Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
File: j1T8geUVM4bLQsFzMwUNqDGtqeU.mft (raw, json)
Hash identifier: iG62ZicZ/KVQVehVHQXFXNtqCgJ7/irQ/v8hiyrQ1K4=
Subject key identifier: 03:B6:A9:51:A1:F1:92:6E:34:CC:42:9D:DB:4B:9E:25:76:1E:3F:F2
Authority key identifier: 8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
Certificate issuer: /CN=8f54fc81e5153386cb42c17333050da831ada9e5
Certificate serial: 0194BD4E7A0ABB9E9C459CAC55A87B061A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
Manifest number: 08A2
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: j1T8geUVM4bLQsFzMwUNqDGtqeU.crl (hash: EePeuKjbihk8Fh/4TLJBAnnDcT12P484u93rDTyi+94=)
2: v0kVKV7zgFySWfJ-lGmi8aljQUA.roa (hash: QFeJpmHiChV7sVzkjOtXP/zd/9P3djdIsqxjZcryjik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7a:0a:bb:9e:9c:45:9c:ac:55:a8:7b:06:1a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f54fc81e5153386cb42c17333050da831ada9e5
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=03b6a951a1f1926e34cc429ddb4b9e25761e3ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:df:3c:a1:0c:c1:e5:f0:c2:43:ed:60:c6:b0:
d0:18:16:45:88:ce:18:8c:82:17:65:f0:db:10:5a:
a0:88:5f:15:61:c0:fa:76:16:ef:07:f4:13:d1:91:
1c:79:f6:58:8d:ef:79:47:95:59:25:80:84:8f:29:
e2:07:93:8c:72:18:16:ba:d4:98:cd:a4:46:2c:84:
57:d5:f8:4f:76:98:21:25:7f:f0:06:cc:9b:77:22:
ec:83:19:9c:d0:ce:52:ab:8e:d7:df:09:02:79:59:
2f:71:23:cc:f5:9a:55:b6:54:03:07:1b:19:69:90:
ea:90:15:cc:f7:5c:ce:46:3b:f1:7b:13:3c:1b:36:
a0:29:4f:4a:04:04:42:bb:22:80:76:8c:4b:5d:ae:
1c:34:c9:dc:8a:49:be:3a:64:79:49:1c:86:12:d0:
e7:8d:64:d4:a8:d3:20:aa:ed:fb:88:6c:48:24:cd:
37:b2:41:88:d5:06:fa:08:c2:da:a5:77:c2:a2:2d:
ef:0f:07:58:f6:ea:91:06:61:72:fa:e6:28:e4:60:
9d:67:03:ca:45:47:b2:5f:53:33:63:c8:ce:9e:3f:
be:86:e7:68:77:6c:be:4b:37:94:ce:4f:71:0c:58:
0a:52:6a:e5:1b:3b:b7:97:0e:80:db:d6:2b:8a:3b:
0d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B6:A9:51:A1:F1:92:6E:34:CC:42:9D:DB:4B:9E:25:76:1E:3F:F2
X509v3 Authority Key Identifier:
keyid:8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:be:f2:dc:2d:b9:1b:3b:90:43:b7:1c:7c:58:21:06:ac:26:
bf:c1:f3:e7:ec:54:a5:12:df:58:ef:8d:91:29:c6:b5:50:c1:
f4:3a:81:36:af:3e:c9:62:6e:da:a7:8c:22:d3:6a:8f:72:d2:
51:8d:88:5a:44:7d:8f:fd:7b:71:be:f3:a9:8b:08:75:f2:dd:
f1:ed:d4:1d:19:38:73:48:e8:93:26:9a:5c:cb:c6:d8:67:e5:
08:49:12:c2:e6:8e:28:dd:ae:80:90:1d:33:1c:0b:62:8a:d0:
29:9e:4a:d7:e8:f8:da:cc:9e:4c:26:5e:cd:44:69:ba:92:f7:
39:cc:ae:c7:1c:ac:2f:22:f2:47:37:67:ba:39:49:5f:75:90:
0c:db:65:2c:82:4e:c4:89:d3:ce:ad:96:de:09:f0:62:de:17:
a9:af:98:44:3f:39:75:d0:0d:74:5e:d7:49:13:3a:20:fe:f8:
7f:e0:99:f0:1d:9e:c1:09:44:69:58:68:f5:6f:91:a5:59:04:
04:88:06:7a:3f:60:3b:ed:f6:1a:fb:a1:2d:28:48:32:2b:20:
7f:5d:41:fd:f3:80:59:f9:c6:b5:d0:3c:fe:7b:3b:40:09:f5:
d8:e3:4f:f1:ea:73:91:8b:07:28:3b:67:f4:63:c8:cc:74:da:
6c:e6:c1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:58:21 2025 by rpki-client