Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
File: _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json)
Hash identifier: xR9QnkCKN1msh5CvbaY40kT9E252IX7p1sC+e3xkOcY=
Subject key identifier: CC:F8:BE:41:C4:A7:8E:F1:D9:62:98:FF:4D:35:44:D3:0F:2B:62:61
Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
Certificate issuer: /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Certificate serial: 0194BC3C0F472D25206FC7E21559213D9626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
Manifest number: 0B64
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: P7RY9lh2DjXnqCca2-tY01lrUH0.roa (hash: +jPRJQIba+h4xHf7Zl1n+Q824aM0dkkFMJs23vl+wfk=)
2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: MIhcn7nrKcNKhJEHcI3wANMjq7vfC+WuFnY6Js8H3Wk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0f:47:2d:25:20:6f:c7:e2:15:59:21:3d:96:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=ccf8be41c4a78ef1d96298ff4d3544d30f2b6261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d5:7b:52:64:c7:1c:ef:2a:c3:10:df:25:f5:
be:b7:37:96:d0:44:9f:4d:6e:c5:03:59:3c:d0:68:
b3:cb:78:e2:f5:d6:6c:1d:71:80:33:44:40:84:65:
10:fc:0e:fa:cf:63:ae:e6:d3:f4:36:9d:c5:f4:7b:
0e:a0:00:18:ae:d3:7a:76:3d:eb:74:0a:3a:d9:17:
46:ef:0d:75:e1:09:1f:01:45:66:00:ae:31:cd:ac:
2d:50:a6:bd:4b:9d:48:eb:aa:0d:c0:17:e7:81:89:
13:7a:fc:9c:72:10:13:39:5b:2f:36:5b:b6:ed:0b:
e0:da:04:7c:eb:4b:81:23:bd:b7:82:e6:e8:0a:1c:
a5:d3:d9:12:da:2b:d4:10:13:2d:3a:d6:80:9d:49:
4a:b3:10:5f:1b:0a:dd:44:da:9f:dc:15:fd:66:b4:
0b:24:f5:89:4b:2e:aa:5b:24:9e:e8:6f:11:a1:9c:
ab:49:3c:cf:1b:b3:6c:7c:96:90:a5:e8:70:fb:c2:
21:5e:61:3a:74:dc:e7:e5:22:5e:42:e0:11:ab:64:
19:cd:54:af:cc:a3:a1:d8:36:87:84:13:01:7b:f1:
25:92:e1:c8:cf:d8:57:f9:e8:fe:a9:9e:51:95:9b:
8b:2b:bd:06:a5:52:cb:d5:59:21:99:d7:45:43:5d:
f5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F8:BE:41:C4:A7:8E:F1:D9:62:98:FF:4D:35:44:D3:0F:2B:62:61
X509v3 Authority Key Identifier:
keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:71:30:24:56:f2:ea:7e:e0:14:bf:84:b6:de:d4:81:ad:10:
bd:92:61:05:c2:be:55:e5:1c:4d:db:81:7b:85:cc:42:8d:67:
6b:fb:b2:6c:e9:35:ab:a1:50:6b:d2:b5:0d:97:c6:43:84:23:
36:d0:f3:38:1a:82:ab:e2:c9:ba:08:d8:ad:20:cc:ed:1b:76:
3c:35:17:24:bb:47:b6:77:5f:70:be:bf:ad:b7:21:64:f9:b0:
0f:49:78:15:54:67:ae:32:44:d1:1a:33:35:e7:eb:13:cb:a9:
87:ba:e3:76:9e:78:5d:03:4a:79:fe:b3:77:17:f8:4f:2f:3d:
ca:13:71:da:2a:c7:88:12:de:0c:dc:e5:5a:d8:bb:50:ea:b9:
4b:de:a0:56:9f:1a:24:91:79:7c:70:3c:5c:21:50:84:54:4d:
c3:aa:64:66:9b:0f:7d:0d:98:0d:9a:8a:07:7a:f2:3b:17:c4:
d4:04:a9:3c:85:cf:44:f0:ad:9e:c2:de:b9:7a:f0:1d:68:9c:
31:32:34:95:a0:8c:28:70:3e:f0:cf:13:0a:e3:3c:7c:ce:96:
19:7e:9d:33:dd:44:76:8e:a8:24:1f:ea:0a:cb:94:c9:c4:57:
53:18:14:b4:ab:9d:d5:93:03:77:58:cd:95:63:16:e9:ee:d8:
14:eb:fe:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:31 2025 by rpki-client