Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
File: 8_su-07B6bb2xtC6JgdHqcPgrco.mft (raw, json)
Hash identifier: mqac6ZpJcJWTCo9arBsMt3twOnlI7JbFe9V6NIfXQYI=
Subject key identifier: 33:E3:2D:21:D5:AC:A9:EC:C1:F7:7D:96:4E:20:9F:69:D6:2B:EE:D7
Authority key identifier: F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
Certificate issuer: /CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Certificate serial: 0194BC05226D0CC302B9BAA91B68C7F718B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
Manifest number: 0205
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: 8_su-07B6bb2xtC6JgdHqcPgrco.crl (hash: qobAAJwBTC/++1jVlvgivDmytFgkVbp1hQRMkuK40Qw=)
2: ZEIkHOpAjx_99PsiN5R21UlMSKc.roa (hash: vTffovFaT4NCjWWk8Fwv+MgUP11pdffCPeTnPWoxFwE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:22:6d:0c:c3:02:b9:ba:a9:1b:68:c7:f7:18:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=33e32d21d5aca9ecc1f77d964e209f69d62beed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ac:12:11:ac:a8:fd:bb:00:58:92:7c:13:15:
5a:55:e6:f5:bf:b7:45:56:ca:78:24:51:d8:ab:c3:
ba:8d:ae:55:83:60:d5:f3:a9:54:48:ef:98:8e:81:
dd:f3:b0:83:89:0f:16:27:6e:aa:41:56:b8:89:f2:
73:77:5a:f0:4c:75:4f:58:d5:0f:d6:88:d1:84:9e:
04:70:64:d8:ed:a2:1b:ef:50:89:ec:1c:74:3a:78:
01:35:cd:a6:0a:ff:b5:ea:e7:02:0f:bb:24:a5:7b:
5f:19:06:f8:d6:f9:c0:a5:81:1a:03:76:59:dc:de:
3a:4c:12:b6:7e:b1:6a:e5:61:ff:0f:c2:7a:ff:84:
25:a7:1c:03:bc:4d:c9:16:48:e5:c3:84:f6:63:5d:
5d:d4:24:7c:21:cd:a8:c8:99:8e:b4:dc:7a:65:a1:
74:78:f6:ed:4f:88:25:c0:3d:94:d0:74:19:50:ce:
93:4b:33:76:01:fa:aa:77:a4:da:8e:2c:c6:02:01:
1d:41:68:58:d3:39:bd:30:6a:44:d0:d7:ce:a2:2b:
5e:bc:4d:65:04:22:a9:96:87:63:73:c7:85:98:2a:
59:85:f2:9b:2f:6e:c7:3d:58:c6:7c:a3:08:5f:93:
58:22:dd:47:f6:52:8f:3f:05:e3:9a:4d:10:b2:f1:
02:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E3:2D:21:D5:AC:A9:EC:C1:F7:7D:96:4E:20:9F:69:D6:2B:EE:D7
X509v3 Authority Key Identifier:
keyid:F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:78:2d:19:8e:ff:e7:88:7d:59:fc:79:58:d6:61:55:ba:88:
ec:1e:00:f8:3e:e8:64:0e:05:1a:92:39:9e:c9:d3:48:c3:ba:
5d:35:3d:4d:f6:6d:f3:91:9c:19:31:0d:a2:bb:6d:a9:ac:b0:
12:1b:32:1b:7c:0e:77:9d:0c:4b:4c:64:d5:7c:ba:e8:d9:15:
28:30:97:aa:b3:27:75:c4:3c:d3:46:7d:43:58:af:aa:f3:4f:
37:6f:05:bb:f2:de:0e:99:8b:f1:5b:22:fe:6c:fa:c0:d2:52:
05:e2:72:00:71:b5:00:07:a0:ca:61:04:52:ad:9d:92:a2:6c:
e0:2c:df:cf:e5:8f:75:0c:9e:d5:ba:6b:d2:fa:fa:bc:12:e5:
2b:b2:1c:3a:94:cc:44:e8:c8:f0:c0:c9:c7:45:88:05:07:f8:
18:a4:ea:1c:0e:20:82:1b:5f:16:6a:37:49:ca:27:19:0a:fb:
0d:29:b6:c8:2a:5c:27:43:34:10:8b:bc:1c:cf:e4:aa:46:e4:
9d:e7:c5:a0:01:06:c5:0a:ba:16:df:16:e6:fc:bb:2e:24:af:
52:61:f5:49:a9:57:2f:b2:29:53:96:87:cf:ab:fa:1c:4e:df:
ae:1b:ee:ea:3c:d9:d7:8c:53:e8:ab:37:69:43:7e:d8:14:df:
18:f9:6e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:54:10 2025 by rpki-client