Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
File: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft (raw, json)
Hash identifier: g3qKj/MueVZTNBYv5xmvJ7QNvUAlYHb5MILrxOv58IE=
Subject key identifier: 32:5C:A4:AC:78:9A:B4:02:E7:F7:C2:2B:D4:A3:AD:7A:81:AC:AE:81
Authority key identifier: AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
Certificate issuer: /CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Certificate serial: 0194BD17F6DC05095E9AC93EC97E43FD8443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
Manifest number: 0889
Signing time: Fri 31 Jan 2025 16:00:51 +0000
Manifest this update: Fri 31 Jan 2025 16:00:51 +0000
Manifest next update: Sat 01 Feb 2025 16:00:51 +0000
Files and hashes: 1: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl (hash: es/PE6u0OGT7KkqUDOgU+unB92l+e9VztNk2OhjTvXs=)
2: y434m32YaOSFWfdjMrvD69-28ws.roa (hash: 2wH2CADXRiwQAKzkBQR9rJEZcF/YGQDp6VtufnWzYz8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f6:dc:05:09:5e:9a:c9:3e:c9:7e:43:fd:84:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Validity
Not Before: Jan 31 16:00:51 2025 GMT
Not After : Feb 1 16:00:51 2025 GMT
Subject: CN=325ca4ac789ab402e7f7c22bd4a3ad7a81acae81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:39:82:be:df:13:19:a2:09:44:fa:6a:f5:
94:07:3d:a7:09:c3:54:03:71:88:79:15:81:ef:56:
f1:49:b5:17:5b:90:66:46:10:08:f1:9c:66:f8:3e:
41:c0:7e:33:0f:9e:7c:59:f2:03:db:b6:ac:cd:e2:
10:07:b9:73:12:f2:fc:42:40:70:9a:76:91:14:8e:
c9:0f:6f:29:cd:2a:84:cd:4f:31:95:c7:26:1e:e8:
27:b6:71:a8:59:4b:1c:03:2c:6e:5d:ae:62:3e:6c:
ba:3b:25:13:54:f6:8e:2c:32:c3:20:70:5e:8c:df:
0f:71:9f:b8:4d:96:98:15:fb:0a:03:0d:21:6f:c1:
17:8a:30:74:d6:56:bf:35:a1:a1:f9:9b:df:29:1d:
5f:fd:6b:73:b7:d4:cc:e2:4a:f3:be:01:b1:da:62:
6a:92:b5:f8:ba:d9:44:a6:88:77:f1:13:9c:9a:50:
d1:97:ff:3a:19:90:f1:91:27:74:45:43:b9:83:bd:
0c:10:0b:b5:3a:5a:02:1e:0f:5d:47:ec:25:cc:dc:
2f:e2:a3:32:3e:51:fb:b3:11:19:73:80:d5:c3:d6:
ef:28:31:bc:fc:23:67:8a:e6:e4:5b:f7:86:bf:8e:
16:36:56:c0:6e:49:bd:11:9f:57:58:89:d2:70:ba:
a4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5C:A4:AC:78:9A:B4:02:E7:F7:C2:2B:D4:A3:AD:7A:81:AC:AE:81
X509v3 Authority Key Identifier:
keyid:AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:43:ab:a7:a2:02:96:97:48:4e:72:20:07:a7:9b:fd:a2:16:
f7:62:53:2d:d1:75:4d:dd:df:23:37:f0:38:4c:c0:92:e3:0c:
29:7f:32:01:f1:ad:e5:b3:bc:c3:09:3b:d2:bb:0c:f7:06:87:
2c:31:0d:5a:93:19:db:c5:4e:d2:be:bb:6d:11:a1:e6:b9:ad:
2e:3a:7c:d8:4d:59:76:8c:19:e1:3e:30:e5:38:32:d3:b6:cf:
5f:6d:f3:39:a0:34:b3:4b:22:ad:37:fe:25:19:8a:a7:bd:0d:
e4:ee:ac:b1:80:96:9a:14:3f:7b:08:ac:bc:31:d9:17:38:3e:
2f:71:fb:92:28:be:0c:34:8e:67:c2:4b:03:d2:38:c1:34:3e:
ea:cb:f1:03:f0:99:6f:eb:f0:d4:92:c0:93:18:7c:8e:86:ac:
32:96:78:a2:b4:7d:19:4f:11:5d:3b:01:cf:00:00:af:b1:c7:
9a:ed:25:be:03:bb:f0:c1:aa:95:fb:a6:76:b8:1a:d0:88:fe:
e0:de:9b:8b:a8:41:2e:e1:c3:48:35:c7:19:ae:62:29:b0:c6:
99:fd:94:b5:52:12:d7:ee:b0:81:71:9c:60:f8:82:c9:cb:2a:
23:b4:c2:3f:02:36:0e:81:74:40:5c:56:8e:4f:b3:e6:32:81:
6a:1e:0a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:32 2025 by rpki-client