Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
File: 8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json)
Hash identifier: fB3pgBoXaX/5y3Ioev1FUwyexmt5JPQGO3dyDHGxXcE=
Subject key identifier: 89:50:36:53:D1:EB:9D:90:3B:23:CB:19:9C:EC:A4:8D:CD:5D:C1:98
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 0194BD85611F1DAF0A4209500DFEAD5DF363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
Manifest number: 0E4A
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: 1gtsCJyHdZ_mz1Vmc6aYSOZRTug.roa (hash: i5FmepCDxpYMWJtIWumi8I2WhRPEkV925D+zrSFUKqc=)
2: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: YQZEGdrgUS759xlwNpF0WT/akidjXmVpXUFt5kK8Twc=)
3: AFN8OqvwZcsViNN-78O6BvKElME.roa (hash: gpOsJUC88/6LJdG6QKOWEGeO9P8/YN9o1I8OET+li9E=)
4: HzrOiNg5IGbvxaY6EJtaFTiPwJc.roa (hash: YVHrJ9qFMIVBjiboinqQXWeAb+UlfN0QhYG5EqTl3JU=)
5: KuzmOknbrD4Lg71OoDCO-y0GoDQ.roa (hash: L4TpWALjC8fwxZDKVNiQiJm1WAVC/DpX7t4BNMww1vk=)
6: Xw6d5Q0Ua1XRZl5MjugABbqCL-g.roa (hash: 7lcJjOAWe6HvAJ8ku7/K4ZXcDrrbdwoOF4w1DXALzIA=)
7: Y1odvpmyDgd_SZNft3LtP_Y9m5Q.roa (hash: 6tgo1juOE3j4wf1OK40ZNiTNEBkar47yAuVkY/NJHx0=)
8: hFAl1HVJl_9l3iGKDXy7Q3YLL-4.roa (hash: t3lebss2cDykApymCPDX/VFxLKKQQSAwSa+9uLLWAvg=)
9: lmLPjrfNDPS9XohB9eEXKDTvTVw.roa (hash: YUDeNZCjz7C+nv1yj/KNPiCOaWxteb6jP1PE6tH/qfc=)
10: mHX0FmbVMRqJAlWCzCmrhY01JJs.roa (hash: lTlxWXxEQJkGJvs557CO0nbvucEpOcbcDj+JEOR5KCA=)
11: vwnatcxNwSZQjN_EAgtCA6gLjGQ.roa (hash: is+QjkNRgmAAQFm1WLdb+VI9EY3XXeS9tjv/htKBkks=)
12: wOKO5BfevHhq6oErWALub8pu8xU.roa (hash: JFoG8SyIRYLSlAyJTBoEWjYzWkPzFQdNMJLWFlUmxRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:61:1f:1d:af:0a:42:09:50:0d:fe:ad:5d:f3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=89503653d1eb9d903b23cb199ceca48dcd5dc198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fa:bf:5e:8d:39:8f:c5:6c:49:7b:9b:1d:a4:
18:cf:b8:bf:f2:b0:8e:cd:40:91:f1:52:4e:1c:6c:
d6:21:7d:1c:02:42:01:50:72:2e:13:ab:b9:3b:f9:
88:5b:83:44:7c:68:a9:aa:08:ef:10:55:a8:99:0b:
f6:83:29:ce:02:6c:0d:fa:c2:ab:01:f1:b3:ef:7a:
2f:20:3e:fd:33:fe:e6:37:0b:77:fe:78:02:31:7b:
fb:ea:5d:78:de:3a:1a:da:4c:25:5d:bf:81:19:9b:
5c:c3:61:18:9d:30:b0:3b:b6:fd:d4:69:70:49:53:
b5:3b:55:c6:8f:20:b0:87:a4:62:e4:00:ba:3a:e3:
cc:6a:96:9e:58:c1:8b:f7:52:0d:33:6f:56:13:75:
7c:50:47:30:7b:fa:76:4b:de:2a:38:d0:8d:72:44:
6f:79:20:aa:0e:ef:e3:73:72:22:41:d1:b7:59:81:
47:39:c8:71:15:75:24:05:10:fb:69:73:75:fc:d9:
1c:2d:86:e9:fc:83:e8:f0:75:29:cf:f2:c5:92:7e:
20:8b:5d:e3:3b:d2:cf:fc:3b:ee:e8:30:fd:87:a5:
ce:bd:49:74:a7:68:5d:94:07:c2:68:e4:5a:75:07:
de:4c:26:a4:85:68:0e:b2:9e:60:ff:d0:31:d1:ef:
1a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:50:36:53:D1:EB:9D:90:3B:23:CB:19:9C:EC:A4:8D:CD:5D:C1:98
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7a:40:dd:d2:0f:67:a7:61:14:82:eb:67:5d:2e:18:f3:c3:
3a:c1:90:48:2c:6f:5a:26:2a:6e:46:d0:11:5d:4b:31:29:ca:
c4:36:e0:09:7f:17:57:25:ae:c8:3b:f2:9e:69:c1:9a:a8:08:
18:b4:7c:9b:18:89:5e:a8:3b:26:fe:84:d8:ac:8d:21:45:e3:
8b:a4:36:99:c6:bf:87:a5:92:db:54:4e:2e:61:5e:34:db:f6:
0b:59:5e:ed:ca:e7:14:e8:d7:22:16:da:53:2a:3f:ca:f7:d7:
d3:02:1d:3f:91:fd:87:a6:fa:42:1f:15:22:2d:e6:ee:1a:da:
fa:6f:3f:95:4b:42:31:07:f0:41:8e:5c:ce:a5:71:e7:ac:73:
57:82:c9:ca:c8:3c:7d:1b:14:4e:b9:1c:89:14:fa:0d:13:d2:
b8:fb:93:37:fc:bb:9b:ef:df:ac:66:48:db:57:9b:0b:e4:00:
b1:8e:48:ca:f7:f5:6f:c5:56:56:df:53:38:5c:be:30:29:16:
f8:56:1b:07:2a:31:d3:55:a3:68:62:36:86:ff:3d:3f:42:aa:
f7:f8:3f:9b:8f:02:ac:1d:04:69:73:e6:1f:b8:34:63:42:7a:
43:af:a6:ec:1c:a4:4d:94:77:86:f3:dc:c4:be:d2:03:f9:6a:
2a:3d:46:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:28 2025 by rpki-client