Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
File: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft (raw, json)
Hash identifier: 0DDzHhansOqun4pxP7i0xIo7FmhVgey/UuvqCyiJ1+0=
Subject key identifier: 2B:66:60:53:5C:98:C2:A1:9C:80:C5:5E:4C:D0:3F:01:E1:A5:C8:1F
Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
Certificate issuer: /CN=73c2f49445980199475512f5297608f45d08bb5a
Certificate serial: 0194BD1747BAA05456D018783222CCCDE44A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:06 +0000
Manifest this update: Fri 31 Jan 2025 16:00:06 +0000
Manifest next update: Sat 01 Feb 2025 16:00:06 +0000
Files and hashes: 1: T8CaRngGi_3wzcIt9PzPZ1wckgY.roa (hash: 37vNH+xFSIYvkh93FypQjuj5VJFxVq0H4oy/OpBqTs8=)
2: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl (hash: S45YO+eNHZbfvabtCmRR3+S9eu/Hypz6iRhuIt9TwKo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:47:ba:a0:54:56:d0:18:78:32:22:cc:cd:e4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a
Validity
Not Before: Jan 31 16:00:06 2025 GMT
Not After : Feb 1 16:00:06 2025 GMT
Subject: CN=2b6660535c98c2a19c80c55e4cd03f01e1a5c81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f6:35:36:d6:0c:ea:58:b3:58:7d:0d:32:c9:
4e:e9:96:62:93:46:a7:f7:d4:65:0e:d2:b6:bd:d1:
ae:e9:a7:76:82:27:61:ce:ea:54:f5:a4:7d:9e:85:
12:f1:eb:34:3f:3e:6d:46:9d:87:3c:87:19:27:f8:
57:c8:ce:d8:05:e7:cb:08:2f:56:68:0e:e4:19:6b:
59:3c:e6:58:1e:95:16:ec:ae:f2:89:13:76:a5:e9:
5f:d3:2f:56:ad:60:03:38:03:d1:3f:bf:59:56:b2:
5c:6f:7a:07:c6:e5:2a:95:a3:a7:e5:e2:fb:fd:be:
a2:47:49:eb:c3:d8:20:4e:67:e2:11:7e:ab:0c:f6:
30:cd:46:64:4d:eb:a2:33:6c:25:22:1c:03:a8:67:
98:6c:e1:b8:ee:46:0e:ae:f6:06:03:42:5f:d0:8e:
1c:84:00:1f:67:0d:75:f2:32:69:04:9e:b5:1e:a9:
2d:65:cd:96:2c:04:1e:6d:cb:b7:2e:5d:e4:12:a2:
05:1f:10:de:52:96:6b:10:b3:dd:56:19:2b:61:30:
ba:95:ad:32:58:7b:17:48:85:14:c2:5c:d3:9d:c6:
ef:48:87:3b:b5:df:a9:51:e0:c9:bc:46:40:ef:b1:
82:1f:99:f1:21:dd:da:80:9f:9b:8d:44:9a:50:e2:
f6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:66:60:53:5C:98:C2:A1:9C:80:C5:5E:4C:D0:3F:01:E1:A5:C8:1F
X509v3 Authority Key Identifier:
keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:91:34:4f:d1:f1:d9:ae:f9:cf:dd:6f:fc:2e:6d:d9:68:4f:
94:bf:2d:9a:8c:46:8e:86:1a:6b:d6:69:b2:43:21:69:b1:fc:
82:82:04:98:c1:82:d2:40:19:8d:b6:db:02:c0:db:b5:fc:80:
7b:1c:7d:f8:1b:80:9a:8c:51:cf:78:10:c8:e5:42:17:22:8b:
83:12:c5:32:fc:a3:73:5d:f4:31:46:4c:4f:43:eb:d5:c6:23:
87:25:45:3d:b6:fd:1a:02:47:10:52:d6:d8:a4:1c:c4:e2:eb:
ee:11:29:cb:24:7d:c6:86:b9:c4:a7:67:29:ac:52:98:20:a0:
a6:be:53:2c:cf:76:01:b4:26:61:e8:3b:b1:99:cf:13:3c:c6:
01:85:fb:9b:83:7f:49:37:94:b9:37:b2:f9:2c:d1:55:eb:3d:
a6:f3:4f:03:46:ce:80:fb:c1:2d:a2:c6:31:c4:ef:9c:51:ec:
37:08:5e:fe:a3:06:50:76:41:bf:04:70:2c:5d:1c:82:b4:f1:
56:03:08:89:bf:5d:e5:6b:21:51:0e:49:ee:e8:bf:06:15:e7:
87:b1:2b:ef:14:3f:d1:e6:ac:44:cf:76:f6:cb:a2:56:41:a6:
86:3a:45:c8:3a:a4:02:81:f4:0a:7d:0e:ae:fa:90:aa:4b:40:
19:18:33:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:38:16 2025 by rpki-client