Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
File: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft (raw, json)
Hash identifier: yg2ZXnnqYRpqyEuE7/U8DKL4YEIM+OjhL7wnK4ccEhs=
Subject key identifier: 46:3F:E6:1A:70:9E:09:60:39:98:DF:26:72:2A:A2:3D:10:C3:05:BF
Authority key identifier: F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
Certificate issuer: /CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Certificate serial: 0194BD4E90A58EFDD5D2DEC1A9B8B2487DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl (hash: zFvjtdk8Ad0yZJCMQV4eWrRx+Kb0AZrNL5D2Ht4ilT0=)
2: eGF4PY_wgfKdtXUANezmT92NTGM.roa (hash: 05Pk1BDJWHJV0SJRPVmkmFIh7w5FFlCRro3lX7bPWNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:90:a5:8e:fd:d5:d2:de:c1:a9:b8:b2:48:7d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=463fe61a709e09603998df26722aa23d10c305bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:45:68:c1:2c:8a:99:fd:81:80:ef:5c:4f:0e:
7c:9c:49:1f:7b:b7:d6:c2:37:4b:35:15:e7:6a:f4:
06:40:1c:22:de:a6:54:67:4a:52:39:7e:70:6e:b3:
b1:78:cd:38:ae:53:ff:b9:30:b6:9b:8a:11:91:88:
2c:ba:d1:91:6d:30:2f:e8:ff:50:12:c7:5d:2e:bc:
a4:e5:11:d0:cb:d7:2f:6d:e6:4f:6b:31:28:70:8e:
d2:ef:4e:2d:3f:8a:dc:5d:a0:7a:a3:01:69:2d:5d:
81:51:3b:bf:56:91:17:92:69:8a:5a:11:46:ed:74:
1e:3f:d5:1d:a2:f6:e4:79:77:64:cf:04:ab:3c:c5:
9a:d4:78:5a:80:8a:75:a2:03:72:84:c4:94:2e:1b:
31:c7:c0:d4:5b:ac:3b:9c:21:12:30:83:a3:ae:b1:
46:ec:b3:b5:9c:f7:7b:9a:17:97:84:35:37:ba:e8:
29:46:f4:db:e2:df:70:03:8f:ec:7a:d5:1d:0c:0f:
dd:f1:40:39:99:33:7c:d6:33:29:7c:60:b8:56:51:
ff:a9:a9:fa:70:ee:86:24:75:e7:7c:9e:e3:d6:d8:
a5:35:8f:aa:57:25:b6:25:2e:14:06:e8:77:24:67:
bd:b7:2f:f4:7e:f1:db:5c:4c:f9:8c:5b:d2:63:bd:
e5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3F:E6:1A:70:9E:09:60:39:98:DF:26:72:2A:A2:3D:10:C3:05:BF
X509v3 Authority Key Identifier:
keyid:F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a8:a4:a3:20:6b:34:5e:87:c0:f0:12:cf:e2:d0:e0:fa:ce:
f0:47:3e:bb:80:37:4f:8a:ff:b6:57:2d:ca:c4:77:c3:03:ff:
ed:1d:51:c6:82:fa:91:1d:91:8b:3f:de:e5:13:99:3a:2a:8e:
72:df:df:67:20:41:1f:2a:1a:41:5c:4b:7d:eb:9c:5d:c1:2c:
44:9a:9f:52:fb:58:5c:09:e6:46:5b:27:a8:81:a7:f4:d0:3a:
96:b7:de:5a:15:60:c6:e4:d3:86:63:14:ef:ed:fc:44:a9:ce:
47:b4:d7:f8:b9:37:6c:27:a3:6b:d5:f9:cc:88:b0:74:d1:55:
0c:a0:8a:bb:bb:23:a3:20:71:44:7d:5f:eb:e2:1a:95:eb:11:
51:f7:17:bb:fb:34:ec:c6:6e:ee:c3:0c:ad:e3:21:17:9d:49:
60:93:13:64:db:c9:c8:33:6e:d9:e1:d2:71:dd:30:aa:86:71:
cf:1d:b4:ae:6d:ab:98:92:b7:07:17:fe:df:e6:84:d2:3b:f1:
3c:50:a8:fa:d8:41:d7:a4:8c:16:01:3d:1a:81:c2:3c:b2:71:
00:8d:1c:14:c3:52:54:80:c2:a5:ca:77:68:d6:a0:a0:38:99:
79:a3:2b:9b:eb:33:74:9e:54:e0:59:15:ba:e5:e2:ff:52:09:
18:8f:9e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:39 2025 by rpki-client