Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
File: 8phZtw6kUOE62ockwOtr7syNqpE.mft (raw, json)
Hash identifier: ZTnn7UHmV1tzofYhbNC8pNHQ3SQ9Dz4WJ4sYNC3lzlo=
Subject key identifier: CF:17:30:56:E5:B9:DD:1F:68:EE:E0:15:B3:CD:47:1E:0E:F2:CA:B5
Authority key identifier: F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
Certificate issuer: /CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Certificate serial: 0194BD4E71FAEB56777AB12717EF0B452265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
Manifest number: 048C
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: 8phZtw6kUOE62ockwOtr7syNqpE.crl (hash: 0/Q+D320kFbxUU2oYaKV7SfOSsKJZHm85e2vUnE2EYs=)
2: ieIY7b0KhvQU4QgMPfI50NN4QnY.roa (hash: 5XIl/Vpt8manbA7AG4mG7L9mNTT0fdofSZrC08n/ke4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:71:fa:eb:56:77:7a:b1:27:17:ef:0b:45:22:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=cf173056e5b9dd1f68eee015b3cd471e0ef2cab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:d0:2c:0c:32:aa:c4:bc:f6:2e:ba:a5:c8:
86:13:67:d0:b5:bf:23:4c:eb:43:ea:f0:ee:71:70:
d0:f0:54:47:a4:05:0b:1e:ab:64:9a:76:76:d3:3a:
39:b8:e6:78:bf:85:d9:69:06:97:8f:ac:5b:d7:a6:
0c:6e:11:f9:5c:7e:01:f7:3f:5a:77:06:31:f1:c8:
63:40:da:10:c5:fa:b3:df:0f:c5:75:98:b9:30:c4:
48:c6:8a:96:86:5b:2f:81:26:fa:f4:32:0d:98:fc:
48:74:48:6e:87:e9:91:4b:14:dc:19:04:14:76:2e:
e1:ac:1e:77:90:af:40:34:0e:ad:b0:c7:a2:b0:48:
40:69:ee:72:08:73:40:fc:10:6c:29:80:c1:78:7d:
68:3b:b2:a2:11:0a:aa:65:f2:5b:9e:fa:cf:9f:1f:
61:dc:d4:f9:38:37:f3:83:bc:13:09:ba:0e:db:5c:
84:ce:7a:5c:7f:24:33:32:53:68:70:b6:a0:54:4e:
2f:6c:82:fb:54:0e:28:a1:cf:a6:57:cf:be:6e:be:
65:e1:a2:82:4e:9e:bc:37:b9:1c:31:4d:c2:2b:6c:
ef:8d:12:19:30:66:17:38:a5:11:71:c1:d4:4d:c9:
c8:bb:e8:37:78:65:d5:5d:b6:65:c4:39:75:43:3a:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:17:30:56:E5:B9:DD:1F:68:EE:E0:15:B3:CD:47:1E:0E:F2:CA:B5
X509v3 Authority Key Identifier:
keyid:F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8d:63:9f:4d:03:a2:13:1e:95:fa:ac:dc:7a:48:1d:23:90:
98:de:64:4c:ac:52:ed:03:91:41:5e:a3:2f:aa:d2:0e:ed:51:
e8:3a:e5:02:e6:93:c2:a3:ac:20:90:0f:48:a9:41:6f:b2:32:
c0:d6:5b:8d:3b:7e:47:5e:d4:d8:44:cf:e4:eb:7b:c0:0b:f4:
33:0f:e6:ca:1a:fa:9d:9c:27:ae:85:8f:b2:fc:86:8f:58:bc:
5d:c3:6d:55:85:e6:0a:c3:1d:8f:4d:91:15:2e:d8:a2:a4:db:
5e:ae:af:1a:c4:b5:6c:3f:cd:4c:92:ed:34:a9:9f:8e:5d:68:
ad:b2:94:6b:d7:6a:b6:30:ed:e4:98:ba:33:cf:8d:e6:81:b9:
fe:3e:78:d1:82:a2:2b:76:f0:35:cd:45:c8:90:9a:cb:da:81:
94:e2:4f:cc:0e:ed:3b:ce:15:bc:aa:cf:9d:ef:e5:2f:fb:63:
d3:c4:86:cf:da:a0:71:c3:9e:12:e6:df:47:bb:d6:c7:e9:65:
b8:5c:df:1e:dc:75:dd:ba:f3:c6:9a:25:00:5e:a6:19:de:40:
29:9a:75:80:1f:06:cc:19:71:c5:44:ca:5b:0d:76:85:4c:c7:
2c:17:41:32:86:50:52:a0:c6:14:35:04:85:15:d2:6b:e1:3c:
19:55:22:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:55:07 2025 by rpki-client