Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier: fmVxenda2eWdWbcyGOS2qznBiFghS7rML7QDDL55wIk=
Subject key identifier: FC:16:A1:AD:96:79:76:34:21:83:99:26:8D:00:67:74:DC:83:51:24
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 0194BC3CA6DA04FF0DC44C7FD1D20D0F1806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number: 0B98
Signing time: Fri 31 Jan 2025 12:01:18 +0000
Manifest this update: Fri 31 Jan 2025 12:01:18 +0000
Manifest next update: Sat 01 Feb 2025 12:01:18 +0000
Files and hashes: 1: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: SKNQEXGf0YxEyxFgwMxhF4lQO/s7uWpKzwnaMUH8ZxM=)
2: YkEpFHQglRkkx7TW2iOd8M7ku-c.roa (hash: kIeQhyyEYB0FfxtFkPtqVvMk30nvPQUJg2CwKA7jeLY=)
3: uq0Ty9FTaErs0rzB7yOaaIcCy9E.roa (hash: cH522XBAhZQR4is+g9SDDOs+Uj5P/+RJANdH54+jdMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a6:da:04:ff:0d:c4:4c:7f:d1:d2:0d:0f:18:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Jan 31 12:01:18 2025 GMT
Not After : Feb 1 12:01:18 2025 GMT
Subject: CN=fc16a1ad96797634218399268d006774dc835124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:30:f9:66:a0:74:0e:55:ef:49:65:38:4f:fe:
c0:1c:08:76:40:18:88:a6:0e:83:5d:9f:b3:b6:d0:
b6:9a:9e:c4:0b:04:bc:a9:b0:c5:bb:34:92:12:ea:
ad:aa:18:3e:6d:e5:82:74:c2:ca:f9:3a:3a:cf:06:
59:bc:4c:3c:5e:c4:2b:33:4a:7b:f8:8f:8f:43:77:
0e:22:b9:40:6a:62:c1:8a:c2:0a:b7:1f:e9:16:e7:
f4:c6:81:37:ef:1e:b1:36:74:9e:f2:24:3d:24:25:
73:af:6a:94:e2:67:d6:03:39:83:a4:7a:24:85:65:
1a:69:b8:e7:07:e3:8e:59:25:80:1c:19:33:b2:2f:
55:ca:c8:d8:d9:c6:06:0c:c8:7f:c1:86:41:bc:b4:
4e:8e:03:f0:9d:76:64:45:8a:3a:c5:43:0f:54:52:
0f:af:be:41:e8:24:c1:9e:3a:44:78:e4:69:2a:ab:
ba:d7:ea:ce:78:70:b8:43:69:7f:02:f6:f3:b9:d6:
47:a7:f4:62:20:5e:b5:86:d6:80:6e:0d:ca:2a:1e:
eb:fd:32:6a:61:86:c7:7a:3c:45:2c:38:e6:76:6b:
b5:57:59:30:3d:2c:6d:5d:78:36:e9:9d:e4:2a:80:
10:ec:bc:d2:23:40:1e:e8:df:92:ef:ef:23:a9:86:
48:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:16:A1:AD:96:79:76:34:21:83:99:26:8D:00:67:74:DC:83:51:24
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c7:0b:55:5e:4c:02:f1:a2:9e:0a:47:a4:48:fc:46:63:ea:
46:e0:5c:33:39:41:15:90:21:c4:1e:3d:77:d1:12:6b:9a:4a:
fb:ac:6c:10:86:91:a2:1e:db:e1:e3:52:2f:c4:ca:7c:a2:0f:
18:ca:26:28:57:1b:97:8d:58:2c:1a:f7:76:a1:e0:cc:4a:bf:
38:76:8e:05:4b:e9:e6:bb:4d:34:92:8e:6a:fd:06:2c:59:80:
85:92:9f:c8:ac:91:f4:c4:97:ad:cd:29:a9:0d:b0:5a:9e:5f:
c6:2c:48:38:f8:b7:e4:29:87:a4:fa:79:68:d0:3c:0a:12:0e:
72:ef:33:94:2c:d5:55:07:e7:29:3b:bc:71:52:e5:e7:06:32:
c8:e2:a3:91:38:a3:b4:eb:91:09:ed:7b:ba:77:9c:62:b2:3b:
93:91:80:b1:2f:70:39:ff:13:df:a1:0d:63:f7:c3:34:31:26:
03:6a:87:be:99:2a:7b:50:56:46:18:8c:67:98:92:d2:f7:48:
33:1d:8c:83:44:f0:54:f1:0f:bc:04:ed:14:aa:b5:24:c2:fc:
2a:72:f0:0d:b0:03:95:96:7d:03:ea:45:e3:d0:a4:08:9a:7f:
4a:16:10:ea:e8:c7:f8:28:26:54:a6:bc:ca:7e:4e:fe:78:0a:
59:14:68:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:32 2025 by rpki-client