Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft
File: 8NSBnmY6qUh7aggqd9IjfhuIAqE.mft (raw, json)
Hash identifier: bHhG+UdzVB2D1Pfli0WDT6HAqjPgu/HAjDyVO/V0Auc=
Subject key identifier: F2:F2:53:07:4A:15:7F:72:F3:E2:05:EF:19:A5:A9:7C:05:41:F4:64
Authority key identifier: F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
Certificate issuer: /CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Certificate serial: 0194BD4E52895B69B756CA04ABEA6958F863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft
Manifest number: 0A8A
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: 8NSBnmY6qUh7aggqd9IjfhuIAqE.crl (hash: km9WjCw5IvMF1v1bFsN3MbdfcBm4GRuNTsu+JazjbCw=)
2: Sy3V_IgTk4ktGswgBw55mEgUx3E.roa (hash: b8dOVW1U1sP2mqNqvtuzgrz8hyIMvAWuWDCj7ROCZgc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:52:89:5b:69:b7:56:ca:04:ab:ea:69:58:f8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=f2f253074a157f72f3e205ef19a5a97c0541f464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5b:b9:3b:63:af:2b:65:c9:f8:15:76:2e:ee:
b0:93:c1:43:32:76:6e:aa:fb:a5:75:d8:1a:b8:13:
87:21:37:89:67:ba:ff:43:a0:9d:4f:58:94:4e:2a:
40:a0:92:b4:f1:0d:05:30:5c:8b:1e:21:a2:e3:d5:
03:97:33:16:74:a3:4d:6b:8c:7a:bc:7a:da:4a:12:
20:3f:7b:82:28:8a:2e:dc:e1:cc:2e:4f:24:ba:ca:
21:1e:c5:b8:0c:f0:2a:81:22:8b:a2:fe:18:58:29:
29:e1:a3:58:53:d4:e9:be:e8:be:3a:d8:75:40:11:
5f:df:46:14:8c:9b:1a:cc:70:a0:a6:a7:e0:e1:81:
d0:84:c8:99:83:d7:1b:ed:c1:b2:cc:c0:bb:4c:ac:
cf:59:e3:8d:33:21:a2:a8:45:80:ec:db:d2:3e:0f:
ef:01:fa:58:2f:0f:e0:bf:2b:94:05:27:83:c6:39:
d9:c4:59:d1:9b:76:01:d1:0c:6d:1d:3a:7c:5b:a4:
8b:c3:82:c1:1c:b4:8a:46:33:8b:fe:46:b8:c4:3c:
0d:bc:03:6b:1e:e9:26:88:37:07:a0:54:57:b3:66:
00:6f:e1:62:38:69:7c:c3:3f:a4:67:d2:49:12:32:
6a:51:df:19:a2:12:54:b3:a8:8c:1f:dd:3b:d4:fd:
9f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F2:53:07:4A:15:7F:72:F3:E2:05:EF:19:A5:A9:7C:05:41:F4:64
X509v3 Authority Key Identifier:
keyid:F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ba:05:7c:ca:82:69:63:2a:6e:51:93:f5:c3:a8:54:84:62:
20:f6:cc:2f:33:ed:04:19:cd:df:a5:43:4e:88:41:6d:9b:8b:
d9:23:39:a3:76:3d:ff:00:08:3c:33:3b:a6:85:dd:80:f5:36:
49:10:ea:81:ad:2f:c3:03:09:6d:1e:aa:35:1e:d1:ce:65:f0:
2d:9e:de:0d:bc:b3:9f:ec:25:3f:4a:c0:fd:c9:66:d6:4a:52:
df:3b:e5:1e:8c:73:f0:a1:72:33:00:2c:fa:e7:80:b3:cc:9f:
05:60:40:8a:1e:82:40:1d:53:f5:15:9c:95:06:91:02:42:2f:
ac:b1:a1:22:26:c9:d6:4b:de:06:6e:dd:ed:5b:9b:cf:79:ae:
66:ac:fd:97:42:17:4d:6a:1c:39:65:0e:12:d3:74:2c:2b:da:
87:1d:26:be:04:6a:57:22:b5:56:5f:02:41:55:c2:e3:5d:dc:
76:a0:17:be:d8:dd:7b:b7:0b:97:93:ca:f9:ca:84:fa:ee:34:
4e:d3:69:ae:9c:2f:f9:a4:99:86:bd:94:1c:6c:e5:40:88:4e:
b8:5a:15:a8:be:6e:3c:09:db:52:79:ff:53:80:96:9d:98:6f:
b6:7d:10:c1:1c:30:c6:7c:be:ba:6a:cd:21:0a:ba:ae:0e:9f:
70:44:f6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:16 2025 by rpki-client