Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.mft
File: 8SRlvSRvIjEc6bBe60n3t5FLKgo.mft (raw, json)
Hash identifier: h9Z6LcdPh1/q/D1DNGcu86B9Z40Soja8U2iFdN5weSI=
Subject key identifier: 9A:88:50:47:9F:0D:5E:F4:BA:E4:EA:26:6D:50:AE:C3:5A:3A:16:5A
Authority key identifier: F1:24:65:BD:24:6F:22:31:1C:E9:B0:5E:EB:49:F7:B7:91:4B:2A:0A
Certificate issuer: /CN=f12465bd246f22311ce9b05eeb49f7b7914b2a0a
Certificate serial: 0194BC72EE87DD6CB123628D9FE54803546B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SRlvSRvIjEc6bBe60n3t5FLKgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: 8SRlvSRvIjEc6bBe60n3t5FLKgo.crl (hash: WNXUAl4uZGzOAxzgnHLprcs03CIyPkNo0L4X/6q8DxU=)
2: kWlbajLT3oWxqxE3gffCQHqCWHM.roa (hash: DZ3f9M7b382od72T/F6H5ByHy+dVO8wT6ZXIu3gfGcU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ee:87:dd:6c:b1:23:62:8d:9f:e5:48:03:54:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12465bd246f22311ce9b05eeb49f7b7914b2a0a
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=9a8850479f0d5ef4bae4ea266d50aec35a3a165a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:ed:c1:35:e3:ad:ec:61:c4:25:14:0c:15:
a3:9a:40:8a:80:19:59:4d:ef:ed:bd:f8:a9:a0:dc:
52:dd:40:7a:21:ef:1f:4d:cc:56:63:8e:48:df:ab:
19:e6:3c:7b:39:6d:15:a8:de:07:43:28:1b:0c:e0:
02:70:cc:f6:d8:a4:e5:12:5d:13:de:80:64:ba:df:
7f:79:b3:c5:4b:b3:d6:7f:32:e3:95:90:fd:08:d2:
dc:d9:d8:36:7b:52:5d:1c:44:a1:ae:1e:55:89:8c:
72:56:12:cb:bb:3a:05:5a:90:fb:05:42:6c:c3:2b:
1f:38:d5:8e:cc:c5:a3:6d:6b:55:2b:1f:c7:a1:66:
20:d4:cf:f7:af:b3:f2:dd:66:10:7e:2d:17:04:cc:
86:ae:f9:1d:97:c2:40:e0:55:3c:49:8c:a4:dd:b2:
ea:d1:0d:a0:89:79:07:7f:60:6d:fc:bf:ed:b9:f4:
ab:04:6c:33:58:d3:22:0e:58:e7:e6:aa:d8:c2:79:
78:0d:06:2c:fc:85:7c:19:15:42:d1:02:11:86:df:
f6:ca:c6:e5:44:d5:8e:8c:c6:c0:a0:0e:af:a9:57:
2f:e9:0c:6f:04:3a:d6:0a:78:2b:39:dd:68:cc:f1:
80:ec:3b:49:5d:25:73:56:e0:b5:1c:33:39:b9:6c:
5b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:88:50:47:9F:0D:5E:F4:BA:E4:EA:26:6D:50:AE:C3:5A:3A:16:5A
X509v3 Authority Key Identifier:
keyid:F1:24:65:BD:24:6F:22:31:1C:E9:B0:5E:EB:49:F7:B7:91:4B:2A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SRlvSRvIjEc6bBe60n3t5FLKgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:43:09:51:02:ed:2a:70:2d:da:cd:9d:b9:05:c0:b6:fe:9f:
50:ed:bb:32:4d:96:9d:67:dc:d2:27:96:4c:7b:7b:86:47:b0:
00:2f:21:4d:48:42:57:ed:f3:ba:26:d3:53:07:ce:32:4f:6e:
cb:57:6e:60:01:d6:5d:dc:2e:e9:c0:88:09:f8:63:e3:7a:3a:
57:c3:b7:1c:2e:b6:b4:a6:61:c1:79:07:bf:0a:6e:7a:02:6d:
20:de:37:18:1a:ec:f7:ce:41:bc:da:31:b0:33:5a:1e:c0:3c:
5d:9e:09:7f:c3:f4:81:03:3c:fc:e0:17:da:05:9a:c9:74:57:
5a:d2:9a:fc:f7:80:b5:46:36:81:0d:e0:0e:aa:76:f5:c5:37:
cc:2b:8a:a3:73:07:23:4a:fe:5d:dc:c2:f2:5b:06:e6:48:56:
35:bc:52:34:ec:1f:0f:d1:f5:61:da:dc:01:05:7d:8a:3a:62:
2a:94:3a:d3:e4:a8:e3:fb:e9:8e:eb:ec:67:cf:e1:38:b3:b6:
18:8d:24:f0:ab:02:7e:0a:2d:fb:94:c8:f0:95:df:51:b5:73:
78:78:9b:08:e8:f6:2f:58:d5:c0:60:27:63:cd:3a:89:51:20:
2c:52:85:08:a7:1b:7d:58:e2:a9:55:a0:c1:80:5c:0c:0e:fa:
7a:f0:dc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:35:43 2025 by rpki-client