Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier: l8l/0tX+lhRdDjlnChIkrFhDXGdDHnGNtYeloOhIVUI=
Subject key identifier: B3:16:5E:60:2C:54:E4:CB:5B:BD:37:1E:1A:91:83:93:48:3D:C3:25
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial: 0194BBCE1C0C2236EB4A5E657C51960F8F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: YX8qfyzCWqHwJjO3KzbQr5AFdEoNvOXAH/J0ghrPRYI=)
2: WVDdYi47m-6hf2_QV0K2CVkP7zw.roa (hash: 9WCgzOj2n+hDIFLmZXxef2ObXsI93yW31Mx8FRKIiM8=)
3: _nQyzxD5tzJPLFHKcoFX_hH-tT8.roa (hash: K943OWLrTeetJ5gY0wxowSl9TJP/OQ1YX347sbUwBP8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1c:0c:22:36:eb:4a:5e:65:7c:51:96:0f:8f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=b3165e602c54e4cb5bbd371e1a918393483dc325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a2:8b:98:d1:5e:5f:e6:f0:10:9b:c6:1e:a0:
59:76:ad:81:9f:bb:49:ae:da:40:3b:08:6a:ba:02:
94:f1:4b:30:a0:29:12:e5:78:cb:25:d7:11:45:32:
a7:2e:c9:c9:88:8e:1b:5a:e4:15:5b:44:f9:4c:27:
70:32:eb:91:82:d6:57:66:89:dc:8e:34:0e:c1:01:
cb:91:d7:d9:1e:c1:ab:e2:27:35:e3:ea:89:3b:01:
87:3a:b1:af:f3:40:53:b7:b8:8a:29:2e:78:ae:0c:
3a:de:f7:25:8c:e2:de:1d:d3:3f:8d:d5:95:69:cc:
8d:df:3b:23:e3:54:3d:d5:58:f7:e8:69:bd:fd:ce:
ae:55:43:63:7b:4a:84:bc:17:e0:51:6b:fe:d5:bd:
67:51:a8:6c:6f:ff:11:e7:e6:d8:5f:16:fd:f3:72:
ba:ee:88:9f:ea:66:ba:07:7e:fa:44:44:e1:c5:cf:
f9:8a:1a:cd:7a:4f:24:21:21:25:7d:63:32:48:cc:
70:ee:2f:23:09:e1:33:84:20:aa:fb:04:b7:2e:bf:
dd:29:36:9f:5c:e8:1c:25:59:c5:30:af:cf:55:ba:
f0:c3:61:68:09:c3:03:b1:64:cb:1f:0a:75:72:30:
03:2b:f5:2c:aa:cc:97:73:49:16:cc:48:89:6a:3c:
0e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:16:5E:60:2C:54:E4:CB:5B:BD:37:1E:1A:91:83:93:48:3D:C3:25
X509v3 Authority Key Identifier:
keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ac:8a:f4:50:47:23:f6:16:95:a8:91:c9:53:d1:2a:3d:19:
04:e9:c0:2a:7e:7f:4a:b8:b0:02:67:d7:c0:31:ba:1b:a2:10:
94:9a:a6:f6:b7:d6:69:c5:d2:71:77:07:72:d3:7a:33:1d:89:
2e:36:d9:ba:9c:3e:b8:97:95:87:e2:fd:b7:8a:61:81:90:68:
95:fc:91:89:21:91:50:75:fa:39:c5:85:da:9d:20:fe:15:e1:
d0:21:29:e2:60:9a:75:8f:98:6d:d8:6c:93:25:0f:30:3d:cd:
4a:25:d9:da:2e:4e:57:11:98:06:19:43:da:e9:46:ad:f8:f8:
02:41:41:db:c3:1a:82:e2:c7:11:cf:66:d1:83:ed:ed:80:fd:
81:b4:c1:29:ad:31:c5:41:16:2d:fb:58:85:0b:b3:06:50:8d:
ce:d0:ea:f2:a4:d8:44:39:57:7b:e4:a7:3b:6f:68:36:95:33:
65:ef:6c:76:ea:6e:d3:5c:31:9f:a2:f2:aa:f8:26:bc:4c:03:
a6:13:c9:4c:6e:8b:85:6a:da:0e:6e:88:fb:13:93:10:92:58:
de:9e:ca:08:30:91:33:5d:8b:59:0c:8f:59:f3:6a:36:2c:f7:
25:16:d4:93:fa:6d:6a:91:53:c0:8a:03:ba:ee:03:cd:36:8b:
43:df:46:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:34 2025 by rpki-client