Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
File: s8hW6VbErdthWY88JInyvfbtHRg.mft (raw, json)
Hash identifier: Tqe8zy+EziL3xf/egM/bveuurU9N0EbSaVRZbTXJVk0=
Subject key identifier: 83:F2:AB:2A:E0:31:0C:75:FF:47:52:B0:58:E7:1B:75:4C:77:F3:84
Authority key identifier: B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
Certificate issuer: /CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Certificate serial: 0194BD175974152547C64F6C582C47517B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: Kc4V5tzdi4xhmWeJoyXZlmZAD6U.roa (hash: gVw1MMRDs2rY597vN0xWVEhdeHW2cAUodm7HsTOIyc8=)
2: s8hW6VbErdthWY88JInyvfbtHRg.crl (hash: HGuS7UooEFOduxobUOqPSPbMDflTi/fogN8XFF2s6YY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:59:74:15:25:47:c6:4f:6c:58:2c:47:51:7b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=83f2ab2ae0310c75ff4752b058e71b754c77f384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a9:9d:34:e5:73:ba:1b:bd:c0:05:5c:e1:14:
44:e4:e4:e4:4b:0e:73:ca:fd:68:68:5d:50:86:85:
7a:3c:0c:09:00:40:3b:91:2b:59:3f:44:5d:cc:c9:
59:a4:a3:83:23:fa:76:57:da:91:97:01:2a:90:8d:
44:28:37:06:c2:79:a2:40:d9:ac:be:fd:d2:17:a1:
81:a8:a1:ee:08:f0:a1:c3:19:3a:8d:68:42:6c:5f:
87:48:5c:d1:47:48:ef:45:4b:1c:c6:4b:d0:28:fb:
f0:00:40:c1:d6:37:a3:8a:5c:f9:6b:5a:ad:b1:b7:
97:1b:89:30:e4:8b:04:33:0f:62:5e:6b:db:5e:3b:
f5:51:83:01:9b:75:a2:c4:a0:a1:22:e8:42:5d:85:
29:25:5c:0e:48:f0:73:30:45:51:6e:47:5d:8b:39:
60:15:86:f0:09:54:82:90:a2:03:5a:e4:27:ad:99:
33:b8:b9:07:4d:6f:15:25:b7:f4:ce:d5:ce:98:93:
fb:0f:33:64:55:6e:c6:0e:85:16:0f:87:ab:8a:1c:
37:17:d4:15:86:c4:18:b4:b4:6e:b5:c4:a1:ab:5d:
47:23:1c:72:2e:c0:da:87:ae:ce:c0:1d:b9:9c:79:
f1:0e:db:99:ec:22:10:e7:ff:0c:66:e2:10:77:29:
ed:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F2:AB:2A:E0:31:0C:75:FF:47:52:B0:58:E7:1B:75:4C:77:F3:84
X509v3 Authority Key Identifier:
keyid:B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:3d:36:f6:ce:d7:a1:6b:51:7c:ce:19:67:2e:75:88:9c:54:
c0:d1:e5:20:67:1a:02:a7:ff:b7:54:4f:81:12:df:35:0c:70:
66:91:85:ad:22:bb:14:69:f3:0e:e6:f2:53:d2:2d:1b:a6:d1:
d6:00:ae:bf:c3:fb:ec:5f:a8:10:7d:18:b5:5d:66:68:2d:7c:
0a:51:95:1c:be:a7:c2:e2:ec:44:51:d2:d9:e7:07:68:b6:65:
a5:ab:c3:e0:d7:14:bc:df:27:a5:cd:2e:ae:35:4f:09:23:8e:
de:ee:09:c7:1c:7a:05:56:76:95:f8:7e:42:c2:51:11:b0:8d:
2b:f8:04:94:72:52:79:5f:94:36:9b:bb:0e:f1:98:47:d3:db:
0a:a3:3d:77:cb:1d:54:a0:22:89:8a:e7:27:1f:bc:9c:d5:e4:
32:ea:82:48:4d:cc:83:02:8a:83:d4:8d:c9:ef:3b:d6:91:14:
78:f5:f1:ff:7e:37:be:c5:a1:ff:69:fc:1e:f2:1c:83:41:7b:
73:46:ce:7d:bc:82:c6:c4:b0:8d:6d:7a:93:a5:59:8d:3d:71:
f9:73:8e:ea:6f:61:c3:c7:7b:a4:8d:8a:f0:2c:a7:db:96:1c:
3a:d8:04:cf:44:9b:ab:f1:7d:bd:f3:3a:d5:15:7a:36:a0:f2:
ed:a1:4c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:15:01 2025 by rpki-client