
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json)
Hash identifier: GB/+5MnpM7BdR2PW1SqilCZyEofkd2o/zvFUjfFwKcI=
Subject key identifier: 2D:84:1A:19:E7:3C:A0:93:4C:D9:6E:F0:36:5E:C3:77:97:03:82:A0
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 0194BCE0E14CA4160B9F2E0BAB3DDC6CD7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
Manifest number: 0819
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: vaLMXaSQMXWCY0N23R9JBHag5gzL3N0KKGSsVGAzGvY=)
2: FgbdG0fmPUK0umb6fkCIHBoc4Hk.roa (hash: +cH4y6vUFW9ebAdtQK64RlvVCm6ewXq634ESBVns0pY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e1:4c:a4:16:0b:9f:2e:0b:ab:3d:dc:6c:d7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=2d841a19e73ca0934cd96ef0365ec377970382a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:43:c5:fa:c7:6f:a6:24:be:68:a4:2c:8e:
cd:be:0b:e0:0f:0d:75:b5:c8:66:96:76:aa:d6:4b:
e2:83:d6:b1:f0:69:e7:01:bd:70:b4:24:20:0a:7f:
57:f8:ed:e8:e3:25:e0:d4:f0:88:59:c2:42:47:36:
fe:09:de:1d:1b:07:ff:63:06:b8:84:61:a2:55:df:
a4:a4:9f:b5:95:e4:e0:dc:e0:b7:b3:c5:4a:29:6c:
3d:fa:21:bb:af:9f:33:8a:16:1c:7a:1b:9b:50:bd:
bc:48:c7:d1:0a:bf:34:53:27:5c:b0:30:71:63:8b:
12:96:d6:7e:75:57:99:80:ac:be:b8:56:04:3b:1f:
ac:66:cf:58:b0:cc:63:cf:d2:bf:d9:e2:e5:d8:1c:
69:75:ea:c7:de:8a:0e:bd:dd:06:ab:91:34:5a:c5:
d8:d8:17:11:fd:ae:dc:56:69:2f:2b:fe:e5:8b:9f:
44:07:51:c5:cb:00:cc:d3:33:19:ce:70:0b:43:bc:
04:99:6a:bc:a6:4b:22:f9:c6:ba:c1:00:08:f1:11:
a8:22:e1:45:da:98:88:8b:05:10:a5:82:3b:5f:7d:
fa:9d:7c:75:b7:d1:b0:19:7c:13:5f:8d:39:3a:4f:
13:e6:ea:e6:b5:49:5d:07:40:4d:d7:ca:d0:c7:30:
27:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:84:1A:19:E7:3C:A0:93:4C:D9:6E:F0:36:5E:C3:77:97:03:82:A0
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8f:1a:28:7e:fc:8f:14:1b:6d:9c:05:78:a4:d8:99:77:34:
e0:6c:87:08:67:0a:e0:26:3e:42:f8:e7:4b:7b:0c:9d:b9:c5:
d3:7d:91:45:5d:06:0e:28:4b:00:76:df:1d:a9:6e:c5:bc:59:
07:a4:a5:9a:99:61:73:74:e5:26:94:7d:ed:99:d7:68:d6:38:
5d:ae:94:9c:b0:ca:68:84:c6:8d:ff:bc:a5:41:c1:d9:a3:38:
a4:ce:36:ad:4d:12:9e:06:e6:9f:ac:27:1b:4d:a1:85:bf:af:
8a:84:95:1f:18:67:73:10:eb:02:4c:ca:61:6c:bb:8c:bd:34:
80:41:7c:c2:32:71:af:4c:3f:3b:2c:a5:57:d6:e2:dd:3e:f1:
d7:78:ac:53:23:10:43:c4:cb:76:0d:3f:3a:32:73:8a:2c:ad:
e2:a6:2a:07:4f:b8:72:cf:1d:47:04:ab:83:93:2c:31:75:4c:
e3:0c:e9:c2:db:2b:bc:1d:d7:a3:16:3c:1c:26:b7:b6:bc:f6:
a6:2d:3a:de:dd:9e:5d:66:bd:13:5b:f7:3c:1f:77:18:59:ca:
18:83:e2:f3:7d:9e:9d:2e:3c:b8:ab:fa:1a:c0:97:5b:52:dd:
a9:bb:57:1e:c1:c7:4e:b9:69:2d:2a:9d:72:c7:ab:07:7c:70:
b7:5e:e7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:56:24 2025 by rpki-client