Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File: 8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier: ssma7s61e/SqnxWtPiIqRjURdzj8DMoFj68j42YVU1M=
Subject key identifier: 54:4A:3E:DD:4C:8E:22:F0:BE:55:79:E9:F9:C8:6F:53:04:F5:76:12
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial: 0194BCE08E3063DA2254F487A1A52F3E5F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number: 0BB8
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: wWQZoz+luZq0IqjftI/zxe2UCPluw+5QuqsP4fT67Ps=)
2: Nh04CLMcck1XHS9AATe9hyD29NE.roa (hash: KRd9oxirDVyH2M186/c3VQHXMTtIMq/vRs5kMb4jBs0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8e:30:63:da:22:54:f4:87:a1:a5:2f:3e:5f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=544a3edd4c8e22f0be5579e9f9c86f5304f57612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:1c:35:f3:d3:b6:ca:5e:8b:e8:71:46:04:
b1:25:8e:6a:06:ce:f0:c2:85:81:49:36:3b:d7:5c:
5f:1f:cc:61:51:56:ec:bb:05:81:c2:67:40:2c:a8:
8f:2d:28:58:da:9a:c1:77:ec:d4:d8:a8:cc:1e:8f:
3b:e3:00:a1:3b:b5:72:fe:35:c1:d2:63:5b:6f:ee:
59:99:90:f9:e6:0a:10:41:3b:17:17:c7:9a:28:1a:
11:bb:a9:1a:b0:13:e3:91:88:c4:7e:1a:09:6b:96:
7e:61:3a:56:7b:44:b7:c9:c6:ae:9b:59:71:40:c1:
97:ca:28:17:64:ab:a2:b3:9c:a7:e4:7a:f3:b9:6c:
c4:3e:1e:ba:40:f9:a4:2f:19:65:90:08:0c:29:f5:
49:5d:fe:54:f6:a5:48:b3:6b:36:64:4c:e6:28:bb:
b6:c5:ef:73:0f:02:d7:9f:bc:ca:07:9b:86:10:4f:
ab:7d:09:22:cf:9e:3b:af:97:81:2a:63:e6:82:8f:
0c:9e:df:8b:d7:26:2f:cd:96:e5:0b:f5:0b:55:e3:
61:68:79:a4:c9:ce:68:bf:68:04:31:0f:74:47:43:
11:b8:65:27:a5:44:66:91:28:78:32:78:7c:3a:12:
44:3b:5b:07:23:dd:b6:27:49:05:37:d7:df:bc:ee:
45:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4A:3E:DD:4C:8E:22:F0:BE:55:79:E9:F9:C8:6F:53:04:F5:76:12
X509v3 Authority Key Identifier:
keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3a:41:d5:bf:8b:1e:a4:c6:5a:32:8c:55:3e:b9:32:fc:5b:
08:54:89:59:9d:f2:ef:3b:59:1d:cf:c3:4a:60:0d:ce:86:c7:
54:97:6a:92:7d:a8:15:81:62:fd:08:f8:14:78:6d:ac:98:a6:
c5:d9:13:18:4e:e5:87:a0:49:09:44:a6:0b:7e:77:04:91:b0:
7e:48:40:9f:b0:8b:1b:f7:88:3a:19:0e:18:bf:ca:bb:f1:56:
eb:a5:93:91:1f:b4:8d:ba:0a:07:5e:9b:be:70:8b:a9:b1:c0:
4b:c6:e8:90:7a:cc:b9:3b:b5:49:1d:3d:15:c0:be:c1:88:e4:
57:2a:38:8b:80:c9:fa:27:17:a6:0e:0e:64:aa:2a:a0:f4:fb:
b5:04:00:c6:6b:d7:38:9a:42:48:3f:9a:fa:d2:27:f9:05:19:
32:61:15:c1:fe:cc:c2:c2:bb:06:66:a4:08:a6:b0:96:b3:0a:
9d:1a:a5:d0:b7:c6:3d:38:67:20:6f:b5:88:9f:3b:48:0b:cc:
09:19:0f:90:94:05:98:0b:7f:0d:eb:63:d2:d5:da:c5:2a:a7:
a9:a1:1b:f5:ab:d3:74:0d:c3:5f:94:f2:72:87:56:66:bb:7e:
85:bf:08:5b:b1:55:a6:88:05:66:5f:b4:fd:c7:6a:5f:61:bb:
91:93:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:24 2025 by rpki-client