Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
File: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft (raw, json)
Hash identifier: 2z4f0DJWB/GF8fiA7T4XTexiVoxpz1Oeuq4zM30fmfQ=
Subject key identifier: B6:8A:AA:59:3B:B4:7E:4E:8F:05:23:89:BA:D6:75:B1:9B:70:BC:55
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial: 0194BC3C00FD768B91F692A7BF5388C9E431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
Manifest number: 13D1
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl (hash: I0vsODa+UiE44H9rmvVBVyW5Jhio+xqsW1O7s/FUXN4=)
2: f4A325yGj48RuMfkjcKdx35IWgg.roa (hash: j8y8oC78Ayis+Zl1DL+FUWPv5N+us3D0FIOg/cZJpDI=)
3: g4Nm3zw7BZCf660L7J2wB5s2-SA.roa (hash: +YfoAh+I7x70vYXeLBN3w6ZRtj/Ii78yrIjM344/IWs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:00:fd:76:8b:91:f6:92:a7:bf:53:88:c9:e4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=b68aaa593bb47e4e8f052389bad675b19b70bc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1a:f3:5e:60:df:a7:8b:c3:05:cf:92:c0:6d:
23:58:30:8b:c2:76:1e:98:35:62:fe:17:89:64:91:
29:9b:64:ab:1e:98:de:d1:99:7a:6f:f5:49:0d:5c:
63:85:9b:6d:fb:06:f4:ac:55:f1:91:12:3c:ae:0e:
1e:b8:55:b6:4d:5e:a1:2c:a3:a2:26:f1:eb:0f:a8:
1e:cd:2d:c1:a0:26:33:43:26:65:79:99:30:d9:ef:
ab:4f:17:0e:b4:a3:27:e8:cb:f2:05:f3:fd:9f:52:
95:74:99:d6:3c:e5:68:b9:61:06:a1:a8:1f:fa:6b:
71:9c:81:ac:9b:86:68:3a:83:ad:f7:f2:4b:e2:4e:
ad:95:0a:2e:32:f9:f5:d6:09:6d:82:1a:ec:9a:bf:
99:a2:05:62:50:d5:09:c7:4e:cd:0a:88:d5:91:0d:
43:d1:af:1a:71:2d:b2:e0:48:78:23:e5:58:93:77:
5a:b6:88:e2:86:3f:3b:38:11:da:02:87:d6:2c:03:
a8:29:10:e1:50:bc:85:26:0b:4d:e5:c9:f6:a3:7c:
69:9d:3c:b3:45:1a:13:7a:33:02:5e:04:5b:50:30:
93:83:08:cd:25:fc:e2:1a:ae:ac:a9:dc:19:8a:86:
e7:d1:ec:69:07:ce:ea:16:9e:f3:ec:c0:1b:a1:6f:
06:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8A:AA:59:3B:B4:7E:4E:8F:05:23:89:BA:D6:75:B1:9B:70:BC:55
X509v3 Authority Key Identifier:
keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:28:c4:fb:61:0b:cb:31:7b:c9:3e:de:57:66:fe:6d:6d:14:
c4:f9:00:1f:54:66:76:db:ad:99:ff:2b:4c:f5:f0:75:ba:d3:
d8:48:08:28:2f:ea:84:82:20:64:60:2a:a1:ae:cd:71:c9:c9:
c0:4a:ec:78:6e:62:12:18:c5:52:41:a7:18:db:f8:c5:f8:83:
8f:53:b0:ba:2d:a9:05:58:12:f5:8e:77:41:f6:37:d4:19:1b:
32:48:d1:c2:2d:3f:74:6a:7d:de:a9:60:92:75:b1:5e:cd:7d:
86:c8:e7:f0:c5:cf:d4:22:2b:70:9a:af:30:e2:f0:a7:0e:9c:
75:cf:81:a9:31:b1:46:dd:95:29:88:e1:56:11:71:6b:51:0e:
43:0e:8c:db:0c:90:91:dd:37:35:93:7c:9a:62:6b:a9:2d:dd:
9c:4c:ee:f4:b5:b5:a1:9b:ff:af:40:3d:a0:cc:77:93:22:d0:
40:23:c0:88:0a:a0:53:81:a2:86:a0:82:b3:84:6f:a2:6f:ff:
fe:1e:a4:7e:e8:d3:5f:e8:b3:cf:a9:b3:24:b1:8b:e7:e0:4d:
5f:2f:22:6d:2f:8d:8f:2e:07:a2:f7:ee:1b:e4:b0:fc:b9:cc:
29:87:c2:4f:85:f2:05:78:91:10:43:48:9e:b4:0b:ad:10:39:
0d:d3:3d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:20:01 2025 by rpki-client