Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
File: 8hWid5SXEbLAHNxmnkDhcTlYVbs.mft (raw, json)
Hash identifier: Eg+N1wC2CP5Io8CKAQWumv20cVrrtzOYiYY7Y3qCzmA=
Subject key identifier: DD:5B:DD:CF:9F:4E:15:86:90:C6:7A:50:C1:FF:FC:34:08:E0:20:B5
Authority key identifier: F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
Certificate issuer: /CN=f215a277949711b2c01cdc669e40e171395855bb
Certificate serial: 0194BCA9F32CBFF8EBC178B09F4CCD670DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: 8hWid5SXEbLAHNxmnkDhcTlYVbs.crl (hash: QUwtVXSZIFJNayPYtZPqzpeCfLLeS+lnlsubPRYXBZQ=)
2: e9rn6bxSsUmtvRo7sJ4lEtK6S2Q.roa (hash: lsA08XTxVJOQQYnez6W7EOdFIkHihRjO9Y7qKfekirQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f3:2c:bf:f8:eb:c1:78:b0:9f:4c:cd:67:0d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215a277949711b2c01cdc669e40e171395855bb
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=dd5bddcf9f4e158690c67a50c1fffc3408e020b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8b:76:f7:eb:c9:fe:7e:25:71:54:e8:6e:ff:
01:4a:5c:c0:a5:a2:84:7b:be:6d:a8:0b:30:1f:9b:
d9:18:50:50:df:6f:38:54:87:0b:70:63:4c:f9:23:
c5:90:1c:41:d5:97:18:50:c5:ef:7d:18:80:f5:c9:
d8:ef:a1:df:34:83:c1:97:07:b8:ff:f0:b1:fb:f0:
0a:42:d5:13:fe:a5:6a:94:19:f5:71:94:78:cb:2e:
b9:6b:37:2b:cd:ec:e5:f9:d4:bc:fa:cf:e7:b9:a2:
28:72:fc:15:9f:c0:24:3d:04:69:79:0d:72:6d:d2:
e7:97:ca:81:8a:e7:a0:94:38:4f:b1:54:22:7d:3e:
7e:5a:cc:14:83:ae:2d:11:5f:a4:6e:4c:e5:80:3f:
19:d6:ec:7e:77:3d:ad:ce:b3:60:71:d7:95:06:31:
a4:9e:c4:df:96:db:e6:12:07:61:7f:1b:f9:8b:08:
e4:00:58:58:35:f1:ab:11:83:ec:26:aa:f0:46:05:
82:fb:42:4d:d5:15:19:09:6a:e8:e4:32:41:df:d6:
42:7c:6c:cc:cd:f6:f3:92:03:9f:61:5c:f1:79:a3:
d1:6b:6e:68:ce:de:a2:09:21:89:bd:7f:53:fa:2e:
e5:17:b8:02:7b:da:e3:a2:34:2d:3e:2e:b3:bb:8e:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5B:DD:CF:9F:4E:15:86:90:C6:7A:50:C1:FF:FC:34:08:E0:20:B5
X509v3 Authority Key Identifier:
keyid:F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:72:63:85:47:86:17:3d:f1:b6:44:73:67:8d:6e:f6:72:6e:
ba:e2:53:80:f8:bd:ce:c9:f9:7a:e8:62:75:da:10:26:37:d1:
46:d4:ac:6a:1f:31:9c:5e:76:ca:2b:89:4b:bd:b7:d4:14:85:
28:69:5c:21:4f:5c:92:5c:99:2b:92:b0:37:e3:01:a5:e5:f1:
9e:48:0d:40:33:0b:23:40:8e:d5:c9:76:6a:e8:ae:68:81:8d:
2c:86:81:9f:f2:82:96:1e:98:c2:a9:b8:c1:eb:be:8b:3f:5c:
56:14:0e:83:8f:6e:43:29:9e:12:48:6e:df:5d:da:4f:b7:ee:
7c:45:7e:0b:e4:2a:e1:f1:5a:f2:69:e5:cd:8f:5c:b7:af:80:
0c:c8:39:f0:74:6a:bb:7a:5e:ba:65:89:e8:b3:b8:c3:76:f6:
ad:bd:a7:89:1c:67:1e:a9:0b:a0:43:31:c5:1b:68:07:e4:9e:
2c:c0:a6:5a:fc:98:0b:6c:c9:e4:58:be:1d:38:7e:4d:a1:0f:
c9:ff:ca:b8:20:aa:a6:95:ac:8c:4b:46:65:3c:13:a2:d1:3b:
89:65:4f:7c:2c:a2:2d:20:87:15:1f:20:84:b2:09:d0:6b:f6:
ce:e9:5f:a2:bd:d2:62:2b:fc:aa:55:91:e9:5c:1b:c8:82:ba:
7d:c7:be:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:03 2025 by rpki-client