Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
File: 8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json)
Hash identifier: WtXc7IBGk6QV2d74hwP/WQPNXqdUCP9Bb65wM4moR4M=
Subject key identifier: 46:4D:EC:33:95:96:81:B8:6A:C3:46:3A:5A:70:E5:85:D6:62:0B:08
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Certificate issuer: /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial: 0194BCAA0C13F58DF8242A9C023B8D7D814C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
Manifest number: 109E
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: fIJ8Jal447boF8vz4OtDFrjXvm71P1aPgy5anWzD/uY=)
2: xInS4OBZE4XZhCIYPtcEJ4L0sW0.roa (hash: KkBHzYhuSu08Rz0qev1AtQ0vsja7TfnwTOncPO/urxk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0c:13:f5:8d:f8:24:2a:9c:02:3b:8d:7d:81:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=464dec33959681b86ac3463a5a70e585d6620b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:21:fd:5c:b7:8a:96:af:28:ca:fd:3f:e2:ad:
43:cd:09:e5:1f:70:29:02:ed:d3:68:8c:bd:66:9a:
01:65:2d:f9:25:48:95:1d:7e:ad:8f:54:c8:22:c3:
a3:fd:c5:1e:74:3c:e8:06:19:5f:8a:e6:d4:ca:ad:
de:59:0f:cb:d0:23:6f:c9:50:6e:58:ca:36:e0:a5:
1b:a3:e6:4b:3a:e2:8f:3a:46:5d:ee:f5:35:ef:d5:
69:5d:c5:f9:09:f9:30:ef:94:87:e6:3e:f0:85:f9:
27:08:8a:b9:7a:01:77:45:8a:41:d6:70:4d:80:47:
75:7e:a3:37:15:12:13:8d:bb:4f:30:f7:60:3e:d1:
45:b8:18:a2:49:6c:06:a0:2a:05:68:0d:df:8c:e7:
c9:25:51:49:a0:a4:3f:fe:38:1b:8c:5a:d5:fd:b1:
de:c6:0d:51:73:54:c3:c4:7a:a9:ff:d5:bc:a2:41:
e4:95:9a:d2:a2:58:75:e1:bc:ba:78:d6:68:f8:7a:
4a:25:5e:9e:7a:0e:81:5e:e0:27:b4:6f:1f:40:22:
20:cb:d6:d0:ea:3a:90:12:b5:9e:ec:be:88:26:b9:
95:ec:a5:90:76:d2:3b:48:77:d8:ad:d0:65:f9:a0:
04:14:a9:c1:ac:66:0c:09:54:66:a9:70:78:61:97:
1e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4D:EC:33:95:96:81:B8:6A:C3:46:3A:5A:70:E5:85:D6:62:0B:08
X509v3 Authority Key Identifier:
keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f3:82:ad:4a:c7:e9:ec:a5:cd:60:ae:20:aa:17:e1:0f:77:
74:b0:c2:8c:d2:e2:3e:77:5c:ec:31:ec:51:03:ce:6a:db:ed:
9b:90:13:a6:38:95:1c:a9:b2:d4:7c:63:39:56:d9:9a:a4:b0:
49:c9:a0:10:50:e6:17:21:fe:ab:53:e7:48:4e:73:2d:46:61:
46:74:cd:1c:01:52:c3:32:a1:e8:1c:53:8e:7f:94:da:ba:35:
03:ef:26:c7:05:3e:31:72:da:71:54:99:38:ea:f5:64:5a:4f:
39:c9:d1:f2:ed:a0:f0:bb:39:f5:64:29:65:57:f9:9d:e5:8c:
64:87:f4:d6:39:2c:73:23:0c:a5:2a:e4:1c:9a:2a:e4:21:88:
b3:fc:6b:95:7f:b8:c0:c1:d1:66:29:a4:17:92:06:7f:db:86:
1a:93:b6:06:4a:a6:19:d3:82:35:da:88:d4:5d:9c:50:8f:3f:
1a:b8:d9:fa:0d:13:c8:4c:eb:c5:e4:03:28:75:d5:fc:ff:fb:
fa:5b:e7:d4:93:09:c3:bc:fa:61:5c:c0:0b:31:90:67:9e:c9:
2e:fb:d0:d0:dc:bb:d9:ef:68:20:84:15:f2:eb:69:84:b8:d9:
da:62:9c:53:74:c0:47:57:cc:17:3d:df:57:9b:f1:ea:d3:92:
a9:27:6f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:37 2025 by rpki-client