Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
File: 8nptTTKDKDFyXEjbUYokAPGpJL0.mft (raw, json)
Hash identifier: FLbWAHYNhrV5NocT9fy7gK1FO74+m2J/phAyf2LSmmE=
Subject key identifier: 1B:A1:DF:A1:2B:5D:7B:21:74:F9:C8:11:63:D9:F4:F5:FF:20:70:01
Authority key identifier: F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
Certificate issuer: /CN=f27a6d4d32832831725c48db518a2400f1a924bd
Certificate serial: 0194BC3BF17B744CB12161C135A5ED02F622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
Manifest number: 133C
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: 8nptTTKDKDFyXEjbUYokAPGpJL0.crl (hash: 4AB2RNTxNwV27tzM3J1McOoyrnvthIYMqJh6CpQcfk4=)
2: m0jbiHxRktR_kE-i3D3woRX2ZsI.roa (hash: fSOohTJ+oYWg/YD/VykP7b8U7lIYd4B0MDv4mOCNuT8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f1:7b:74:4c:b1:21:61:c1:35:a5:ed:02:f6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a6d4d32832831725c48db518a2400f1a924bd
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=1ba1dfa12b5d7b2174f9c81163d9f4f5ff207001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:99:92:67:e3:95:a2:c9:cb:2a:16:4e:f9:
fb:f0:3e:3c:6f:33:94:da:6b:8a:1e:86:63:0b:7c:
72:29:78:6c:25:e9:d3:9c:0c:c2:a9:69:1c:62:a3:
76:42:50:4b:2e:86:5e:a3:a6:4d:d0:b0:dd:e3:2a:
2a:c0:59:83:38:a1:bf:38:d3:97:29:53:09:dd:d9:
17:26:15:a8:b0:ab:b1:79:e4:21:68:a6:ce:b8:d2:
36:57:75:b6:36:a2:ac:22:f5:db:03:a0:4b:44:1d:
fb:43:8d:9e:f7:97:f3:96:0d:fe:a1:7f:be:6e:3c:
58:c3:aa:e3:c5:1d:c8:45:47:fd:14:3d:a7:a8:d3:
2b:db:c6:4d:0c:29:e2:40:7f:63:42:16:9a:d4:3c:
8d:7d:62:c7:1f:5c:c0:57:43:6b:55:cf:d0:9c:15:
e4:51:04:b3:e2:73:c7:01:bf:96:85:04:29:f2:fe:
1f:88:2c:51:f0:06:bb:a2:d7:ef:dd:ad:57:ef:74:
e0:55:8e:e7:29:7d:32:b1:1e:7d:cb:24:a7:32:82:
5b:8e:ae:d9:c1:24:53:b5:6a:e5:67:86:a8:04:a0:
83:19:14:08:87:26:e1:62:81:80:e5:c5:da:fa:44:
f6:87:a5:fd:fa:bb:f7:af:1b:38:0c:af:4f:0c:a9:
4a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A1:DF:A1:2B:5D:7B:21:74:F9:C8:11:63:D9:F4:F5:FF:20:70:01
X509v3 Authority Key Identifier:
keyid:F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:16:ee:6c:0c:86:2e:3e:fb:ff:1b:b9:e0:92:d0:b2:10:41:
ab:ea:d0:6a:01:8b:13:b8:3e:b1:f6:0d:ca:1f:a7:f9:95:ce:
d2:3b:9f:45:fe:8a:7c:a6:01:57:32:fa:63:c3:1d:03:d1:cb:
c5:39:b7:c5:58:9e:48:08:fc:51:be:fe:e5:bf:7a:2e:16:f2:
9e:1a:f1:88:7d:22:cb:78:81:6b:dd:b3:68:5a:a6:3e:ed:f0:
65:5f:8b:82:3f:51:77:80:3f:4a:e8:1d:89:cb:44:c1:e5:9b:
76:91:e8:d4:6d:49:98:84:47:50:6c:2a:48:92:83:aa:38:2b:
44:3b:cc:0f:0b:4d:a3:27:b1:b5:35:80:d1:e2:c1:0f:00:2a:
f5:3c:62:93:18:77:9b:5a:37:91:eb:86:d3:d5:86:ca:3c:06:
55:35:15:5c:3c:39:09:9f:17:36:99:32:7a:7a:dd:2a:1e:ec:
c7:87:94:56:19:89:6e:89:b5:1b:ad:7a:ff:e8:07:94:13:58:
ef:cb:e9:22:1e:01:fc:01:d1:48:e6:59:4c:bf:98:d3:cd:d8:
c9:f5:62:3a:8b:23:49:a1:81:69:95:ad:ee:2d:2b:e3:38:a1:
7e:3e:79:8b:53:3f:72:5c:40:de:ac:5a:ef:ec:66:39:e7:cf:
54:5a:22:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:33 2025 by rpki-client