Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
File: 8Oacx506DEnCkf1Af7K-3CPqeok.mft (raw, json)
Hash identifier: hwJHxDczyB+a/cf9O5qY2l8jiC/WF9c90hN3F6ABiuY=
Subject key identifier: 30:73:C4:33:8D:55:3F:E0:41:49:A6:A5:19:69:27:22:24:00:D0:07
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial: 0194BD17BD2352947CBF72458433E222D7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
Manifest number: 0865
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: 8Oacx506DEnCkf1Af7K-3CPqeok.crl (hash: /x05aUZQxUmxF4bKvOxnNsTXG9vSvvOOltHRTSqHXSs=)
2: fN8SYZ83oc_gHjiIm2H8fBBsylM.roa (hash: ITxtpDSVYxcGXneNxnFdZuRlc/rmrmnyY6/WYXyAU60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bd:23:52:94:7c:bf:72:45:84:33:e2:22:d7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=3073c4338d553fe04149a6a5196927222400d007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a3:b3:14:e6:28:16:fc:e0:4a:be:9f:fa:79:
c4:76:1e:a0:b2:1d:8f:80:9d:85:b0:64:dc:34:f3:
54:80:56:51:dc:1b:36:2a:04:19:00:25:7d:03:a5:
4e:5c:a0:60:b4:4f:a2:20:76:9b:99:88:08:95:14:
51:9b:d2:76:07:2c:9d:f9:aa:0c:7b:75:20:0f:3d:
26:a7:80:26:5c:68:bf:ae:ca:76:53:91:84:0b:62:
9b:29:23:7f:e3:1e:d5:5b:be:ea:01:7e:51:5b:75:
bb:70:db:ee:64:ca:95:f9:61:40:32:b1:84:51:37:
f8:70:51:13:04:fc:8e:37:0f:e3:68:5e:35:7c:89:
b7:2d:08:8d:63:f2:01:b5:22:7f:d5:ce:6d:4e:6a:
33:89:d2:33:d8:1d:8e:9a:5e:15:3b:f6:72:c7:94:
1c:8b:43:4c:c8:4e:42:a2:61:4a:44:e3:7a:5e:6f:
dd:3a:3a:69:47:9f:99:64:b7:4e:45:ec:51:1a:d5:
bd:61:ef:dd:b4:95:71:9c:f1:8b:a7:6c:fa:06:0e:
73:7f:32:eb:d2:d4:5e:70:d1:eb:96:cd:ab:f3:7c:
a6:00:da:13:a8:96:b4:48:e8:81:ca:e3:30:d6:e7:
b0:bd:3d:83:a9:b7:4b:d8:fd:20:6d:95:ba:b2:b4:
fd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:73:C4:33:8D:55:3F:E0:41:49:A6:A5:19:69:27:22:24:00:D0:07
X509v3 Authority Key Identifier:
keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fb:08:2d:d6:4b:5a:21:4a:06:18:9f:cb:84:47:64:f6:56:
9f:bc:f6:74:36:f3:02:f7:1d:4e:a2:09:2e:ae:4d:2b:98:3b:
dd:4d:21:98:8b:48:a7:00:8b:09:42:70:bd:e2:6e:c0:a8:16:
8c:1c:8b:10:e6:c5:98:f3:7f:9e:d5:58:b7:aa:1a:1f:d4:ac:
e7:bf:f1:e6:40:00:f3:c5:65:a1:90:e9:2b:cf:3b:27:71:c7:
14:12:c8:1b:dd:be:8a:68:51:b8:9f:83:69:fc:ea:59:96:0a:
a6:70:54:2b:92:12:f4:1a:4e:12:f3:6e:2b:a3:91:f9:74:e3:
15:9e:ec:eb:3b:05:a0:5c:16:e1:fb:13:e8:15:24:03:f5:6e:
0c:31:96:5c:35:10:36:c9:af:14:fd:6a:d5:00:c9:ec:2d:22:
c7:5e:16:a3:5c:52:30:0b:99:10:ee:04:71:f1:b4:46:7b:83:
35:5c:63:17:39:06:5b:36:64:25:13:4e:f0:b9:73:0b:81:02:
70:9e:9d:f7:1b:54:09:63:77:71:7a:ea:67:96:84:54:de:37:
d0:a6:89:be:93:4f:cb:60:59:5a:9a:97:b7:1b:b2:dd:a7:8b:
98:a1:62:2e:54:b7:59:ac:64:3d:d8:be:e2:54:3f:a5:f9:44:
3f:a4:95:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:30 2025 by rpki-client