Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0122eb-d367-42b5-a365-5df1872193d1/1/8AmooJT8jrJNxgxn1fEotXrVfkM.mft
File: 8AmooJT8jrJNxgxn1fEotXrVfkM.mft (raw, json)
Hash identifier: sOyqidUK3AF0LOjc7RM8SG3yabJFpHq+reFehBIeDbA=
Subject key identifier: DA:4B:80:C1:93:30:B5:F0:90:08:33:78:1F:F2:D8:A3:81:86:40:36
Authority key identifier: F0:09:A8:A0:94:FC:8E:B2:4D:C6:0C:67:D5:F1:28:B5:7A:D5:7E:43
Certificate issuer: /CN=f009a8a094fc8eb24dc60c67d5f128b57ad57e43
Certificate serial: 0194BD17696FD05FDFDA2E1A723DBA5872E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AmooJT8jrJNxgxn1fEotXrVfkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0122eb-d367-42b5-a365-5df1872193d1/1/8AmooJT8jrJNxgxn1fEotXrVfkM.mft
Manifest number: 0224
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: 8AmooJT8jrJNxgxn1fEotXrVfkM.crl (hash: JCvsdYhEIAPSw/v3k0qorskwKY9+v4ree9DzXXZdgcI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:69:6f:d0:5f:df:da:2e:1a:72:3d:ba:58:72:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f009a8a094fc8eb24dc60c67d5f128b57ad57e43
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=da4b80c19330b5f0900833781ff2d8a381864036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:31:c0:02:fc:23:28:7e:11:5d:cf:ea:be:
3c:f8:3e:44:69:28:6b:dc:86:9b:44:83:f7:e6:bf:
8c:8e:7b:df:c8:15:7d:5d:91:4e:34:a9:06:b4:bb:
53:46:78:53:f7:e7:f3:76:6e:bc:48:a6:86:47:06:
7e:3a:ca:8e:2b:36:b0:21:c1:4b:6c:9a:72:24:d4:
86:a2:51:51:64:33:24:0b:68:68:4d:ba:f6:2b:0a:
16:8b:5e:65:c0:dc:f1:82:6e:7b:13:11:94:8f:bf:
90:68:77:0a:49:e6:00:c4:6b:83:3d:c0:46:1c:79:
4a:76:f9:eb:ab:b1:fe:92:3f:8a:fb:3f:8b:da:98:
78:7d:77:05:d9:42:be:bd:42:37:16:5c:d2:8c:86:
5b:09:a7:56:fb:dd:7f:1d:6c:33:bd:89:6e:7f:79:
9c:cb:cf:0a:63:00:71:d9:d4:53:5c:f5:52:7c:83:
be:31:b2:62:4f:da:5b:3e:36:1a:3c:00:05:47:29:
d3:bf:33:98:cc:b4:9a:1e:61:e2:35:11:2a:b2:01:
03:8d:51:8f:79:1f:8d:44:f6:9c:0a:77:5a:34:f5:
eb:2b:09:73:3b:7f:8a:1e:28:bf:ee:d6:a3:cc:75:
e1:ed:08:28:2f:73:df:03:2e:1f:03:38:c2:3c:52:
45:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4B:80:C1:93:30:B5:F0:90:08:33:78:1F:F2:D8:A3:81:86:40:36
X509v3 Authority Key Identifier:
keyid:F0:09:A8:A0:94:FC:8E:B2:4D:C6:0C:67:D5:F1:28:B5:7A:D5:7E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AmooJT8jrJNxgxn1fEotXrVfkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0122eb-d367-42b5-a365-5df1872193d1/1/8AmooJT8jrJNxgxn1fEotXrVfkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0122eb-d367-42b5-a365-5df1872193d1/1/8AmooJT8jrJNxgxn1fEotXrVfkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3d:88:e1:86:fb:88:27:a4:ae:a7:eb:70:87:1b:c8:a9:3d:
9b:61:eb:a4:82:7d:c7:58:c6:c5:ab:9c:a9:b7:33:ee:5f:60:
fb:4d:78:fc:15:fa:b8:57:5c:d6:3f:0e:69:56:dc:28:71:eb:
0b:92:56:10:20:59:b5:12:c1:60:9d:01:50:f4:2f:19:a4:95:
47:10:6b:35:1c:33:b5:d1:a1:f1:40:0f:73:77:ab:1f:83:56:
e0:af:17:55:c2:6d:31:a2:c8:ed:b0:bd:8e:a3:6c:cb:01:ff:
0c:38:bd:0f:3e:d5:24:64:f0:0e:a8:b8:4d:2a:97:42:ce:0d:
bb:1a:15:30:2b:db:1e:9e:6f:1b:0d:2b:5a:59:86:52:72:07:
3a:77:cb:a9:10:54:d1:c0:15:9c:93:36:39:02:6c:ae:f7:5a:
e3:c5:22:ca:b7:0c:83:57:12:b2:e3:be:ed:f1:43:c2:f9:4e:
df:4f:00:3e:c7:b9:28:70:cb:09:db:9f:58:7d:9a:8c:0c:0b:
b9:68:5e:80:ab:bb:d4:9c:ff:47:10:5a:c1:60:d4:5d:73:9b:
43:a4:04:d9:4c:07:e7:f6:c1:8c:39:c2:04:15:e3:bb:eb:05:
4b:96:f5:e6:04:e1:51:9d:98:81:37:a1:eb:a4:04:87:ba:85:
b2:7c:07:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:32 2025 by rpki-client