Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
File: 8jWG8iDMsNHFLArt9edm7KGhHHQ.mft (raw, json)
Hash identifier: Zujp8hPnnQXwDPr1EzT2uSjUs6DWce60SPNoNLQxiOQ=
Subject key identifier: 34:BC:07:DF:50:1A:68:0C:7F:8D:50:AB:6D:ED:91:4F:13:16:F1:10
Authority key identifier: F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74
Certificate issuer: /CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74
Certificate serial: 0194BD8593381567A9BDF9C72A38F9E8DA9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
Manifest number: 0289
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: 8jWG8iDMsNHFLArt9edm7KGhHHQ.crl (hash: HCzKRZGEtRGSlongfyvIvp41Ft28MNxnhtk+GRwOUIo=)
2: v9SdGCEbNFlSuDgWgo1kf6nL3As.roa (hash: qiXG0Rmw4yiW0AhRjg9/OTIgPd0soD+OwXQ8XH+CjYg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:93:38:15:67:a9:bd:f9:c7:2a:38:f9:e8:da:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=34bc07df501a680c7f8d50ab6ded914f1316f110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:58:75:6e:1c:0d:33:7e:ad:4e:f8:c1:72:c5:
e0:f7:f9:90:fa:1a:49:43:85:f8:48:d9:8e:c9:aa:
91:06:8f:9e:70:9c:4e:25:de:c0:81:3a:0b:a7:fb:
a2:7e:96:78:48:90:7c:b0:39:f7:dd:b2:83:66:13:
4c:e1:b6:3a:0b:0e:70:66:3b:44:99:b7:f1:45:49:
09:fd:f2:f9:11:42:51:1f:2d:a2:3d:84:5a:61:21:
32:39:0b:e2:32:a3:25:b4:5a:f5:9a:d9:5d:57:c3:
8a:3f:48:db:78:e6:4f:66:6e:b8:1f:08:3e:8e:6c:
52:42:1f:56:8a:aa:f3:8f:af:91:0a:f9:b0:0a:11:
da:f4:9b:21:a6:30:16:02:3e:94:4a:38:8a:0c:43:
42:42:29:b9:e6:2f:e3:ed:7e:13:38:7d:ee:24:26:
cd:04:9f:53:23:c9:3a:2b:4b:24:70:e6:64:a7:4f:
2b:e9:9c:fd:e6:7d:29:b6:cc:ea:45:b3:3f:65:f5:
3a:79:6b:66:9f:cb:f3:03:ed:e3:6f:85:c7:ba:70:
b3:04:f1:aa:eb:6c:db:1a:65:2a:3d:23:cc:61:2d:
14:b5:3f:d0:4a:c6:40:14:61:24:1e:f9:ec:0a:ef:
34:4a:e6:0b:74:3a:9e:fd:89:b4:b2:bc:cc:e8:a6:
51:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BC:07:DF:50:1A:68:0C:7F:8D:50:AB:6D:ED:91:4F:13:16:F1:10
X509v3 Authority Key Identifier:
keyid:F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:8b:21:21:9b:c3:7a:4f:1c:96:1b:6c:c6:1f:a7:5c:cd:a9:
52:d3:6e:5c:79:12:07:5f:15:9a:09:e3:57:7c:e4:a1:36:2b:
84:d4:52:6d:ca:85:a6:80:cb:cf:42:8b:f3:1b:45:6e:42:de:
ae:ea:7d:2c:6a:4b:ed:7e:98:b3:9d:43:61:53:d5:8d:ae:28:
74:4b:2b:68:e0:fc:a1:5a:4b:3c:11:5e:80:46:9d:dc:af:91:
13:2c:69:57:ea:cf:9d:0b:a4:0e:47:ae:36:65:bf:c0:19:1f:
75:1c:41:97:d7:9a:0a:aa:6f:0b:8b:a8:b3:fd:a3:28:7d:f8:
e6:07:cf:19:38:e0:96:7b:f1:c0:d9:1f:66:cd:15:a1:b3:e6:
f8:6d:dd:5d:d4:bf:4a:86:f2:ed:b7:ee:21:13:5d:b5:9f:dc:
5d:63:73:91:f7:b9:27:26:34:e5:54:78:16:0d:de:37:5d:6a:
17:05:d9:1c:4d:31:e9:7a:b8:6a:fb:86:87:cc:f7:60:64:26:
1f:a3:b3:89:75:aa:44:22:2d:14:ce:ac:83:21:fe:df:45:98:
4e:f3:71:82:8b:a9:13:9c:54:02:9b:c2:53:d6:9e:56:36:51:
f3:33:2a:ef:dd:d4:1d:fd:36:ba:95:06:19:21:2e:a8:b0:3b:
b3:45:ac:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:39 2025 by rpki-client