Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json)
Hash identifier: eX7sN7erueAvhbZv690+sm7PcmyYAhbnsE4u/r4VSYU=
Subject key identifier: 19:B2:AD:E7:8E:CC:27:D4:64:EA:74:C2:FF:46:4E:CC:6A:B2:E1:63
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial: 0194BD178594E8E67F5F5A7826F19C64B443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
Manifest number: 0E79
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: 3hbfOacsgkP1pg9qyg2MfHcWFYc.roa (hash: cOfUIokArUM0fSLBq8ZJr6uobm8IIPK6h0yhiKwO2kU=)
2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: s7cKQhTnqhWuIKkRZUOnZVkUqpMEg7979tb2cQ5CMTw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:85:94:e8:e6:7f:5f:5a:78:26:f1:9c:64:b4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=19b2ade78ecc27d464ea74c2ff464ecc6ab2e163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ae:e3:96:b3:96:68:6d:fc:f2:e8:68:1b:d2:
d4:e1:b1:2b:0c:3f:ba:82:99:25:a8:fd:a5:00:c7:
45:c3:f3:0a:cc:fa:35:e9:be:49:23:df:eb:71:7b:
e8:22:ae:a9:77:35:c3:5c:94:52:65:14:29:a2:b1:
6c:4d:cf:0a:fd:4d:4f:9b:6c:5b:18:f3:1b:3e:f4:
54:ef:64:c9:6f:e1:c5:54:96:e5:af:db:ba:40:3b:
bc:5b:04:73:55:ae:bf:3d:17:de:38:da:c2:d4:46:
af:0a:dc:54:0a:25:ce:76:cd:c2:55:d9:9c:1b:cf:
66:d6:d0:ad:0e:47:b4:5b:55:a1:39:f0:97:00:52:
af:06:78:ab:6e:6a:e6:ac:5b:fb:d5:2f:7f:dc:ae:
51:39:4c:0e:9f:72:57:47:5a:c0:1e:1f:7d:5c:e2:
96:be:92:19:09:c4:c0:e1:f1:d8:0e:d3:2f:ad:b6:
e9:6e:27:3a:f3:b3:55:a9:77:62:55:27:cc:ac:96:
fd:14:58:6e:7f:0c:0f:eb:f6:42:f4:5a:90:e5:26:
5c:75:be:47:2c:ff:9a:e7:c2:6f:9d:9d:24:af:58:
29:e5:ef:51:08:de:87:28:8b:f3:fc:f7:0c:15:ec:
42:47:b9:d0:51:a8:d9:29:e0:cc:23:28:6d:1e:b9:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B2:AD:E7:8E:CC:27:D4:64:EA:74:C2:FF:46:4E:CC:6A:B2:E1:63
X509v3 Authority Key Identifier:
keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:02:5a:d9:54:0e:d0:40:22:89:36:7e:43:0c:b1:06:13:86:
82:b5:47:57:df:76:27:ca:a9:78:c4:d4:34:18:a3:b7:b9:2c:
f3:74:ef:5f:7d:c2:02:71:30:f7:8e:2d:1c:76:cb:4f:51:b4:
2c:e3:32:6d:cf:c2:1e:c9:e4:20:fe:5b:e6:36:19:8d:00:6f:
c9:1c:64:37:3a:bf:9a:b5:b0:cb:4a:95:55:a3:6e:a9:19:f3:
24:72:30:9f:a1:4f:22:77:bc:64:3d:f1:91:6d:f5:d7:81:4c:
1b:48:d2:dc:cb:10:5c:ec:a5:71:47:56:a4:91:5a:59:17:1d:
d7:55:62:43:b8:1c:1f:3b:0f:d6:41:a2:75:56:c6:26:10:81:
fa:15:61:40:4c:89:63:a2:55:73:bb:12:58:a6:b7:ed:00:18:
30:74:4d:9b:50:07:d1:00:c9:c6:3a:83:1e:45:97:cd:a3:06:
a8:49:0e:ff:fa:91:55:38:f4:23:ad:0e:d8:37:9b:0f:66:09:
74:93:cf:eb:95:44:55:97:33:ae:e1:f9:70:b9:72:00:4b:ba:
77:0e:88:94:9e:57:46:97:a5:a4:33:db:3f:75:a1:eb:02:39:
24:4f:29:63:8d:12:4b:89:21:29:da:a8:30:04:dc:5d:1d:82:
59:57:72:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:40 2025 by rpki-client