Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
File: 8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json)
Hash identifier: UKS5/MEArZk1PDdo/NQrA/lYi9bDvLs+UGmnM8s1Ugw=
Subject key identifier: 98:04:C2:33:03:7F:D0:08:9C:98:AB:4B:93:85:0D:35:D3:15:44:06
Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae
Certificate serial: 0194BCE06A7596BD94A40C4C2ECCE98BE713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
Manifest number: 03A9
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: /n0x74LA/hHGULL3hcYcV3UBycIG1IN+mKSYyQpDpEg=)
2: yze2rcJ637RL8GZo48PGt4d8nY8.roa (hash: H8OFKVxMCjsZaNXr8DPY/I8jq0ZMaggP4bkjrXxk6OY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6a:75:96:bd:94:a4:0c:4c:2e:cc:e9:8b:e7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=9804c233037fd0089c98ab4b93850d35d3154406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:45:62:a4:79:c8:48:1a:15:eb:c4:f6:82:63:
82:e4:01:87:9b:f6:fb:89:8a:28:9a:24:1d:4a:5c:
9b:19:23:6d:71:a0:da:f9:cc:b1:4f:63:52:2d:5e:
a1:b9:94:61:50:64:62:ac:0c:e8:48:93:74:06:ab:
f3:79:43:b1:5a:e4:33:c3:0b:ef:9f:4f:d2:02:15:
42:ed:f0:f1:97:bb:10:b6:3e:b4:b6:7f:10:07:22:
57:7f:ea:a5:31:7e:e4:06:6c:ee:80:31:55:ec:b0:
67:ba:e4:37:93:23:a0:36:fb:c5:a8:39:76:03:97:
f1:03:eb:3f:37:79:2e:32:cf:90:fb:26:23:e1:c8:
75:fd:8e:97:55:c3:c5:4d:bd:79:4b:81:84:8b:04:
66:e7:fd:d4:ef:33:5a:18:ff:95:68:32:9f:40:e3:
65:cb:e4:aa:e7:e5:d7:4d:6d:81:dd:9c:9c:3b:a4:
2c:3f:fb:91:1b:73:33:40:5b:64:94:72:4e:32:4f:
4e:25:20:31:a2:28:ad:d0:c4:ea:1f:a7:86:ca:be:
22:42:3f:fd:0b:7d:a1:17:20:35:04:9a:61:b2:cd:
5f:da:fa:12:c6:77:a7:09:fc:d2:75:23:1e:19:3a:
82:3a:2e:da:bd:0f:76:9c:f0:73:5d:d1:35:e4:a6:
f5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:04:C2:33:03:7F:D0:08:9C:98:AB:4B:93:85:0D:35:D3:15:44:06
X509v3 Authority Key Identifier:
keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:62:cf:25:49:e7:de:b5:c4:13:53:a4:df:5a:f8:10:30:24:
e4:c5:f9:d9:e3:9e:cf:0d:26:ca:d1:9e:d9:16:ce:f3:39:fb:
d9:bd:f0:fc:db:d6:20:69:bf:48:9b:3a:d9:fd:a7:fb:1f:f4:
13:e3:90:e7:9e:8b:c8:64:7e:59:c9:e4:d8:ec:83:0f:b1:bf:
29:32:cf:d0:f5:ee:2a:38:23:28:d8:e3:85:8a:e9:e0:3c:af:
fa:89:3a:fd:7d:e1:ca:0a:58:a0:05:98:dc:12:c7:f3:dd:55:
39:cc:d1:4c:6c:a3:e4:c3:51:08:29:7c:fe:f0:5c:ff:10:7e:
0a:3e:5c:54:d2:b8:5b:d2:d7:c1:d8:d6:ec:69:59:18:66:96:
29:85:f8:ba:ea:b3:b8:ac:3e:eb:f4:15:8a:86:38:8a:e7:6a:
12:1b:79:fa:7d:89:79:92:db:80:33:0c:9a:ed:f2:a6:8b:26:
9b:4c:81:f8:f8:68:e9:95:5a:9c:18:a4:70:ba:7d:77:f8:71:
cd:39:cf:49:0f:a0:7e:40:b3:b3:a5:e6:68:1e:4b:61:45:10:
49:ce:aa:77:2b:ea:d1:5d:86:22:7f:2e:50:7c:ae:96:2e:de:
c4:7a:91:a0:bb:26:a8:95:a0:d0:0d:92:74:aa:d6:7c:0d:49:
ad:2c:de:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:06 2025 by rpki-client