Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: nY0Y+UaFDyhOcuFLQ0QkKLgs+vDhsSMPPS2MbGjmpPQ=
Subject key identifier: F8:BF:93:84:4B:05:65:DC:A4:4F:F5:6E:4F:50:B7:B9:97:A7:4C:92
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 0194BD17CB6D77DC193EB5C6D04E3F904549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: TXZJyJBxfnuL76Zr9BSp29Ij9DMxi9D4Nz/9q2AlYnQ=)
2: JdsxpHDD-qqNJkrJeExqLIW60EE.roa (hash: wUmR1eI1Oq3wFYscONP1bCcbT5gMXn5T1HRqSh6Eweg=)
3: Q--C0irvMpEnsSFDblZpFtPtBqc.roa (hash: JFaxMibJvUby0GCOLMJkygjTHxA6xj2IL0k6gCeBVCA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cb:6d:77:dc:19:3e:b5:c6:d0:4e:3f:90:45:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=f8bf93844b0565dca44ff56e4f50b7b997a74c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:37:33:5b:a5:ab:e4:33:e8:5e:d7:4e:9a:5e:
0a:86:2a:11:49:e2:76:a1:bb:27:56:d9:15:81:1d:
db:45:44:4d:b1:fd:e9:e5:a1:6c:3b:56:00:35:01:
d6:a0:ae:12:27:e0:4e:c6:eb:ea:e9:2f:7d:cc:36:
20:1b:69:63:cd:65:24:09:57:4d:a4:61:2c:c2:fe:
58:66:b0:e9:e4:9d:6d:3d:6e:5b:7d:37:d6:f6:11:
5c:5d:f5:95:74:fa:d0:a9:11:b7:a0:39:fb:f4:07:
0b:30:fd:c8:14:1d:23:79:dd:9c:9d:06:6f:13:9d:
b3:07:1d:0b:70:a8:25:e8:06:35:e8:82:e7:b4:f2:
82:e1:c5:90:81:be:12:39:25:db:85:1b:10:e8:e5:
18:4d:e4:d2:d2:00:28:b9:6c:3a:45:8c:eb:ee:e0:
cf:f1:e6:a6:e5:bb:95:e4:71:b9:9e:76:72:77:d2:
06:a3:71:00:35:a8:e4:ed:4c:c1:a7:0a:d1:c5:1d:
d5:7c:fb:51:65:8b:4a:8a:60:e1:65:ea:64:c9:bd:
2f:16:b9:c4:48:51:fa:2b:08:16:7e:18:17:8d:d0:
0c:95:de:12:45:c6:af:db:53:94:3e:ab:67:dc:59:
b9:66:9f:cc:99:c2:01:29:15:e6:7f:e1:2a:36:63:
b4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BF:93:84:4B:05:65:DC:A4:4F:F5:6E:4F:50:B7:B9:97:A7:4C:92
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e1:ae:9f:d9:73:cd:d8:69:8f:0b:00:3e:8b:02:75:55:af:
48:60:07:20:52:b3:9f:95:04:cd:5e:a4:7b:a0:7c:03:3a:12:
ce:06:81:ac:7e:ee:ea:42:4e:d0:30:2b:e3:d2:9e:43:21:32:
a7:48:c8:24:29:14:1c:81:31:82:2b:9c:5e:91:ef:67:90:22:
2d:06:1b:d1:70:c0:d7:b2:ed:d6:6a:ab:0f:01:1b:37:cf:f4:
ae:fe:83:57:4e:c9:31:ce:61:e7:33:71:95:97:c2:80:cf:11:
b0:ad:96:a0:9b:30:dd:92:3b:c8:72:53:c2:09:2d:c6:5c:32:
21:32:3f:a5:6f:72:4b:a4:59:ad:ef:ea:d9:8c:12:77:02:0d:
61:e2:dd:8a:34:71:5f:9b:c1:c7:c1:c5:6b:bb:e8:84:e7:7f:
87:94:7e:12:99:af:14:c9:1b:d9:10:74:60:59:76:94:a8:6f:
b6:2d:55:bd:b7:fc:6e:fb:a1:d5:93:f7:86:20:15:fe:95:14:
77:09:11:ef:85:83:57:4a:dc:19:34:79:24:35:4b:55:c1:9c:
7a:28:1c:dc:36:4a:5d:f5:10:b5:12:d1:fc:eb:ab:40:a7:af:
e9:20:3b:ff:f9:a1:79:77:2d:c2:5b:8d:2e:7d:e7:7d:30:27:
15:da:a7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:18:34 2025 by rpki-client