Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier: LhyYdgKZxdSoEtJGFjgb+DBdf/dEajJekxcvclO1GQY=
Subject key identifier: 28:35:51:8B:43:A3:FC:4B:22:F3:B4:1B:08:B2:BC:2C:C5:C1:D7:00
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer: /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial: 0194BC04AD585E2CC610099C69348F10040C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number: 03AA
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: yvDBjwhreThezXhgyTh+q88341sI2SsD/15RaW9ofM0=)
2: CGcYt6qx267X0glJTA7aL9VX3lc.roa (hash: C7Akg4uPsnwTrDUVpipPgKYJ70rbAz3rIOj8sk4nXFE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ad:58:5e:2c:c6:10:09:9c:69:34:8f:10:04:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=2835518b43a3fc4b22f3b41b08b2bc2cc5c1d700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8f:5c:c1:e0:fe:e2:ca:38:95:a1:63:3a:a8:
19:a5:4a:ab:b4:bb:78:23:fa:21:5b:0b:ee:09:ae:
f6:80:f2:95:13:69:66:d8:9a:c3:72:44:68:03:b1:
75:59:22:64:a3:4f:be:1a:2d:41:66:36:9c:be:f8:
38:ef:31:61:e9:25:df:fd:ae:f1:9b:1a:76:f1:e6:
13:88:6d:8f:d5:a2:6c:a5:19:c7:48:7d:d6:e0:ac:
be:8f:1a:44:ec:e4:bf:20:39:77:3b:71:03:50:c4:
87:64:6f:65:88:74:0f:37:8e:6f:05:23:c8:2a:ce:
7a:57:6a:d3:af:c3:63:2f:8d:71:09:68:ca:ba:19:
39:06:38:e6:30:d5:3d:25:57:0c:f2:ab:ed:86:a9:
d7:98:30:76:03:44:a5:86:83:a3:20:09:ec:39:0c:
bb:52:07:e2:b2:22:d1:25:80:33:6c:ab:fa:26:cd:
bd:8c:4b:19:4d:52:3a:66:2d:a6:50:2c:92:77:f7:
0f:79:ac:62:d4:19:f9:4b:82:d3:fc:34:dc:b8:73:
48:4b:d2:29:e8:c1:2b:8c:dc:54:0a:73:bd:b0:5d:
f5:8b:fd:a4:7e:e1:28:a7:d7:67:e2:34:d8:6a:4a:
91:96:42:3d:9a:45:68:db:76:6d:de:62:d0:c1:45:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:35:51:8B:43:A3:FC:4B:22:F3:B4:1B:08:B2:BC:2C:C5:C1:D7:00
X509v3 Authority Key Identifier:
keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:4e:f3:3b:ea:49:60:37:ec:3f:7f:32:92:c9:f6:18:68:9c:
4a:9d:b4:31:a1:15:58:9d:b5:b3:cd:c4:6b:80:c9:0a:39:18:
d5:11:3f:1e:9a:b9:0b:bb:d4:aa:a8:bb:e7:04:02:7e:4e:fd:
88:41:f0:90:83:b7:fd:8b:89:cd:7c:cd:bc:79:dd:49:81:1f:
a4:1b:8c:2e:02:73:47:84:0c:99:d4:b1:b7:39:d7:47:00:eb:
48:fb:fd:27:ef:07:cc:8e:c5:b5:c6:d2:28:85:8a:80:a8:27:
8d:72:c0:df:f6:11:38:b2:2d:07:db:3d:25:94:f1:43:d1:a4:
fe:28:75:3c:70:c8:e4:4a:1c:f2:15:19:f3:c1:78:a8:78:25:
f7:2f:e5:65:e3:b6:a3:40:7f:df:ec:86:fd:5b:21:04:37:17:
71:70:a5:e4:47:67:3d:48:86:20:ef:3e:03:13:0c:ef:9c:a0:
b0:a9:9d:00:0e:1b:51:e7:0f:c9:ca:6b:ee:f3:50:75:e4:dd:
19:13:5f:42:4a:c3:74:79:5a:a1:aa:6a:4d:63:87:7d:17:c0:
72:ab:96:8e:f7:3d:4b:34:8c:c1:6c:08:32:7f:f6:65:58:d3:
d2:21:61:17:d6:69:2f:d5:22:fd:ee:22:dd:e9:31:0e:d0:e9:
62:ea:9e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:53 2025 by rpki-client