
2: qkYxxaIiN3jcZulu8UiMqofxjLE.roa (hash: cRshqAIAXgfUlz/OBpedkq/8h7RRrBNX/FMXdEVJZFQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:57:71:36:16:c9:c8:36:c4:9b:c2:3e:e1:b1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Validity
Not Before: Jan 31 16:00:10 2025 GMT
Not After : Feb 1 16:00:10 2025 GMT
Subject: CN=c493cdc907c721eb26fc6eb9f05381026659fc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:56:85:80:a6:a2:c3:67:f9:1d:87:6a:4f:7d:
7d:b0:de:f9:b7:7a:58:73:b5:c0:d4:46:c0:01:65:
8f:8f:21:d2:f2:a5:d4:82:d5:13:7e:ce:8f:15:4c:
8b:34:38:1b:1b:55:09:a8:60:26:65:fe:94:9c:8b:
99:b8:fe:fc:5d:7c:a1:67:4c:d4:97:06:10:f6:90:
be:ff:de:38:ed:38:2f:ce:01:eb:75:73:69:bd:be:
55:1c:18:08:9f:f5:05:b0:8e:76:3e:d6:5b:48:37:
f3:d3:c3:48:0d:87:5b:71:25:ae:1e:2d:b3:5a:71:
62:24:f2:ca:8d:2a:c0:6e:4b:22:8b:e6:95:01:4b:
b3:6b:57:09:18:3e:d5:94:55:f1:2d:81:9b:e5:eb:
1d:8c:31:72:17:6d:88:7a:e6:32:c3:44:fd:d8:e0:
bc:9c:24:f9:35:3f:2f:a7:42:e1:02:86:5f:4d:20:
e9:fd:f3:13:f1:88:51:18:2e:d6:cf:0c:90:20:db:
09:8a:15:d5:46:5f:69:97:9d:ef:6e:d3:a1:f8:d1:
46:62:12:db:c2:3b:d5:22:b3:4e:1b:a3:b6:8c:d5:
85:92:b7:cb:c1:f1:f6:40:df:0f:8a:75:cd:4d:aa:
98:a4:42:67:02:d2:e1:68:4d:c7:b7:a1:19:c5:b7:
90:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:93:CD:C9:07:C7:21:EB:26:FC:6E:B9:F0:53:81:02:66:59:FC:02
X509v3 Authority Key Identifier:
keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:79:84:ff:77:3f:fb:fe:c5:72:0e:bb:6b:26:4f:c8:ec:4b:
34:2a:0b:47:28:f7:f7:55:0d:8d:d2:39:ab:91:26:86:47:5d:
b0:98:7f:d3:49:94:94:c4:1f:ae:00:d3:e6:76:ba:4e:04:14:
7c:f1:e5:07:2f:98:5a:28:24:9d:65:91:b7:45:5c:cb:7f:cc:
4e:dd:9e:4d:f6:93:d3:13:81:e1:40:f8:4c:68:b4:d7:00:d5:
b3:61:c4:74:91:29:91:af:ca:86:28:f0:ab:2e:31:d3:83:be:
43:2f:4a:3c:6c:5f:3d:14:eb:55:36:f8:8e:66:5d:de:87:06:
73:ee:07:07:0b:e0:bf:a8:ae:59:39:8f:76:c7:e2:ce:f7:db:
46:60:e6:6b:95:d2:33:f1:45:08:5a:37:c8:7f:2b:98:a3:ba:
1d:4b:b9:87:d2:5b:84:41:b2:3c:87:43:72:f1:3e:79:1a:a1:
52:4b:42:1c:76:ee:54:bc:25:8a:6d:65:8d:cb:2c:8a:0e:9a:
85:b0:53:dd:c6:c4:a7:6b:a7:c5:dc:39:35:fd:9c:89:0b:4d:
95:2f:84:0a:e4:3a:d9:e5:e8:b8:23:67:4a:e0:0c:4d:b4:e9:
06:3b:3b:04:be:3a:28:2b:d6:4a:23:45:19:a6:1a:d3:94:d0:
05:30:bb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:11:59 2025 by rpki-client