Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
File: 8PPwSfPyhFHj4b9ouXT_28jEFMc.mft (raw, json)
Hash identifier: dA50lKjEJITJoVHzj+zejIeN1pMfdp3mzsTc3zi6DB8=
Subject key identifier: AE:7E:7D:20:A0:D4:F7:2C:50:F7:86:94:9F:B4:6D:CD:82:A8:F6:E4
Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Certificate serial: 0194BCE07301A537C51648CE5CB8BA900373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
Manifest number: 0FAC
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: 8PPwSfPyhFHj4b9ouXT_28jEFMc.crl (hash: ZOMVYDlqvjyLoUR9rkSJbwyr6MMOIJDWzPKYYAXvHi4=)
2: q-Co2Fge0yCMSGAUZ61yCAp-agg.roa (hash: Kkd9tz/x2Ysb/9fgNXffDi1aqzj4oQgrCbFcbQdhMNI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:73:01:a5:37:c5:16:48:ce:5c:b8:ba:90:03:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=ae7e7d20a0d4f72c50f786949fb46dcd82a8f6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:63:13:33:8c:2c:e4:01:46:da:55:44:94:
92:bc:23:51:b2:d2:64:f8:0f:4c:cd:2d:c8:7f:c5:
ac:85:ef:b0:db:5b:f8:64:9b:bc:34:13:dd:61:a7:
82:05:9c:94:bd:61:14:6d:a8:54:e2:65:4c:25:81:
1f:96:f0:bb:54:11:fe:df:75:3d:47:ee:7c:98:97:
df:03:30:23:c5:9f:a0:ec:3e:54:81:36:31:b1:80:
e7:98:d6:5a:47:f8:8c:80:8d:36:d6:0f:fa:71:07:
37:30:41:af:f6:51:aa:9c:26:a3:1b:7e:97:ec:63:
b1:42:2f:6c:bc:1d:36:81:b2:e2:54:4c:8b:f6:86:
76:07:08:03:a4:ee:52:72:1e:8c:09:54:26:33:ae:
f3:5f:3d:5e:95:37:07:22:a4:e5:ca:e0:aa:9b:28:
80:f0:57:9e:68:ba:16:9d:ce:87:3b:f6:f6:19:c4:
02:d7:40:10:c4:3a:b5:bd:01:31:0f:9f:14:59:ae:
b2:fe:52:d7:09:b7:83:ca:f4:0c:b4:22:bb:58:97:
e2:20:48:53:a7:b9:e7:40:60:b0:70:2b:2c:eb:91:
40:d5:4d:90:66:f3:3d:d6:90:13:2c:5e:92:eb:41:
32:5c:d9:50:e3:87:9b:44:44:7f:ef:06:91:a5:cd:
19:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7E:7D:20:A0:D4:F7:2C:50:F7:86:94:9F:B4:6D:CD:82:A8:F6:E4
X509v3 Authority Key Identifier:
keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:99:4f:7c:bf:c5:07:bc:d3:eb:d6:bd:8c:81:58:6d:2f:03:
5a:74:c6:9b:b2:c7:aa:98:f5:be:89:e7:94:ad:28:09:9d:c4:
a7:0c:8b:25:fd:4f:66:9f:58:16:87:cf:b3:62:a7:ef:aa:36:
1a:db:c7:d9:e9:9a:5c:ae:9c:f3:cb:e1:0e:65:a8:62:0f:ad:
00:a8:9f:42:ea:1e:d8:76:62:fb:4a:48:80:e4:ea:d4:67:db:
05:d9:c5:3c:76:52:1b:b7:1a:d4:51:a7:05:74:f9:1a:08:f2:
39:9c:76:7f:5f:a7:48:b3:0e:40:e4:88:d9:3b:8f:ea:50:dd:
74:05:c6:e7:9f:66:ae:e9:6c:c2:78:41:b2:49:a2:6c:17:07:
ec:e5:77:7a:ca:f7:fe:0e:89:4a:48:4c:47:b6:20:93:d5:16:
af:4d:f4:9c:e8:3c:ad:bd:61:ec:74:c4:fa:85:a3:a8:54:a1:
8c:ad:5d:25:82:f6:ee:20:cf:71:40:f2:b5:ba:77:9b:2d:a0:
de:46:0e:b4:83:83:9b:8c:f2:5f:97:64:c6:e8:ca:45:04:a1:
6b:0c:85:cb:eb:d4:69:db:6a:5a:22:c7:a1:77:96:4f:f0:db:
fb:b9:ee:17:8a:5a:47:9b:6f:b5:ea:ec:6a:75:e2:45:ef:a8:
24:d0:6e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:00 2025 by rpki-client