Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
File: t8wtor25e-kSotlC6-fq-kZR6IU.mft (raw, json)
Hash identifier: Ue7kE9g9fadQCX1nWgQE8ASNTd8rts1sm9GnqHttUIU=
Subject key identifier: A9:EF:98:D7:3E:3C:36:33:9B:13:62:9C:13:0A:02:E3:B5:E2:10:EE
Authority key identifier: B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85
Certificate issuer: /CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885
Certificate serial: 0194BCE0D217520B66752EA5BB7B3801EDC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 15:00:37 +0000
Manifest this update: Fri 31 Jan 2025 15:00:37 +0000
Manifest next update: Sat 01 Feb 2025 15:00:37 +0000
Files and hashes: 1: INh9G5iQoMvQ_1itqGn6rIFWztw.roa (hash: DlHpU6WxKqPj/r93yoW9dLdgNHjiaW8IJyXbLuzYYAg=)
2: t8wtor25e-kSotlC6-fq-kZR6IU.crl (hash: oVYDnlo4LLSd9qxCAu3i8BDsXVZElD02DCYlRZtBidM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d2:17:52:0b:66:75:2e:a5:bb:7b:38:01:ed:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885
Validity
Not Before: Jan 31 15:00:37 2025 GMT
Not After : Feb 1 15:00:37 2025 GMT
Subject: CN=a9ef98d73e3c36339b13629c130a02e3b5e210ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:6a:85:7c:c5:a7:b0:27:a2:7b:b4:2a:9b:
4e:e6:79:e8:64:c3:68:4e:f1:57:1c:81:24:88:be:
d2:c7:55:1c:2b:f9:60:c2:bf:2e:df:f8:8e:3f:2f:
c0:f3:c7:d4:21:d0:10:21:88:fe:c5:d4:a7:89:b5:
38:1f:3a:3f:85:34:9e:6b:1c:4e:33:b6:a7:e7:55:
26:df:68:39:3b:46:56:cf:6f:4b:28:f9:84:cf:58:
9a:37:a4:0c:65:38:d3:77:2f:b1:7d:41:6b:bd:e7:
10:ee:d2:7d:aa:11:98:8b:e2:df:2d:ef:f8:b2:d0:
08:6b:cb:76:22:3d:be:77:3c:19:a6:5a:16:13:d8:
62:f0:06:90:4b:ea:d7:35:32:72:82:aa:e9:2d:d3:
2d:8d:38:f0:62:22:d7:78:a1:7c:ea:be:a1:c0:86:
50:11:0a:2b:73:c7:62:ba:f8:db:5d:a5:73:86:a2:
44:1e:03:54:79:38:c7:61:3f:37:10:4e:85:42:bb:
6c:36:d8:ab:f8:46:01:10:85:5e:80:46:5d:75:8f:
f5:86:87:99:b4:13:81:03:4b:49:4a:b4:51:bf:83:
14:0a:99:44:c2:a5:15:35:62:e1:36:92:03:83:e1:
e2:ce:e9:db:ef:7a:a0:b1:15:23:b0:bc:3f:0f:f0:
d0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EF:98:D7:3E:3C:36:33:9B:13:62:9C:13:0A:02:E3:B5:E2:10:EE
X509v3 Authority Key Identifier:
keyid:B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:fb:b2:1f:37:8c:14:cf:61:3a:0e:0e:4b:14:0a:66:63:ea:
97:64:5c:5f:2c:a6:b3:fa:11:ef:00:ae:9c:88:33:47:26:43:
51:32:e4:c8:10:54:e0:3a:42:53:25:de:fc:c3:fb:e4:72:1b:
b2:50:8c:ea:9a:da:30:90:1c:e7:0a:11:b5:43:e3:8f:58:cd:
cc:6f:bc:ab:b7:b5:52:92:ad:96:f7:ec:12:8b:22:62:fd:37:
02:0a:2a:77:75:2e:8d:6b:df:07:c8:29:37:b2:30:f4:9d:98:
26:d4:4b:40:c1:d0:5c:14:21:14:ca:37:7a:5a:8e:c2:b1:7c:
30:9d:d3:f4:19:d9:90:f5:3d:37:7b:2b:e5:99:4a:34:72:ee:
08:78:d8:1f:d6:42:8e:34:69:06:f4:63:97:ed:28:8c:1c:be:
c4:ca:56:d6:cb:5d:26:50:2a:27:86:fd:7e:23:a0:c3:fd:c4:
ce:9b:8a:39:d3:c0:88:a3:57:2f:52:33:c2:5e:99:38:ff:50:
96:c3:ca:df:45:68:70:02:51:cc:67:5d:fe:ed:ef:93:d0:74:
87:be:5e:73:1c:f3:67:2a:3a:c0:33:b8:04:f8:17:13:0e:af:
a4:7c:09:74:23:e7:ea:bd:93:8c:d1:3f:cd:e4:2f:81:18:fb:
3a:01:30:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:11 2025 by rpki-client