Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier: w8wlXZ3aiVifaQC+FNXp/mExwokv6Geb1qaoodGsh1A=
Subject key identifier: 12:E8:61:E3:0A:4D:99:8C:4D:39:04:F7:B2:86:38:DD:A7:D6:35:B8
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 0194BCA9F88E0DF1A6895470381D7D8C070E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number: 0D1B
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: iDOxshtgaVUVopVvfOzrlLE/X5BH/eni6iSJP4mZT74=)
2: hQQYuiHw_ItGv9okdSC3BrwS4FY.roa (hash: S8OKUgEid94ZlJFGvJwDBd4eSV8gnkUcY4GxU2YajOc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f8:8e:0d:f1:a6:89:54:70:38:1d:7d:8c:07:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=12e861e30a4d998c4d3904f7b28638dda7d635b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:16:12:af:ac:6d:01:5f:c2:f8:09:e7:e9:03:
73:7e:a6:4c:95:22:6b:e1:7e:b7:04:30:63:d2:a7:
b0:67:db:68:ea:a7:de:b8:8f:36:81:47:98:be:51:
30:14:1c:8f:1e:3f:f1:b6:5f:f2:7d:d9:fc:fc:4e:
eb:89:da:0a:ad:95:93:db:a2:43:89:b5:b4:3e:dc:
43:6a:e1:d0:09:33:d7:4e:70:13:6c:85:fa:ef:d8:
7e:b8:1a:6b:ac:30:ae:8f:a8:a2:5b:ea:0c:ae:59:
57:80:1b:4b:79:bd:91:e2:f4:7f:c7:59:9d:a9:a3:
11:ee:29:f9:a1:68:76:f3:b3:c5:58:4d:3d:0f:e6:
8d:8b:d4:fe:f1:95:de:6b:1f:4f:09:96:89:16:67:
cb:60:69:7f:83:dd:ab:3a:c1:db:5f:00:a8:97:ce:
36:8b:74:7c:1b:3a:9b:75:f6:49:61:07:0c:13:03:
8e:2f:9c:7a:f7:c6:f4:b3:d5:92:b5:0c:ca:82:75:
9d:a4:0b:ab:aa:7e:c7:38:fb:14:84:ec:a4:ea:c0:
3a:db:3d:7f:5c:7e:e4:03:4b:9c:36:33:bd:6e:eb:
58:fa:91:eb:cb:82:dd:03:f1:d8:90:0d:57:90:01:
00:60:ce:af:24:63:b4:2a:80:3b:84:24:2d:94:d5:
93:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E8:61:E3:0A:4D:99:8C:4D:39:04:F7:B2:86:38:DD:A7:D6:35:B8
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:38:ff:65:d5:94:53:79:5a:14:e1:71:41:52:72:e7:f5:1e:
86:3e:07:c4:93:1c:f1:92:56:63:99:24:72:f7:60:b9:70:5d:
1f:7d:45:02:d0:7e:5b:82:3b:26:ca:42:d0:e1:34:a6:98:bc:
19:f8:8b:bb:51:14:5b:92:71:25:2d:61:27:cc:22:7e:e4:62:
02:47:7f:9b:b8:ef:10:d1:b6:77:13:df:55:10:d6:10:c6:0b:
65:c4:75:d4:a9:ac:a1:42:01:27:1d:9c:27:c6:73:66:e4:93:
c8:8d:7e:64:e0:53:5c:1e:da:e9:21:6e:b9:a9:a7:52:33:df:
56:91:21:4f:bd:f7:17:9d:ac:43:1b:c3:30:83:1c:7d:e6:71:
7e:01:f5:ce:07:b7:ec:c7:e9:2e:85:3c:42:6c:b8:6c:b3:b4:
f5:c4:7e:e2:44:63:c2:93:dd:0e:9c:37:3c:66:90:6d:4c:08:
e6:54:e2:dc:5b:91:6c:c7:58:40:05:ad:09:0e:76:78:6e:3d:
48:22:4f:ab:2d:6b:91:60:7b:28:27:e3:e4:b0:f6:8a:61:8a:
ae:02:83:79:52:3a:b6:25:2d:ea:a5:c4:56:d4:cb:a1:90:39:
5f:93:eb:96:f4:d0:b3:cc:86:d8:99:5a:d5:a9:54:bd:18:59:
1a:31:64:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:36 2025 by rpki-client