Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft
File: r8GT7hHlRxYWn5TI-THq4fyFSSE.mft (raw, json)
Hash identifier: 4+n9WYjD4b39AZQyXJwOsg2H5pZqgyFXnHsh5x8isW0=
Subject key identifier: 26:3A:3C:FC:29:5D:2F:AC:26:17:FC:23:EC:AE:93:3C:C2:93:A7:38
Authority key identifier: AF:C1:93:EE:11:E5:47:16:16:9F:94:C8:F9:31:EA:E1:FC:85:49:21
Certificate issuer: /CN=afc193ee11e54716169f94c8f931eae1fc854921
Certificate serial: 0194BBCE32EFDFF6C0D480B2328471B78C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft
Manifest number: 097D
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: AaiQ-SNQmt6l5xOeIk4PwVHWfh4.roa (hash: 6CQTrWnDAV45WpOAHO1NfVL9iDI/ELlZY8vizp+bA9s=)
2: r8GT7hHlRxYWn5TI-THq4fyFSSE.crl (hash: XV/MbuP5i9+GAd1O65GIwqXUxwv9wkIkQCflrcvwg38=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:32:ef:df:f6:c0:d4:80:b2:32:84:71:b7:8c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afc193ee11e54716169f94c8f931eae1fc854921
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=263a3cfc295d2fac2617fc23ecae933cc293a738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4d:00:47:40:c3:a7:53:7f:05:1c:d5:40:5d:
7c:f9:11:19:1c:1b:a0:d6:ae:5b:32:d6:83:2d:7f:
3d:70:ed:1c:cd:53:e3:6d:50:5d:7a:3e:f3:ab:a4:
00:f6:ef:a7:14:2f:0b:7d:e1:a6:5e:6f:bd:12:3b:
22:ac:ae:7e:2b:e8:6d:ac:c3:3d:00:7e:e2:b0:21:
e9:a0:bd:09:48:d8:64:e8:16:49:a6:78:a2:10:ce:
c6:20:87:80:db:09:75:89:a1:09:96:d2:55:54:24:
88:e3:0d:35:c4:94:43:0e:bc:23:e9:d6:88:ec:f8:
38:40:91:d4:4b:87:84:99:58:68:20:88:65:8d:0d:
33:f6:26:e1:09:01:af:6e:b1:f5:89:c1:b6:34:77:
89:8c:0b:c6:87:db:c4:dd:37:cb:08:65:bb:26:7e:
61:ae:ca:62:ce:5d:5b:7e:2d:d8:51:a4:71:a8:fc:
4b:cb:34:a1:d8:43:7f:a5:4f:1a:fd:ab:3e:ad:82:
e9:51:d1:d5:9d:69:5a:13:a5:2a:ed:8e:50:41:1d:
95:bf:34:ce:65:08:a6:6b:b4:4c:53:8e:13:40:a9:
e6:2d:5d:e5:ef:aa:30:b4:69:39:09:3b:9f:2e:4d:
05:07:ac:fb:4a:ab:92:af:6f:b3:51:7a:a4:8f:97:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3A:3C:FC:29:5D:2F:AC:26:17:FC:23:EC:AE:93:3C:C2:93:A7:38
X509v3 Authority Key Identifier:
keyid:AF:C1:93:EE:11:E5:47:16:16:9F:94:C8:F9:31:EA:E1:FC:85:49:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:06:62:6d:aa:f3:5d:29:e4:75:29:a2:63:db:3d:d8:a0:55:
74:ae:3d:ab:1e:43:d6:35:38:3e:00:cf:bb:1f:f3:5c:ee:c5:
30:d0:91:75:c5:30:bd:20:86:2d:4f:e1:bf:b8:3a:1c:a2:be:
61:cb:cb:77:d3:1e:22:9c:d7:16:8a:a9:fd:1a:79:cb:f2:b6:
9f:5e:6e:f2:4e:d2:5b:39:99:a8:28:15:01:59:de:13:68:08:
ef:af:06:f1:b6:db:ca:54:66:bb:dc:89:07:8e:a3:57:18:18:
a7:45:21:e0:0b:76:02:fa:2d:7b:fc:c1:89:46:be:7e:4c:76:
93:bf:2a:4c:6c:82:09:1a:a2:59:91:1f:b2:c9:1d:c8:a0:0e:
fb:90:7a:05:3e:ac:6d:7b:2b:93:0f:c2:ae:cb:b6:04:9b:f6:
b4:99:c4:19:8c:a3:7a:d9:e9:d5:1d:80:51:e7:55:56:a3:fd:
19:06:29:23:a8:15:72:ad:3f:aa:ce:85:f8:c6:d5:96:69:16:
b1:e2:d2:c8:02:3b:b3:46:bb:65:91:34:97:d3:44:97:12:65:
03:64:da:cd:a8:3f:02:e5:e2:7e:f8:ec:ae:48:a2:df:fb:07:
59:1d:cc:59:aa:cb:34:73:ef:48:aa:61:c7:ac:0c:08:96:1f:
98:de:03:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:46 2025 by rpki-client