Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
File: 8khYdchHDmqs3JR0IQXzDFl6wrs.mft (raw, json)
Hash identifier: YpibGK8JIIdvZ643mqaI3DHX5Xf+hL3YEibtiUKdwRI=
Subject key identifier: 71:6C:36:8A:97:F6:2A:F1:17:23:43:A1:48:88:EB:FB:6C:07:C8:F4
Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
Certificate issuer: /CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Certificate serial: 0194BC3BBF73ADB2BBFDA4784DBFDB5096BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
Manifest number: 0B23
Signing time: Fri 31 Jan 2025 12:00:19 +0000
Manifest this update: Fri 31 Jan 2025 12:00:19 +0000
Manifest next update: Sat 01 Feb 2025 12:00:19 +0000
Files and hashes: 1: 11v4ujiE85pODnajO4MIvDa-EEI.roa (hash: 899jJDpYjGC19E0C+sSPG4BflRjWNeXH81Y2tQUCHZ0=)
2: 8khYdchHDmqs3JR0IQXzDFl6wrs.crl (hash: vM7y0c7ULf8px3Dy+CoizpcND44JueyqDRn+YJu9IYE=)
3: H5a6_PbqYpspvXprSKayoanO0T4.roa (hash: rh38nYvA7FwPR7BzdHUH02hvI8rv4wT+OqQOUSlde48=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bf:73:ad:b2:bb:fd:a4:78:4d:bf:db:50:96:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Validity
Not Before: Jan 31 12:00:19 2025 GMT
Not After : Feb 1 12:00:19 2025 GMT
Subject: CN=716c368a97f62af1172343a14888ebfb6c07c8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:d3:df:1b:0c:fc:a4:03:99:25:5f:9a:08:
7e:e2:52:f3:38:87:5d:ad:f9:4f:e6:f0:8f:25:51:
c0:9e:b5:33:e6:7f:34:0b:05:0c:d6:75:03:ea:6a:
3a:0a:4b:09:aa:70:ac:c4:05:fc:77:44:ac:d6:0d:
58:33:2b:9d:03:cc:80:68:74:4a:4c:53:49:6a:6f:
be:ae:77:ca:c1:e2:0f:03:48:37:d0:77:7d:99:61:
eb:b2:31:aa:aa:e2:41:b7:30:e3:81:84:7f:ce:49:
78:8d:31:a8:fd:6a:7f:7d:8b:19:88:24:2c:cd:09:
ef:eb:49:40:ea:fd:65:38:06:79:9d:fb:d1:7a:7c:
3b:87:b0:2e:d7:22:ca:4e:b8:be:8d:09:47:69:a9:
b5:8b:5d:c0:c2:7b:c4:7c:5e:92:88:27:ee:d8:34:
b9:9b:ce:66:1c:54:52:41:f3:65:46:05:c6:35:2c:
22:b8:b7:bf:9e:c7:38:10:c6:db:50:97:5b:10:71:
c3:30:5f:a4:e8:cd:71:75:9d:4f:9d:ef:fb:b5:cb:
70:94:9f:ac:7f:74:82:e4:ee:f4:e1:de:6e:43:5c:
86:ec:20:96:82:5c:74:41:e9:cf:e2:ee:a8:71:f3:
29:52:3c:7b:1d:05:0d:85:c1:ca:fe:b9:6d:d9:58:
b0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6C:36:8A:97:F6:2A:F1:17:23:43:A1:48:88:EB:FB:6C:07:C8:F4
X509v3 Authority Key Identifier:
keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4b:4a:ee:ee:38:31:ad:86:e2:31:e7:8c:0f:1a:ed:86:e5:
ed:ed:f4:97:52:0e:93:4a:98:9b:4e:bb:57:12:54:53:01:51:
0a:6a:5c:97:92:5e:c5:58:2f:dc:f1:f0:3d:58:83:ca:69:28:
dd:7e:c3:32:ba:32:40:86:f6:27:56:a8:5c:af:91:04:04:42:
0d:57:49:42:66:ca:a5:2d:80:ca:d2:03:ff:46:d4:97:03:6d:
db:44:d3:fc:ce:ca:61:41:82:a7:54:b2:92:ef:a5:c6:09:24:
03:d0:3d:64:8b:b8:a5:b0:32:f0:91:21:42:38:5e:39:2d:7d:
f5:ed:f3:c0:84:22:20:17:f0:3f:48:87:19:33:2c:cb:c6:39:
54:4e:09:e1:13:54:76:88:5b:62:54:0a:0e:8f:1f:e5:09:29:
12:5a:05:bd:8e:b3:1b:fa:bd:08:84:77:49:78:b3:56:b0:f0:
87:52:4c:61:4f:b7:e3:ae:c4:cb:19:e4:43:18:1c:a3:9f:d0:
4b:23:53:0f:db:cf:b2:96:b6:ca:2f:0d:17:13:ed:0f:9f:d0:
3d:06:d1:65:f5:be:f5:9a:00:c5:39:99:48:22:62:f7:9f:82:
9d:4e:60:eb:69:cc:6f:f5:42:ab:43:42:99:04:3f:62:8f:3a:
c4:3f:0f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:00 2025 by rpki-client