Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
File: 8n7hjEY57qoWphkIzLRcepjV3Ws.mft (raw, json)
Hash identifier: 9JgB7d+nR2e+4lAnhznw7UQGAIGd5MqU+lNPX/xMJsE=
Subject key identifier: B5:1A:25:24:26:B4:15:5D:19:C1:22:5F:DD:99:E1:38:09:13:28:98
Authority key identifier: F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
Certificate issuer: /CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Certificate serial: 0194BCA979F5F483B822A5B93852E1C0BE23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: 8n7hjEY57qoWphkIzLRcepjV3Ws.crl (hash: vmIzhl84GSMEt2X2CX3cbcaOYgdGVwmjD0ZESY8RDnI=)
2: nqRXNoUiyTb4TmIe2_b86I-CG4w.roa (hash: uh5jetKJYfrnWeF7nxGsrvO4F6Y6S/Ud8IP3anKzhdE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:79:f5:f4:83:b8:22:a5:b9:38:52:e1:c0:be:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=b51a252426b4155d19c1225fdd99e13809132898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:fc:89:c3:c6:34:01:a2:09:8e:0d:5e:30:
db:4b:7e:56:75:d5:73:01:53:d0:e3:2b:2b:5d:1c:
f6:9e:c4:e4:62:9d:02:65:ef:d4:a0:e4:b2:69:2f:
bf:08:10:ff:c8:05:77:b8:16:45:6d:4d:94:f5:28:
73:e1:a6:1b:34:22:75:4e:66:53:70:9f:37:d4:c0:
d6:e7:48:75:d0:02:c7:64:26:9d:f7:f0:e8:7c:ca:
f6:33:0f:46:37:9f:65:af:4f:ea:f1:1a:9f:ae:70:
ba:22:a0:73:ad:83:66:1e:7f:ab:e6:98:06:18:d0:
e7:8c:c6:3f:3e:4e:44:55:1c:d2:a0:58:f9:5a:92:
54:41:9e:1a:cf:fc:22:e4:6a:c6:d8:0e:a3:de:2f:
49:bc:b0:3f:8e:8d:1a:6f:d5:59:d1:72:aa:0f:4b:
81:60:15:43:0e:43:33:78:ba:61:3f:50:4c:d8:7e:
30:0a:6b:d4:d1:04:e0:7d:c9:b5:db:66:11:d2:bb:
06:6b:db:07:a4:67:02:62:eb:fc:ff:e5:a4:92:b3:
4c:e8:10:85:00:c1:a8:93:85:96:82:62:9f:ca:ed:
27:4b:44:08:33:03:d5:aa:57:8a:e2:aa:a5:90:11:
5a:32:89:16:62:2e:02:f2:d7:aa:60:35:6a:ff:41:
bf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1A:25:24:26:B4:15:5D:19:C1:22:5F:DD:99:E1:38:09:13:28:98
X509v3 Authority Key Identifier:
keyid:F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:50:fe:c6:3f:ec:31:6d:f1:91:57:20:0a:ee:2f:a9:3f:fd:
75:22:e0:24:ef:1a:b4:39:26:11:35:2b:c7:62:ba:10:3f:08:
8b:11:70:cb:c5:0b:12:b6:90:a8:ac:5e:27:88:a6:9e:9f:3c:
e1:a0:fc:cc:c7:b9:ac:f0:d3:e5:30:c6:8d:d0:d9:a0:86:97:
a6:e2:be:69:fe:12:b6:34:6a:1c:22:2a:27:d4:b2:40:20:1c:
49:e1:88:1c:0b:17:62:85:36:57:92:3e:a2:5c:74:39:72:04:
8d:d8:88:10:49:6d:58:5b:d9:ca:48:d0:9f:dd:86:7f:79:31:
4c:82:ce:84:57:25:5b:17:9d:82:90:78:f7:b1:e9:f6:b2:74:
39:f9:3d:37:35:b4:ea:8e:00:4d:da:a5:a9:da:e5:49:69:60:
02:66:a8:46:05:86:b9:fd:f0:57:64:34:2a:59:7b:b8:e2:e8:
bf:03:18:42:b8:0b:82:3c:77:3c:68:9f:a3:da:60:6a:f9:d3:
5f:4b:eb:98:ee:80:6b:84:45:44:8c:6d:d6:61:4f:c6:7c:21:
aa:20:3e:bc:a9:e1:26:ae:22:cd:87:86:d9:58:ad:16:53:e7:
c0:88:86:35:35:f0:8c:02:8d:49:6e:ef:80:52:27:82:be:23:
fe:74:f8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:38:38 2025 by rpki-client