Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
File: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft (raw, json)
Hash identifier: r4DXiDqH+Qdbvstr5xcb6/FEoBpji/Ite5y2oM/fCH8=
Subject key identifier: 44:00:68:E6:F6:66:FB:29:2B:C9:16:7F:11:4D:00:92:0C:45:36:44
Authority key identifier: F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
Certificate issuer: /CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Certificate serial: 0194BCE0D83A2298C11A9460433BC633DE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
Manifest number: 01FB
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl (hash: yWi3FWAzqk81Cb6p5gekVIv+mh9TdNK9ZvxY1U5g7PM=)
2: _MwQhKVnR_aG2vdLhL9GNdGXvOU.roa (hash: L7braIyd07lwFhqp60fjEjjTIhLctM+CjmNa1wVvJFQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d8:3a:22:98:c1:1a:94:60:43:3b:c6:33:de:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=440068e6f666fb292bc9167f114d00920c453644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:46:81:6b:d6:a8:6d:11:7b:ac:46:60:87:
4c:21:02:e6:a0:de:82:42:33:61:41:08:a8:68:4f:
92:42:4c:c7:2c:8b:ec:9c:03:3e:4f:b0:61:9c:eb:
74:2f:cc:9e:c3:4b:5f:75:cd:a3:b3:33:7e:5a:5d:
d8:ed:62:9c:b5:3a:22:21:13:1b:45:03:c1:85:58:
cb:06:ad:2f:8d:94:ed:1b:7f:dc:78:a2:5a:1f:29:
04:3a:e6:6b:47:23:e6:c3:fb:87:e2:15:1f:5f:6f:
69:89:6b:54:4b:b5:c5:a5:0c:eb:a9:9f:dd:7d:74:
5c:99:3c:6e:21:b3:58:d3:5f:dd:27:ae:35:cf:39:
63:a6:12:87:72:dc:93:8d:7c:5b:81:f2:e8:88:3c:
a5:e0:08:dc:61:f2:ec:02:11:4c:8e:d1:ae:03:5b:
6a:e2:e8:5d:01:2a:c1:05:bb:29:31:15:9f:40:f0:
46:10:e0:7e:1f:5c:c2:1d:62:55:fb:5b:c0:ac:a8:
01:44:7d:2c:a7:b2:43:9d:1d:1a:d5:55:5a:a9:70:
59:a6:db:0e:52:3b:a4:42:93:70:f5:06:e8:b5:dc:
7a:f9:93:5f:ac:f1:be:54:29:49:d5:35:c8:ca:e5:
0e:40:fe:1c:4a:c6:af:61:c8:1c:a6:24:82:ab:dc:
77:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:00:68:E6:F6:66:FB:29:2B:C9:16:7F:11:4D:00:92:0C:45:36:44
X509v3 Authority Key Identifier:
keyid:F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:7b:74:23:bc:4a:0b:64:aa:51:a4:a5:43:4e:cd:fa:ec:36:
2c:e3:4c:03:1a:0f:d6:f5:27:fc:5a:cd:13:3c:38:65:9c:b8:
0f:ea:c0:25:1d:67:20:65:c5:d3:71:cd:10:3a:f1:68:e6:42:
52:0b:a6:2a:e7:92:86:a2:54:52:dd:7d:6c:85:ad:a4:5a:11:
f2:8b:0f:5a:42:10:70:6a:87:e3:51:e3:1b:29:e9:1e:6e:3b:
eb:51:55:60:84:11:08:8f:9d:35:39:f8:e1:6d:7d:7c:28:2f:
55:60:32:55:8b:3b:d4:62:7b:d2:7a:0b:f4:37:8a:a3:e4:33:
c2:d8:49:1a:d0:58:1f:8b:44:2b:c1:e5:44:6c:49:35:ff:ff:
e3:e4:91:bc:ca:61:a6:16:27:0c:65:b1:d7:eb:5b:15:3d:69:
41:dd:5b:a4:22:95:29:da:24:2b:12:fe:98:c9:11:c7:d3:d1:
bd:89:3c:43:a1:fa:ff:9d:0f:2c:6a:15:26:37:3a:d5:21:30:
52:56:de:d6:b5:b7:1e:14:b6:72:d6:26:6e:2e:7b:0f:47:df:
7d:41:f6:f0:e6:c3:b7:c9:08:43:65:de:ee:f5:1d:6c:9f:82:
e4:6d:18:df:c0:e3:63:d5:85:a9:56:59:d1:5e:1c:87:fc:6c:
9a:45:46:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:12 2025 by rpki-client