Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier: ms5d48veF7Y4fjzxiNGEcDX7yc+tUmvyCUJ0aLn3aRo=
Subject key identifier: C5:A9:78:AE:F6:0E:11:5A:59:BD:A9:06:5C:C1:E8:5F:75:E7:F4:3C
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 0194BC73015C825AB1CA7E72CF062109A538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number: 0E73
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: 3xyNiwxMLt2FgnnzD8FWO0WnAhc.roa (hash: pOZz2o1zgseBlXSeMbMTXOoQ45eoVXgqdP67Uo4BTQg=)
2: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: xVEqxt6cm+kZVCmHgbcZUlajm/cT2pxBS08ACEfb628=)
3: I-Q-pMgCHQ9W_jpWDux3P7cZIcY.roa (hash: pAX53nRh4A+NdTng//otyGRQizgrDPu6+ERbaPVic0o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:01:5c:82:5a:b1:ca:7e:72:cf:06:21:09:a5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=c5a978aef60e115a59bda9065cc1e85f75e7f43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3a:73:be:2f:0b:ac:d9:00:9c:f8:53:45:a7:
2b:b5:f9:6b:78:3c:68:9b:21:71:7a:d7:91:eb:b4:
75:b0:5f:e5:30:50:3e:4e:f1:5c:1c:f3:c4:8b:b5:
5f:0f:8a:d0:35:c1:62:ce:fb:40:13:33:bb:8e:60:
dd:39:ad:a2:b9:12:02:79:21:e7:33:2f:ce:87:aa:
f9:d8:d1:40:c6:38:36:bd:71:67:1b:e3:de:7d:92:
71:43:0b:20:67:3c:0e:3d:5f:71:24:46:f2:0d:72:
b5:2a:0e:e8:83:b5:44:7d:77:c3:e9:f9:9a:d7:ef:
da:97:78:68:c8:e2:09:9a:bd:18:07:d6:0b:a6:92:
40:dd:8a:06:b1:00:da:21:48:d2:f1:ab:ef:e9:69:
b0:fe:a9:ce:46:36:89:d0:ef:a1:27:c9:23:d8:71:
5b:81:1f:74:ef:53:be:30:93:cb:c6:dc:1f:1a:ae:
fe:fe:fe:43:35:57:f6:62:ef:86:ce:58:20:15:93:
0c:ef:12:ef:f9:f3:38:0e:ff:c8:a1:76:a3:dc:12:
3c:e5:2a:4f:56:34:3d:48:02:c6:65:8e:b7:4f:b0:
b4:36:c2:de:bc:06:a1:c0:66:58:bc:2c:8e:ee:cd:
3d:a0:e5:f3:e9:5d:7f:4c:ef:a0:89:e6:5f:e7:12:
45:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A9:78:AE:F6:0E:11:5A:59:BD:A9:06:5C:C1:E8:5F:75:E7:F4:3C
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:49:57:56:03:b2:ca:9f:c0:30:71:60:6c:57:99:91:53:bf:
9e:57:56:5b:df:ac:0a:1b:db:e2:0c:64:13:0d:07:69:4e:33:
04:72:7f:f6:6a:f8:6d:23:d2:4b:8e:de:da:2f:d2:6b:4a:93:
59:a6:ef:62:b2:66:5a:dd:87:03:29:89:7f:7a:05:73:90:58:
f2:ac:11:be:04:8f:67:9b:75:a6:af:fd:94:71:c8:e9:64:01:
08:60:ef:b3:bd:4a:ba:f4:43:45:af:e2:6e:1b:e0:a2:5e:6d:
56:3d:a3:22:b6:83:ac:8c:db:2b:1f:9e:44:33:29:cf:dc:e8:
8a:1d:25:eb:f9:49:64:e7:4f:95:97:ed:e8:8c:eb:8f:65:e0:
49:c2:f8:6e:2a:fa:60:09:cf:0e:05:21:87:30:24:63:60:0e:
f1:7e:04:48:c5:61:64:bc:08:9c:a4:0b:10:8f:33:91:ef:c0:
c1:96:ca:02:ed:2b:1a:00:91:26:e7:f6:bd:d5:82:3a:bd:ad:
5e:fb:a5:bf:fe:c0:8c:d9:8c:1e:71:de:70:4b:a2:27:8b:6f:
f1:4d:b6:86:97:25:99:e6:96:f6:fe:84:dc:61:17:9e:14:59:
d6:44:55:18:71:a7:b0:6c:d1:58:5b:f8:e6:0c:26:d7:6a:79:
cd:e1:27:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:34 2025 by rpki-client