Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
File: f0LSfCHahsfp-_RK4OVsmPPS-As.mft (raw, json)
Hash identifier: jIbvK8g/bET1Z+haGDCT5+1dWDC3LZ70GGcTS+o3Brg=
Subject key identifier: 46:26:61:17:94:BE:96:89:08:6B:71:0A:AD:06:A3:B1:4B:E4:C2:CC
Authority key identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
Certificate issuer: /CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Certificate serial: 0194BD856C0B66862AF141DE8A5A52359F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
Manifest number: 0BC8
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: f0LSfCHahsfp-_RK4OVsmPPS-As.crl (hash: iTudpMGVwHOiZw6KjHGliX87/Y0Q4FmTmsWyGEiAG9I=)
2: ldAiZGhEA6PQQSWSUu13vFbKCqU.roa (hash: sA9s3rJXQHu5BKgisYTJyKuldiob4VBrcuXc+pLot6Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6c:0b:66:86:2a:f1:41:de:8a:5a:52:35:9f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=4626611794be9689086b710aad06a3b14be4c2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:de:58:0b:c0:aa:d7:97:4b:d6:ed:a2:5c:
ca:a9:16:71:c4:70:12:8f:78:8c:b5:a0:1d:09:40:
0e:10:15:0b:20:60:6f:56:b0:4c:cc:b4:85:2f:8c:
1f:03:9a:ac:92:c4:03:9c:fa:7b:20:01:11:27:7a:
5d:95:26:f3:76:07:b0:bb:a8:d6:31:88:10:28:70:
00:dc:8c:2a:d0:a6:3f:90:26:91:78:f7:92:17:fc:
15:cf:b0:e9:a6:4f:60:77:2c:12:49:3e:89:7c:a5:
e0:ff:d5:cb:b0:31:bb:ab:43:e9:f3:be:8c:9b:56:
86:57:c6:af:bf:f4:d4:b7:d8:a5:6e:a5:09:c2:66:
da:65:01:47:1d:d1:fe:2c:f0:d4:9c:66:25:df:2b:
87:a6:12:f2:12:59:8b:10:72:03:3e:73:27:c2:ff:
92:04:14:09:57:6f:10:da:b3:bb:95:68:fa:79:9d:
48:c0:fc:03:1e:58:97:c8:68:81:10:46:2c:2f:6a:
89:04:fc:bd:56:af:63:ad:d4:a1:54:1a:54:6a:31:
3a:dc:50:2c:19:fe:c9:04:e2:23:af:c5:63:ae:5e:
7c:c4:e6:e8:e5:90:c8:62:21:9b:3e:16:3e:ee:0d:
e9:14:40:1d:93:08:db:91:cc:ab:6d:cb:a8:0f:c0:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:26:61:17:94:BE:96:89:08:6B:71:0A:AD:06:A3:B1:4B:E4:C2:CC
X509v3 Authority Key Identifier:
keyid:7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6f:41:c8:37:93:9e:c9:a7:18:74:e7:cb:6f:70:70:72:7d:
82:35:fb:87:bc:3b:7a:ac:f5:5c:8d:6a:a9:44:f7:1a:28:7b:
9f:1e:12:88:a5:43:e2:78:82:26:ca:6f:d3:f5:28:c4:b1:22:
97:86:ec:89:73:0b:3e:50:b4:a1:08:72:60:8e:84:8d:9a:d8:
4a:c5:9c:29:6c:f2:92:e2:bd:a1:33:4f:54:2e:3f:db:fc:d2:
fe:62:24:5b:5c:69:7e:e1:30:c2:1b:07:96:48:86:d4:aa:aa:
b9:70:28:d3:13:dd:b9:8a:f7:d9:f5:f6:f8:9b:5a:74:40:e2:
5b:b4:cf:11:c8:90:74:39:fc:7e:9e:16:f0:41:89:50:4e:4e:
b4:3a:9c:78:1b:f6:b6:24:2f:7d:2e:de:05:ea:69:66:30:b2:
d5:dc:e5:b1:de:f4:37:da:e1:51:3d:e5:b2:f5:07:47:83:dc:
73:19:fc:fb:a9:d7:5a:81:19:ac:7b:5d:c9:d0:4b:80:b1:94:
8b:e3:f5:cb:94:81:d3:66:29:b8:aa:24:11:9f:71:d2:98:a6:
d7:bd:5b:b2:76:95:ee:ed:01:1b:26:09:1a:a6:8c:85:46:09:
e4:7c:c8:a2:b4:40:08:8e:9e:ef:68:19:86:b5:95:12:d0:74:
ff:7c:a6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 05:41:51 2025 by rpki-client