Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
File: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft (raw, json)
Hash identifier: I8E/byPO3ZFBiO3zwhfo5sUvk3hYFx+ALzTV3W8gu+M=
Subject key identifier: BC:21:8E:01:16:C3:33:AF:51:41:25:6B:78:25:78:80:91:AF:78:D1
Authority key identifier: F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
Certificate issuer: /CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Certificate serial: 0194BD857DCBB134D154DB0768AAB0C88C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
Manifest number: 01A9
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl (hash: Hk7HYUrt7dFL8LOVcJsRKhaZxvSPYes9d4mARV6F0CI=)
2: oVHqW7Znx3iXeIApvzhLphsAfTQ.roa (hash: yQWVz29tvYoHHrEUjXDJ9Ko8ioxivLXZFSUPJ/+r9ho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7d:cb:b1:34:d1:54:db:07:68:aa:b0:c8:8c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=bc218e0116c333af5141256b7825788091af78d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:75:a8:7a:a4:7c:0a:dc:1e:52:ba:bd:c7:
ff:ec:8b:20:5a:09:8a:a1:f2:9b:44:25:31:53:bd:
5a:89:40:3a:c3:74:86:b6:27:f7:92:f4:35:7f:80:
c7:8f:16:18:25:2d:a8:26:3f:a4:80:81:dc:ed:33:
27:86:32:d1:e7:6b:3b:7e:eb:1c:ef:ad:e1:2b:9f:
fc:0a:ea:20:66:0a:22:2a:79:53:16:dc:fa:5e:a1:
97:65:f0:ee:b1:fa:50:d3:a7:ab:a7:28:97:fb:39:
b4:f9:54:b2:22:9b:f9:33:2b:55:75:8e:cd:b3:bd:
4f:72:05:4c:44:4f:cb:48:b4:33:ff:57:f1:f8:dc:
07:70:77:85:a5:9f:ae:7d:c2:98:df:ad:62:a4:8b:
54:3c:0f:59:12:64:7d:4c:b1:0b:53:b9:88:b8:70:
33:ec:1c:c2:6d:ec:ea:68:c5:dd:a8:6f:72:a4:16:
09:c7:f1:1e:52:f2:07:00:bb:dc:df:4f:00:b0:a6:
15:e6:bf:ce:b5:12:69:bb:f2:4e:15:ae:f4:7b:f8:
08:05:b8:78:f0:a8:a3:1b:14:09:f4:65:96:3b:93:
60:25:01:41:ef:85:0d:b0:38:9b:ac:3a:d5:29:08:
f7:28:55:6a:cf:45:fb:5a:bc:16:49:63:67:c1:91:
ee:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:21:8E:01:16:C3:33:AF:51:41:25:6B:78:25:78:80:91:AF:78:D1
X509v3 Authority Key Identifier:
keyid:F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:54:4c:ad:c4:66:69:3c:79:c3:5b:c2:be:e8:00:da:0d:b4:
fd:b2:b0:48:52:c7:55:31:62:76:d9:b0:0b:90:18:fe:15:41:
13:4d:07:b7:0f:53:8e:96:3d:15:56:fd:73:c4:87:fd:57:e7:
93:0d:1c:90:05:3d:05:ec:71:0a:e9:de:80:83:f3:8d:76:77:
8e:07:45:8c:18:64:1c:fd:fd:36:f3:a7:94:c1:64:41:32:16:
54:2f:c4:1f:f5:09:06:8a:1b:68:c8:90:60:63:f1:ff:4a:d8:
8c:50:ea:bf:e6:30:5d:5c:6d:a2:13:80:21:2e:39:17:6c:2b:
d1:b5:08:1c:70:47:3e:36:0d:7e:21:a3:9c:69:53:0f:ae:6f:
4c:a9:aa:d0:78:9e:a2:a3:fa:cb:fa:4f:3f:fe:ad:05:64:7b:
b8:6f:23:a0:65:b5:c6:ae:68:82:14:a3:9e:b5:69:9d:3c:7f:
51:91:76:2e:cd:45:7c:c8:66:45:f6:68:68:28:68:18:4a:21:
16:28:d3:25:f4:cc:29:57:ad:ae:f2:87:73:29:78:6f:7a:3b:
b7:62:cb:88:22:48:56:96:61:f1:00:b7:41:4d:3c:40:fd:f3:
65:5e:f5:de:b5:e5:ce:6d:9b:94:1e:87:3c:eb:64:dc:08:a7:
c2:0a:0d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:24 2025 by rpki-client