Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
File: S-8wYkIQwA06ht_WyAEGErsbEqA.mft (raw, json)
Hash identifier: YEWmLXIOElc34/NKp2/1Lx/e2/MeY80lLp3ktQnjahc=
Subject key identifier: 5F:24:2A:64:AD:05:46:25:D8:BA:E2:7D:F0:C3:3B:3C:16:B6:CA:62
Authority key identifier: 4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
Certificate issuer: /CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Certificate serial: 0194BBCE1F984FA8EC68A2798E369C973F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
Manifest number: 03C5
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: S-8wYkIQwA06ht_WyAEGErsbEqA.crl (hash: 4WOtCMNGpEgWVblqWAYGcawJTmq5H5beJwEtlyD1lAM=)
2: hewkwqUbEjrIV_IBVqwAtoymkrQ.roa (hash: Jkl1mlHh6xctvJTfhoOpTm+3C4TmQ7fhy/9GZ6iTL9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1f:98:4f:a8:ec:68:a2:79:8e:36:9c:97:3f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=5f242a64ad054625d8bae27df0c33b3c16b6ca62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:10:24:c1:d1:be:a3:08:2f:a6:bf:ff:44:eb:
33:5c:d5:71:d2:12:3a:74:bd:ec:17:c4:0a:39:f5:
20:0e:cc:b3:3e:82:8b:8f:de:31:9f:10:84:d5:93:
09:0f:7d:8e:16:e3:15:88:50:a6:db:e3:fa:b2:9b:
38:85:88:ad:27:2a:38:37:9b:f6:ad:28:ed:df:10:
4b:d8:6c:3a:ad:38:25:b9:f3:a2:91:d2:8f:bf:2e:
d7:ad:46:dc:f2:af:87:08:d6:3e:ac:4c:bb:e4:26:
cc:cc:09:62:9f:21:7b:1f:8a:41:5b:da:d5:94:ad:
a9:6e:e0:df:24:a4:9c:19:d4:10:34:e1:c9:16:a3:
c9:de:68:80:a2:d2:b3:e5:54:c8:32:ac:14:96:29:
12:f8:ec:d1:34:d4:13:5a:10:78:a8:fa:20:38:85:
e1:7b:cc:62:60:b2:8a:db:5b:10:8b:c8:8e:04:06:
4e:f9:f2:0c:56:cf:38:e7:33:c6:f6:9c:a5:25:91:
4d:72:61:64:fb:d2:00:3e:a0:48:a5:52:08:34:e8:
34:ba:30:8d:15:e4:f2:9a:03:24:d0:53:26:d9:6a:
29:ee:e3:67:7a:5b:e4:57:12:b3:13:e6:4a:2a:78:
7f:8e:fd:ee:de:bb:81:f3:30:96:e7:67:e6:f2:ab:
0e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:24:2A:64:AD:05:46:25:D8:BA:E2:7D:F0:C3:3B:3C:16:B6:CA:62
X509v3 Authority Key Identifier:
keyid:4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:51:48:85:83:ef:3b:1a:90:fc:f6:bd:45:d0:a8:8a:ab:ba:
e2:51:1b:78:d1:65:33:e4:70:a7:17:37:ba:92:48:be:1c:8a:
f8:b6:80:59:e0:a6:dc:f1:17:92:62:8c:6c:08:4c:34:1e:b5:
3f:38:23:68:f7:a7:da:84:f1:43:7d:70:cf:40:17:49:7c:f0:
0c:82:15:92:33:78:de:c1:f0:31:01:40:68:1e:ee:ae:09:33:
4d:f7:06:d1:93:49:39:31:cc:20:0f:70:b3:82:fe:1b:20:3f:
ee:db:b3:20:89:41:91:3a:4a:8c:f4:3a:44:19:86:a6:85:cc:
0e:e4:5b:34:6a:7c:2e:04:81:d7:46:9b:3a:ff:8f:55:62:eb:
33:3a:5e:50:f3:9c:a4:8d:ed:7e:b4:e4:97:ff:09:e7:e5:3a:
a1:ec:75:40:c5:e4:71:55:01:9f:22:40:61:a6:c7:31:0e:3a:
6b:7d:b1:34:f0:2f:6c:d3:9b:bf:fa:3b:bd:a6:3a:53:f1:71:
00:2e:c7:53:ff:b6:6e:68:bb:f6:eb:73:11:89:a5:6d:dd:21:
3a:a2:93:12:ff:22:e9:b1:3c:6a:bb:d8:dc:45:23:fb:74:db:
7f:93:8e:0d:d1:ae:09:08:2e:f0:cf:15:ec:d5:85:34:32:29:
f6:75:41:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:09 2025 by rpki-client