Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
File: 8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json)
Hash identifier: 7JcxynMsYVTqxITi3mD2OgvAq1CHnSbbVAtgd2JIxGo=
Subject key identifier: 4E:7F:E2:61:A8:5F:2B:E4:D8:C8:9A:46:C0:BD:D1:77:D7:AF:54:53
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial: 0194BC0509673B1F91C63C961502B5D830E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
Manifest number: 0F6B
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: xNebyCqEQHO6AifDkuCGLV9PobGpGoH+kGCRpnRNt+E=)
2: egJez3AEE17hCNzFwTYyy-yFWOk.roa (hash: tusTlSSqSFD7zKHlwWaKcKWcJ80R+Gl9wxxF6SdsjMs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:09:67:3b:1f:91:c6:3c:96:15:02:b5:d8:30:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=4e7fe261a85f2be4d8c89a46c0bdd177d7af5453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8c:35:be:ca:46:7e:b5:fc:2a:ef:ed:c1:a6:
84:38:28:6e:28:79:15:58:9d:a5:73:35:12:62:3b:
a5:6a:0f:f2:7b:db:26:05:45:41:2e:e0:ee:3e:8f:
39:6c:56:a0:5b:d3:b9:3c:23:4f:a9:35:b8:ff:10:
a5:12:65:cb:91:cd:6e:8f:3c:05:2b:9a:0a:2e:3f:
c4:e3:91:15:0b:01:b7:32:4a:b1:3a:ab:05:44:ac:
ef:c7:ec:8e:c8:36:03:4d:9e:96:36:a2:5a:5a:aa:
d5:29:09:80:c7:e2:fe:f7:9a:41:86:99:67:51:15:
a7:20:49:38:10:a6:d3:75:14:a3:29:16:fd:42:99:
7e:36:c1:b0:8d:49:84:77:a6:4f:12:57:78:fd:16:
e4:24:c6:eb:21:d0:11:c2:6d:68:04:d8:30:6e:a8:
a2:35:07:7b:51:7f:75:4f:ce:61:52:5e:ec:1a:31:
3f:7f:2b:58:fa:13:8d:ca:b4:d3:23:c4:33:70:ab:
b6:e7:6c:2e:26:c3:72:6b:98:85:aa:76:ff:4a:7f:
4e:1d:8a:d5:59:53:f3:75:bd:ed:3e:ef:0a:00:5f:
2d:00:5b:b9:6f:92:51:53:0c:89:9e:1a:cd:9e:d9:
53:e9:fc:68:92:79:cd:b0:80:91:74:c6:e6:6e:3a:
38:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7F:E2:61:A8:5F:2B:E4:D8:C8:9A:46:C0:BD:D1:77:D7:AF:54:53
X509v3 Authority Key Identifier:
keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d2:a7:1c:51:02:ce:ba:0d:1c:3c:50:9c:d3:69:59:a2:5e:
67:41:53:bb:62:a6:53:3a:e9:e5:bc:e2:1b:f4:72:aa:b9:23:
2b:d1:47:d7:7e:57:67:83:4f:70:53:91:cb:cb:a7:6a:b5:3e:
e0:1a:12:06:2d:79:d5:b1:7e:75:66:0e:d3:e9:f6:ae:6e:77:
82:98:60:a3:bf:92:98:06:f3:c2:f7:44:90:75:62:a5:02:d4:
9a:0f:94:20:89:78:05:2e:e1:10:10:8e:f2:78:d7:73:2a:77:
21:bb:b8:b6:22:5b:d3:d7:30:99:8f:7d:fa:e3:ed:02:40:d2:
e2:fb:1c:05:47:88:72:55:67:5b:98:6f:9a:63:b4:3f:cf:7b:
10:a7:2f:50:d0:14:81:d2:af:63:0b:86:cd:95:8a:78:72:cf:
b0:c0:c0:86:ca:24:ed:3a:d8:2c:fb:08:a9:b9:11:5a:c5:86:
aa:90:49:c8:76:42:19:14:76:d1:5e:55:ad:9f:59:c3:91:52:
86:0e:ec:bc:83:17:ab:f6:c4:d7:2b:49:33:31:84:43:5a:2b:
7a:bc:d7:2a:c9:3b:37:8d:96:7e:9a:19:66:40:42:c0:ca:1a:
f7:28:16:95:a1:56:4d:c1:f9:0a:f6:3d:57:d1:96:c7:eb:70:
99:78:a1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:15 2025 by rpki-client