Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
File: 8KEScQQ06Frl_m-_Qedr3fk4GM8.mft (raw, json)
Hash identifier: c/l6avXdVaYGPUKVR3Gt/j9IVvrquofqPCopJPQOqSc=
Subject key identifier: 43:30:45:3D:85:D3:88:A8:F2:40:BB:84:86:59:F3:3A:0D:77:C5:BA
Authority key identifier: F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF
Certificate issuer: /CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
Certificate serial: 0194BCA9BD7E2C161CD248F60028179F4B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
Manifest number: 02A3
Signing time: Fri 31 Jan 2025 14:00:28 +0000
Manifest this update: Fri 31 Jan 2025 14:00:28 +0000
Manifest next update: Sat 01 Feb 2025 14:00:28 +0000
Files and hashes: 1: 8KEScQQ06Frl_m-_Qedr3fk4GM8.crl (hash: 4jeAwgoumUqFE82sMkxXVsDK5dhB8+ioOZSMswZtndA=)
2: QxzsJBZ0KnjdWggXNkiPE3mxTiE.roa (hash: wp71B9vMq7Np21xWaUokwt4Wn7Ga2Zz2FhWmCQz4Lj0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bd:7e:2c:16:1c:d2:48:f6:00:28:17:9f:4b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
Validity
Not Before: Jan 31 14:00:28 2025 GMT
Not After : Feb 1 14:00:28 2025 GMT
Subject: CN=4330453d85d388a8f240bb848659f33a0d77c5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bb:d6:64:45:de:27:bd:61:17:00:55:5e:54:
43:d3:1b:2e:ef:48:1e:c2:59:ae:78:38:f2:aa:9d:
fa:40:bf:7c:63:47:80:fd:e8:58:6b:da:2f:91:96:
d3:76:b3:2a:99:70:09:56:dc:40:1d:0a:ab:03:b6:
24:53:2c:62:ba:e9:93:c9:b4:2f:58:2d:45:90:32:
66:32:fd:f8:1c:35:df:62:9e:c1:24:cd:62:8a:d1:
2e:07:b2:11:29:dd:69:b0:19:3f:09:66:2a:e0:ec:
e0:af:73:65:33:b2:0e:ef:5a:64:f8:7a:37:59:be:
fa:9e:91:b4:4a:4f:27:fe:26:55:3d:3f:64:75:02:
7a:1e:45:44:53:7b:a7:6c:2c:1e:44:0e:a9:32:f0:
5d:2e:b6:36:a1:52:22:a2:a5:f5:a1:25:d1:04:f8:
75:77:1f:45:04:da:e5:a3:0a:53:64:17:17:95:b8:
34:12:e0:01:e6:f0:bc:dc:00:3a:73:8c:ef:9e:f7:
fe:b7:ef:0c:b0:5d:3e:d5:ae:07:0d:5a:e0:f1:99:
a7:e0:e1:50:ae:5e:04:6e:f4:d3:55:12:03:2a:00:
82:c3:b6:61:fd:4b:69:4c:28:0e:3c:d6:51:3b:63:
5f:01:06:58:ce:74:db:05:2a:1b:5c:19:b0:57:87:
a0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:30:45:3D:85:D3:88:A8:F2:40:BB:84:86:59:F3:3A:0D:77:C5:BA
X509v3 Authority Key Identifier:
keyid:F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:28:77:62:08:e8:2a:f5:4d:db:80:30:d6:c7:e0:53:dc:cc:
25:ec:1b:95:e3:c4:61:8d:27:d1:02:c0:55:3a:80:8f:cd:12:
7f:c7:f5:07:0f:92:89:24:0d:74:87:a8:9d:97:b5:29:e4:56:
08:4d:72:55:12:7e:d8:47:9e:c5:6d:e3:17:15:67:e7:12:c6:
77:3f:1b:d7:ff:e0:9d:55:03:26:ab:c7:40:8c:86:eb:74:5f:
bb:50:63:64:e2:ef:b9:2b:6c:6b:57:ac:3f:fe:d3:cd:82:e6:
b6:ca:ce:19:24:d7:fb:0c:7f:f7:49:69:2a:68:8a:89:4c:5b:
12:b6:b4:a1:4c:28:2a:71:98:d3:77:c8:83:5f:53:fd:71:46:
79:c1:a5:71:53:5d:64:f6:18:c5:8b:f2:0c:e2:b3:ec:a5:80:
04:43:8f:e4:7a:30:22:7f:26:5f:79:97:06:6e:08:1c:e4:28:
72:d5:02:0f:37:03:dc:63:d3:f2:da:c6:6a:a4:4f:cc:37:62:
61:86:02:f3:54:75:b3:71:c4:31:90:8b:23:d2:e8:69:ca:31:
5a:52:04:db:fb:1e:1e:32:62:4d:6e:55:bd:c2:f3:ed:4d:95:
9e:90:d5:c2:61:d0:3e:86:7d:a1:17:f0:ec:68:6b:2a:d8:b0:
b0:27:b0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:38 2025 by rpki-client