Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
File: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft (raw, json)
Hash identifier: 7zqGkbP4yNKWoZ8W3821tnbfQCeXYb6alAYCAnlQONM=
Subject key identifier: F8:A2:B3:31:02:01:E4:55:C1:3A:14:F5:99:8E:5E:7E:7C:37:C8:57
Authority key identifier: 44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
Certificate issuer: /CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Certificate serial: 0194BD4EB3C4763899F74D71C36088D01EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
Manifest number: 01A9
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl (hash: WtE7XSKxTtdOcT3QfEGGrup1wnfxe/sv2imi8BEitwI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b3:c4:76:38:99:f7:4d:71:c3:60:88:d0:1e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=f8a2b3310201e455c13a14f5998e5e7e7c37c857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d6:26:cd:c9:41:03:d7:11:14:08:1c:5b:d4:
9e:a7:e7:74:71:11:ea:81:7b:49:91:dd:45:23:7d:
1f:41:5e:b2:16:01:8c:1e:5e:d8:0e:c7:b6:12:8a:
0d:b8:fa:eb:ef:23:cb:64:00:6c:a6:1e:1b:42:87:
59:2b:f6:ce:f7:2f:8e:ed:bd:b9:c6:d9:cb:ed:47:
d8:27:ca:29:c4:df:fd:5e:b5:b7:8e:f6:06:7a:ac:
fc:d4:2e:26:40:c1:0f:7b:bd:5a:33:7d:32:34:bc:
11:88:f1:b5:fa:13:11:bb:5e:45:a8:19:56:4c:fc:
5e:e9:62:2a:e2:d4:02:a9:23:2c:d4:76:35:39:61:
96:21:21:32:b7:cb:25:40:4c:6f:98:d0:2b:ab:a2:
4f:97:0e:7c:10:28:06:33:c0:ce:24:b6:1a:8e:40:
c4:b9:e3:0c:f2:41:4b:81:62:4f:6e:a0:56:98:42:
25:e3:7e:d2:3f:2f:eb:cc:cc:93:20:32:87:eb:93:
f2:a0:7b:e9:dd:f4:74:67:8b:c3:e0:be:dd:92:a0:
3a:a8:ca:e0:05:85:ab:fb:00:3e:ec:02:12:33:da:
83:36:32:9c:21:b9:57:45:46:48:7a:0a:c9:8a:cf:
62:72:8e:0d:0f:2c:97:53:92:35:dc:8a:b4:93:a6:
23:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A2:B3:31:02:01:E4:55:C1:3A:14:F5:99:8E:5E:7E:7C:37:C8:57
X509v3 Authority Key Identifier:
keyid:44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:79:f4:1a:3c:b1:a2:0e:7f:b3:6d:6c:bd:e5:2b:29:b9:f5:
1e:d2:b1:68:41:b5:b3:5c:ae:e3:53:72:c5:07:40:70:3e:3b:
b0:ca:69:ce:6f:b1:76:b8:20:7c:3a:72:90:f8:b4:44:63:9d:
c4:4b:2a:ca:b5:07:4b:14:42:5b:09:74:17:1a:ad:4f:f3:91:
da:dd:11:0b:37:3c:39:ab:c7:c9:a9:bc:30:20:8b:83:19:e8:
92:86:fe:f1:f8:bb:b5:64:a7:3c:fb:c4:4a:01:08:a4:f4:2e:
16:91:f7:1a:b2:2b:79:31:c6:e4:e4:a0:64:1b:ce:18:93:22:
45:29:b7:e5:8a:94:2a:e6:d9:d1:03:a0:93:11:15:68:51:19:
62:ad:df:e7:65:d8:f3:7b:a6:f3:cc:dd:da:5d:4f:ff:1b:31:
86:7b:a3:f7:37:bd:7d:0e:2a:3d:db:bf:d2:91:5d:60:4a:71:
e6:d3:56:7d:98:07:5a:f4:75:aa:6b:93:bb:a5:67:ef:14:7a:
22:a0:1e:17:c6:91:64:34:35:a7:bc:87:3c:d2:99:01:dc:46:
0c:c7:e8:8c:04:54:43:11:d8:47:c0:69:8e:ae:7e:9d:76:b7:
ab:88:2d:9d:9d:af:a2:b2:8a:8e:32:2a:94:e0:b3:42:2a:98:
f9:e7:75:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:36 2025 by rpki-client