Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/25923b-f64e-4798-a37a-da3a3dee05d4/1/8GHbS-aV6klaKDu-MwIqvSidXqg.mft
File: 8GHbS-aV6klaKDu-MwIqvSidXqg.mft (raw, json)
Hash identifier: Bio1jJOCnvIufP8UuWVKJI/RYTSX5a1VzYhbREEea00=
Subject key identifier: 9F:04:EF:4A:AB:86:8B:3C:86:29:F4:C2:A9:87:AC:F4:BD:2D:1B:D8
Authority key identifier: F0:61:DB:4B:E6:95:EA:49:5A:28:3B:BE:33:02:2A:BD:28:9D:5E:A8
Certificate issuer: /CN=f061db4be695ea495a283bbe33022abd289d5ea8
Certificate serial: 0194BBCE19AA13DBA024EBB3B1D5FDD1A050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8GHbS-aV6klaKDu-MwIqvSidXqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/25923b-f64e-4798-a37a-da3a3dee05d4/1/8GHbS-aV6klaKDu-MwIqvSidXqg.mft
Manifest number: 0E80
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: 8GHbS-aV6klaKDu-MwIqvSidXqg.crl (hash: IRYO7ErqJTEUant+d7L9LmGZe0+PFrDpQfwDi35guPc=)
2: zmLbz4eEw5NbODVzG7rLheEZc3E.roa (hash: I9hEe8qaNqq2mLBTSfEYmFwWzcg7/EdSdxzM8S+noz0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:19:aa:13:db:a0:24:eb:b3:b1:d5:fd:d1:a0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f061db4be695ea495a283bbe33022abd289d5ea8
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=9f04ef4aab868b3c8629f4c2a987acf4bd2d1bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ec:74:8c:fb:d7:5a:10:8a:5c:7b:fa:0e:83:
c4:59:b6:f3:90:c5:6f:91:de:8c:18:41:3b:69:f6:
26:73:a8:09:1c:21:49:27:98:58:a5:02:1e:af:12:
44:10:d2:21:8a:c2:24:14:c6:30:66:a7:c6:93:61:
9b:d6:6c:00:25:f8:2a:65:3f:f9:56:4b:d2:d3:00:
13:f1:48:80:c9:94:27:ab:e0:a8:0a:cd:1e:5a:67:
41:4a:3c:43:2f:aa:14:a4:17:a3:bd:1b:85:bc:8b:
ff:29:c8:96:40:b5:7f:71:14:25:f9:f8:ae:21:f4:
0d:87:3b:2d:69:1a:44:3e:fe:e0:5d:7b:72:f2:2e:
9b:fb:e9:69:14:05:6a:43:a8:50:f9:2f:b4:28:4d:
e1:19:48:80:e8:57:00:d3:9e:80:52:ec:30:ab:3e:
48:35:63:e3:7a:0e:ef:0d:83:b3:1a:d5:53:74:6e:
ab:51:36:3f:2b:bb:c6:60:67:bf:b7:9b:60:0d:45:
39:c5:f2:09:3f:0f:1f:b4:34:31:07:73:96:c9:62:
07:b4:c6:64:ec:4b:8c:cd:55:98:9e:91:4c:30:27:
bc:88:ca:b1:d3:ec:12:63:7d:7f:5b:2e:83:9b:ba:
c8:85:0c:94:5f:2f:00:de:9b:ac:17:75:37:ac:18:
3c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:04:EF:4A:AB:86:8B:3C:86:29:F4:C2:A9:87:AC:F4:BD:2D:1B:D8
X509v3 Authority Key Identifier:
keyid:F0:61:DB:4B:E6:95:EA:49:5A:28:3B:BE:33:02:2A:BD:28:9D:5E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GHbS-aV6klaKDu-MwIqvSidXqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25923b-f64e-4798-a37a-da3a3dee05d4/1/8GHbS-aV6klaKDu-MwIqvSidXqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25923b-f64e-4798-a37a-da3a3dee05d4/1/8GHbS-aV6klaKDu-MwIqvSidXqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c7:6f:eb:53:a6:f0:bc:9e:d5:c1:ac:95:ea:f7:a5:91:6e:
7e:d8:91:5b:68:ca:b5:72:18:61:f2:fe:3f:f5:c8:52:5d:62:
71:c2:7c:fc:d3:15:50:eb:ef:8e:9e:b5:50:21:6c:bd:fb:80:
32:26:26:59:21:29:cc:df:fb:c7:25:e4:f1:54:51:53:ab:1f:
10:9a:49:86:7c:98:55:53:e8:9f:3e:56:18:42:f1:a6:df:7f:
e7:fa:78:3b:e1:8e:8a:f9:51:29:06:76:51:8f:18:68:46:10:
ef:09:b4:11:f8:a2:83:18:bf:e2:26:a1:33:64:5e:3d:82:b5:
4e:d3:fa:f7:27:55:86:fd:55:4f:49:dd:3e:32:be:67:bd:d5:
05:cf:e9:e6:aa:b5:06:29:6f:6b:67:8e:03:cb:85:87:53:cf:
43:bd:ef:fe:16:8e:87:b3:41:69:2b:d5:f8:cf:28:a5:4a:bf:
c2:fd:ad:d5:d3:79:45:be:3a:79:0e:14:ca:cb:c5:21:f3:6d:
fe:50:3f:5d:ea:1e:56:45:91:f8:a5:74:78:ae:8e:6a:3a:9a:
9d:03:ec:94:5a:94:4d:c7:80:72:d2:96:09:a8:73:7b:7a:2a:
c4:5f:a2:28:08:12:fc:2e:5c:19:72:5d:ff:0e:47:34:1d:55:
94:69:bb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:18 2025 by rpki-client