Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
File: 8t6Ovd0IQWOpC5rlA5ey20nLF60.mft (raw, json)
Hash identifier: 5+cn7Cf01UUje3rSZST/lCk8efSEXyXrrS/KFdo46bg=
Subject key identifier: BE:92:C9:44:59:9E:B0:A2:15:4A:85:73:D2:60:AB:29:68:79:4C:85
Authority key identifier: F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
Certificate issuer: /CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Certificate serial: 0194BCE0EE2884113564EA857D2CCF7785DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:45 +0000
Manifest this update: Fri 31 Jan 2025 15:00:45 +0000
Manifest next update: Sat 01 Feb 2025 15:00:45 +0000
Files and hashes: 1: 8t6Ovd0IQWOpC5rlA5ey20nLF60.crl (hash: jyLoiQDCPLFrxzvNhm3LBMjwioz2vU30WR3d9O8pLds=)
2: pul6fCeEfRfqHUtKh0hXtHyFW6M.roa (hash: SMvKtJGuPxG36wkNr1bAgb49/+mZbdqtVopoxHFUHtU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ee:28:84:11:35:64:ea:85:7d:2c:cf:77:85:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Validity
Not Before: Jan 31 15:00:45 2025 GMT
Not After : Feb 1 15:00:45 2025 GMT
Subject: CN=be92c944599eb0a2154a8573d260ab2968794c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:25:f5:c5:25:f8:3b:75:5c:97:d7:3f:f2:48:
c7:23:f3:49:16:05:df:4a:d6:e3:a8:50:94:d6:7d:
cd:82:57:01:0c:80:35:cc:7a:32:af:41:34:07:ed:
88:ad:7f:29:9e:a6:97:64:28:d3:84:91:45:e1:dd:
d2:6a:d0:14:c3:cd:64:22:38:f1:f9:d6:68:c4:41:
af:c5:4b:30:49:62:49:df:6e:9d:e8:03:d3:05:3a:
ba:2a:dd:4d:d2:bb:1e:a1:06:e9:9d:67:87:70:dc:
2c:22:c7:e8:4d:e3:4e:10:4e:54:73:50:24:0b:a7:
bd:2b:cf:1b:ba:c0:e1:7b:bf:d5:9a:6c:61:82:f3:
31:75:62:9d:74:97:56:ff:01:dd:cc:b0:cd:f1:cf:
83:7a:63:f6:1a:7c:49:1c:a2:4f:14:23:70:f9:3e:
de:85:43:45:49:97:11:51:dc:95:88:4d:c7:37:8f:
0a:bb:05:d7:ef:7b:ce:94:92:51:c2:b3:5d:01:5e:
c8:0d:67:1e:87:38:56:d9:af:a4:a9:04:bb:62:0b:
08:4b:9f:24:62:27:08:73:34:36:12:62:8b:f3:13:
ce:3c:a7:e0:81:8a:90:7d:a2:0f:6a:dd:8b:53:1c:
97:94:26:f5:3e:9c:52:ea:9d:cc:87:85:9d:d5:ba:
b7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:92:C9:44:59:9E:B0:A2:15:4A:85:73:D2:60:AB:29:68:79:4C:85
X509v3 Authority Key Identifier:
keyid:F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6d:b9:70:24:fd:7e:d7:fc:b5:12:97:53:d3:7a:42:5d:3d:
2b:68:a4:8b:17:b3:4e:bb:54:e5:6c:a6:0e:51:a5:9d:d7:a5:
d0:80:a1:d3:4c:a7:84:0d:0f:61:f7:b8:d5:5b:2a:4a:43:a0:
d9:7a:0d:bc:84:46:79:fa:02:1c:c0:f0:a4:95:a5:b8:34:04:
0f:a2:6d:74:71:73:ac:16:e9:b7:da:35:c0:e2:9d:b4:ae:95:
9f:1a:60:66:8f:72:4d:18:47:e3:ac:4c:da:15:fb:38:26:49:
95:27:3b:13:84:5a:4a:26:9e:c0:9b:b4:a2:2d:44:e2:03:ba:
46:57:7e:03:6c:87:11:43:f2:78:22:a8:eb:1d:31:ec:5d:74:
9b:c4:50:eb:d3:71:40:c7:d0:30:e5:ed:57:27:8c:e4:b1:e6:
71:6f:9a:7b:74:15:64:dc:e2:ef:64:b1:b6:fa:b8:c4:63:90:
f1:ae:3b:e1:be:b8:c1:68:1a:8b:93:67:db:2f:69:bc:78:97:
27:20:4d:1c:48:08:c3:e7:30:06:82:d1:2d:b9:b1:ae:e0:30:
a7:30:70:09:a0:f2:57:fc:4d:cb:78:fc:84:52:5f:0c:9d:63:
48:29:7c:cf:77:13:6b:c7:a3:c8:de:fe:d2:dc:99:bc:67:82:
6f:0c:17:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:35:30 2025 by rpki-client