Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier: 2auec1x/03mxZn9q2leURSaxmhkJVQNnyF0bMolKB/k=
Subject key identifier: 74:5E:E3:65:8A:F6:F9:F8:25:79:C5:04:8D:0F:89:0C:37:5E:90:4E
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial: 0194BC72F5EAB54B5397EF1A406CD7C1AABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: 41x8o8YsqtNrma7Gc0LhPYa41bMtsOj10PCb6QbMoNI=)
2: Uq0vloXHdFb2aIE_oUN66H2BMxU.roa (hash: 8OMhbaYnopF2Asv1tjCQ758nxv0+wParcC98envOi54=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f5:ea:b5:4b:53:97:ef:1a:40:6c:d7:c1:aa:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=745ee3658af6f9f82579c5048d0f890c375e904e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:82:f2:ea:a5:97:01:63:a1:a7:3b:37:88:
c6:f9:69:65:bb:15:aa:dd:3c:f9:62:99:2d:85:a6:
6b:cc:8b:39:d4:e6:02:ed:2c:82:f5:64:a7:4f:bd:
56:51:c1:16:6d:34:bf:bf:97:cf:ca:6b:85:ad:b6:
98:0d:4b:1d:fe:b8:38:86:7c:f8:3f:60:fa:df:ce:
da:8b:de:07:ae:bb:cd:7b:c9:d6:ca:54:81:24:a1:
f1:b8:65:0d:b2:63:b3:9f:e1:b9:64:38:dd:5b:d2:
c5:f2:e2:50:b3:a7:d6:28:d4:13:d5:c2:27:16:fd:
9f:58:9b:66:38:89:91:f1:a5:38:21:0b:34:2b:ec:
89:61:9c:a4:6f:f1:6e:9a:29:c2:af:74:8a:0c:56:
c1:7f:95:97:2c:c3:d2:0c:d3:ec:2c:b5:d0:c9:38:
81:dd:1e:c4:b4:32:14:8f:32:36:b5:7c:17:00:2a:
9d:4b:61:7e:11:a4:c0:2b:62:d0:9c:48:32:12:ad:
fa:eb:a2:22:40:88:84:8d:6d:42:08:d0:35:16:a6:
d9:7a:f4:38:d6:f1:a8:0c:18:fd:85:99:8a:22:20:
6a:47:69:55:ab:4c:90:e0:40:d8:e4:53:42:e1:29:
9a:99:b0:22:35:5b:65:76:65:1d:62:c6:d0:44:fd:
8b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5E:E3:65:8A:F6:F9:F8:25:79:C5:04:8D:0F:89:0C:37:5E:90:4E
X509v3 Authority Key Identifier:
keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f9:58:f0:cf:5d:eb:fa:d9:10:1f:81:2f:78:c4:1f:1d:af:
fa:9e:5a:98:48:85:79:1e:d9:78:88:c6:f9:d4:46:fb:22:9e:
cd:2c:36:c4:15:93:24:85:bc:4d:29:3d:08:08:09:0d:13:55:
4c:3a:cb:bf:fc:57:56:42:fd:36:a0:a2:a4:86:83:71:13:ca:
4d:7e:17:16:3b:1f:df:e8:6e:5b:2b:4c:22:35:05:2c:7e:8d:
ab:8d:b8:71:d0:9a:8c:e3:17:5d:c5:8b:a2:22:7e:e1:51:7c:
bd:43:ea:a7:3f:68:95:11:4e:f2:57:d4:93:f7:c2:14:2f:63:
41:03:67:34:4b:ed:c6:f1:60:7a:8e:1c:70:c3:3c:24:d1:5d:
28:28:8e:1a:13:33:75:9d:a8:b2:e9:58:a6:65:94:e1:e1:f4:
ed:3d:8d:b6:26:cb:e0:d6:5e:f7:3e:03:f9:0e:1a:3b:03:72:
33:75:b9:dd:76:24:76:2f:1a:37:ff:de:a6:3e:f0:fc:7a:09:
92:f3:5e:9e:0c:fd:62:35:62:2c:ff:7c:c0:b9:b9:4d:80:0e:
fa:c1:32:63:36:6c:23:df:2c:6d:7c:f9:84:f7:82:82:ce:3d:
86:bd:2e:aa:af:50:bb:39:83:c4:df:86:0b:53:e4:2d:f1:8b:
ee:81:c1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:30 2025 by rpki-client