Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
File: k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft (raw, json)
Hash identifier: o0igT7uIqtnGO1qChE3gtCao6KsOEm3IA18uTtzs/8s=
Subject key identifier: DD:12:A7:13:31:8D:E0:6B:B0:B7:8B:6A:EF:D2:9B:02:67:42:F5:D8
Authority key identifier: 93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0
Certificate issuer: /CN=93ef2e433d00a253c99a45048507944385457cf0
Certificate serial: 0194BD175A6FBFA19633DE5E227A8A1E1645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
Manifest number: 0868
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: 1-s_qFSQKBRG1ihqBmhzdBKCiJNM.roa (hash: LshraZqBwrj50k+MVV5n8/UzMU3Sq3fCYs5NyUMMWNA=)
2: k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl (hash: JfyvAyZx5Pesu9U/FeA70A6K9HZIJkFOSYxXZt61gkQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5a:6f:bf:a1:96:33:de:5e:22:7a:8a:1e:16:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ef2e433d00a253c99a45048507944385457cf0
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=dd12a713318de06bb0b78b6aefd29b026742f5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:ca:29:3a:ff:4b:a4:18:5a:d3:85:f6:77:
e0:f8:3c:bf:1c:b2:9a:b4:c8:11:78:0e:19:f4:d4:
ba:c0:ca:92:e8:e6:1a:1d:d5:67:70:4a:6a:a9:5b:
13:b0:dd:45:83:6e:84:57:21:1a:2c:d7:d8:fb:48:
03:3d:e4:a4:b6:34:52:58:de:91:97:a3:40:0f:66:
4d:91:9b:7c:5c:a7:ef:3d:c2:3e:ee:ba:5f:6b:4b:
1e:49:5e:30:69:0d:a3:8f:4a:8c:7a:4a:6d:ae:dd:
65:dd:61:63:ff:92:b8:82:69:ec:51:6b:cd:72:96:
a5:d6:85:b1:a6:68:11:ba:29:63:72:9a:c4:ad:b7:
ac:0d:dc:9d:56:ce:c6:ad:64:6f:49:89:e3:53:09:
33:e3:a8:4b:0b:6e:4c:18:95:7e:21:9a:4b:3b:eb:
20:8e:8b:03:bc:8d:03:4a:28:9a:64:d3:51:c7:4b:
c6:8c:40:e9:8b:77:72:de:95:c2:f3:fb:ee:55:20:
37:91:0a:1f:fc:65:de:80:ec:44:c9:96:7f:ec:6d:
30:84:95:bb:d4:4a:25:17:03:72:84:5a:01:9c:13:
86:f2:90:65:1b:04:93:22:a7:87:f8:b6:28:07:9c:
6a:37:6c:f0:18:71:56:79:21:0c:ef:ff:c4:f2:e9:
32:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:12:A7:13:31:8D:E0:6B:B0:B7:8B:6A:EF:D2:9B:02:67:42:F5:D8
X509v3 Authority Key Identifier:
keyid:93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:1f:6f:40:d4:d8:6e:e9:1f:07:35:fe:20:26:7d:18:24:e6:
9e:20:01:55:f9:84:15:4f:e9:15:27:35:98:f7:03:70:9c:06:
39:14:c8:ac:79:de:79:3a:e2:51:10:4f:91:44:21:bb:a1:07:
d6:f4:f0:44:a9:0b:8a:6f:8b:b8:f6:79:54:6a:0c:c9:00:c0:
c3:fd:14:0b:67:f3:b7:06:be:ce:d4:65:f1:d6:53:73:6a:e1:
4b:6f:05:e2:37:65:dd:17:cc:64:95:96:47:16:4f:dd:62:ff:
9a:2f:63:53:a3:a3:75:9f:9b:5e:db:a8:14:cc:9b:bb:4a:dc:
17:20:36:d7:1a:03:43:77:2b:f4:62:d1:c7:9a:0d:45:3f:e8:
98:63:7b:30:42:ce:06:c4:fb:54:ec:74:b8:7a:0a:e5:b5:79:
13:8a:9e:53:cf:15:0e:f4:37:cc:8f:9d:87:fc:4d:d9:3d:50:
92:fd:c6:62:ef:58:2e:0a:b0:7e:df:95:a8:e4:16:7f:c5:a4:
1b:13:71:d6:dd:b0:0a:74:ff:16:af:ca:ea:0e:ef:a9:74:c5:
67:6d:db:03:a0:27:c3:cf:6e:50:c5:3c:28:10:ad:eb:be:04:
61:07:5c:7b:2f:13:25:d8:45:7e:7f:a3:94:9c:7e:68:57:ec:
52:e6:7b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:33:09 2025 by rpki-client