Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
File: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft (raw, json)
Hash identifier: NOsy7bnaBXyToIyKVyGQOt1le9AYWpYg+SvvKor6doI=
Subject key identifier: 42:1C:82:7F:B1:84:E2:38:C8:FA:20:69:74:2D:86:41:0D:12:89:18
Authority key identifier: F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
Certificate issuer: /CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Certificate serial: 0194BC3C31F7F95423F0EAD1E0FEE542C07B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
Manifest number: 0B38
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl (hash: vhTw9/pOfCXTKzLq+HS6gZdlpfncNlLzfGgivn++Brs=)
2: otWydKJIblYoFDAZjlf3bz3XaMM.roa (hash: xwlrdUyrXAa6g8e84xQqVsN9ku3EVyiSX1A/Nu5VNrY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:31:f7:f9:54:23:f0:ea:d1:e0:fe:e5:42:c0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=421c827fb184e238c8fa2069742d86410d128918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:10:e4:96:25:69:02:fb:2d:08:6c:c7:32:0c:
00:0b:8b:90:90:7a:14:0d:1b:05:1b:97:20:d4:71:
c6:60:24:a0:ca:e0:09:23:56:dd:ba:46:2b:f4:7e:
bf:2c:40:d3:07:4c:e0:0c:7b:f4:35:73:d7:94:98:
82:09:cc:20:83:1b:25:5f:e6:15:30:19:8b:4e:10:
2c:01:4a:b2:33:d5:90:2e:0d:18:56:bd:e7:ff:3e:
6c:df:94:82:5a:7e:63:16:57:a7:f8:b4:a0:b2:99:
13:08:a0:68:ae:08:f6:46:c3:9b:ea:33:6e:00:61:
32:d5:be:35:91:5e:a3:d3:30:4f:af:11:7e:9d:70:
69:be:32:41:59:17:8c:3d:9b:ea:ab:fb:cf:0c:73:
85:14:42:9d:4c:cf:30:30:e9:08:e8:df:f1:40:97:
ed:aa:63:6f:83:ac:2c:24:29:e9:fe:b5:11:01:cc:
d2:30:ca:d7:dc:b7:14:2b:40:c3:51:9c:65:05:1a:
a8:d2:cc:3c:f2:2d:1b:d1:e4:98:29:5b:41:f0:4e:
e3:e1:4f:d8:ee:cc:a8:6b:cf:f8:e8:fe:01:ec:b4:
36:27:5f:8b:e3:5c:aa:02:4a:a4:c8:d8:b0:88:52:
4b:86:e8:6d:56:db:98:92:b8:43:ca:e2:6e:aa:79:
b0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1C:82:7F:B1:84:E2:38:C8:FA:20:69:74:2D:86:41:0D:12:89:18
X509v3 Authority Key Identifier:
keyid:F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:11:5c:54:0e:87:07:6a:85:59:31:0c:d7:e3:96:44:29:64:
8a:26:4a:6e:11:51:52:25:14:0f:69:4d:70:76:92:c5:a7:03:
f6:60:ee:60:ff:b1:5f:34:22:cd:c7:18:c0:83:55:e7:b7:81:
0a:f0:bd:9d:b4:df:c3:0e:64:59:a7:0e:45:46:58:39:1a:5e:
29:53:49:73:76:c7:0b:79:65:88:06:ca:92:40:dc:50:d5:0d:
b9:50:9a:85:9a:53:98:ed:26:52:ec:85:38:ec:dc:90:cf:fc:
9b:3b:3f:b2:98:f8:5f:b7:88:b1:cb:3b:4c:8d:f5:e0:7d:8a:
7a:1e:6c:9f:54:b3:88:44:b2:81:7f:58:17:a5:47:29:a1:3d:
e7:45:66:d2:aa:9a:ea:a1:3b:ec:aa:fa:6a:15:4a:fc:18:4a:
94:7e:a7:16:0d:e4:9d:d7:d0:28:b4:7d:75:ea:01:ba:61:56:
ce:bc:57:8c:6c:5f:d9:48:72:2d:bb:bf:34:55:4a:13:3d:e1:
5e:9f:5a:c1:58:ff:76:1f:fe:35:34:c3:8d:db:00:69:21:70:
1b:5f:49:e1:44:1f:f8:ba:82:38:a1:8c:42:a0:15:90:ca:62:
f9:05:18:8e:ca:c6:08:9a:e2:ab:94:27:46:5a:e1:14:18:20:
c9:a2:7a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:48 2025 by rpki-client