Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a6892c-61bc-48df-b65f-3e6344566e04/1/8L_9ke3QeSGPdPosV29kAINLQ2U.mft
File: 8L_9ke3QeSGPdPosV29kAINLQ2U.mft (raw, json)
Hash identifier: T7txH9B9DXLBMT1ehV1yNvh7T+pN4thjoUGMVyFZWrM=
Subject key identifier: 85:9F:E9:D4:23:F0:16:67:45:7C:45:3E:FE:B2:AC:17:1D:94:45:25
Authority key identifier: F0:BF:FD:91:ED:D0:79:21:8F:74:FA:2C:57:6F:64:00:83:4B:43:65
Certificate issuer: /CN=f0bffd91edd079218f74fa2c576f6400834b4365
Certificate serial: 0194BD4E3D8584FAE852CBBFE90C61C34BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8L_9ke3QeSGPdPosV29kAINLQ2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a6892c-61bc-48df-b65f-3e6344566e04/1/8L_9ke3QeSGPdPosV29kAINLQ2U.mft
Manifest number: 8E
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: 8L_9ke3QeSGPdPosV29kAINLQ2U.crl (hash: JGeW6F7N8DP2fglDfi3X5lrC65QbZzXiDXP+2PayRXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3d:85:84:fa:e8:52:cb:bf:e9:0c:61:c3:4b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0bffd91edd079218f74fa2c576f6400834b4365
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=859fe9d423f01667457c453efeb2ac171d944525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:d1:38:73:06:1a:41:2a:e7:23:de:21:74:
29:15:20:2e:bf:bf:27:e6:da:b4:d9:64:52:4d:66:
3e:83:81:5f:d5:c9:c5:23:4c:e7:6b:29:5b:29:d7:
ff:89:0d:46:82:3a:a3:44:56:26:20:30:c8:83:18:
8c:7c:9d:f4:b1:ad:29:83:c7:ac:7d:33:35:32:f3:
2a:5e:30:d5:87:3d:7c:81:1c:ee:89:4f:e5:ae:8c:
0b:ea:05:59:d3:f4:1d:61:38:11:0e:3c:51:8b:b5:
b7:2c:67:72:bc:d4:b2:9b:89:b5:91:14:0b:48:46:
78:a8:b9:75:9d:a9:05:6b:b1:74:17:62:bf:e9:79:
d6:4a:0d:4a:56:9a:b8:c7:a4:93:ce:3d:a7:76:90:
65:eb:e6:98:ca:ef:f8:11:1b:62:0d:4b:58:6f:c9:
c0:6f:1b:67:e3:e8:d1:64:20:6d:22:af:73:d1:0d:
20:58:13:91:35:f6:d2:f6:44:2a:3c:48:5c:60:fd:
2f:ee:6e:11:92:7d:81:59:29:02:b2:41:a5:87:29:
51:6c:61:f4:77:79:0c:db:cf:0d:3a:25:07:f8:4b:
3e:94:21:2e:9c:d2:68:87:2c:ef:d9:c8:fc:b6:97:
d9:ea:04:f1:9a:63:2a:bd:9f:f3:f1:68:48:7d:f7:
a1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9F:E9:D4:23:F0:16:67:45:7C:45:3E:FE:B2:AC:17:1D:94:45:25
X509v3 Authority Key Identifier:
keyid:F0:BF:FD:91:ED:D0:79:21:8F:74:FA:2C:57:6F:64:00:83:4B:43:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8L_9ke3QeSGPdPosV29kAINLQ2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a6892c-61bc-48df-b65f-3e6344566e04/1/8L_9ke3QeSGPdPosV29kAINLQ2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a6892c-61bc-48df-b65f-3e6344566e04/1/8L_9ke3QeSGPdPosV29kAINLQ2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ec:a9:9b:6a:ec:a8:44:a4:26:a3:85:27:41:54:23:4d:5f:
79:a5:4e:08:68:ff:f0:48:87:7b:66:35:f5:48:2e:90:2c:87:
cc:1a:74:ba:d9:ba:78:e5:87:68:4c:76:3b:cb:63:9d:42:42:
70:75:3b:2d:15:56:eb:e2:13:40:73:26:b8:e8:13:f9:f4:a8:
46:61:52:89:ca:e8:b7:60:f8:e6:5d:3e:a5:52:fd:dd:85:3f:
f7:9b:8b:b1:75:15:3a:f3:6c:ee:90:7f:78:ef:00:2f:12:42:
38:8b:56:23:9c:05:98:41:42:30:0b:9b:f9:ef:05:69:39:db:
2d:11:05:23:c4:ce:10:9f:46:16:04:95:42:20:53:ed:12:f8:
58:f2:89:74:f6:a2:ff:6f:8b:99:f1:03:31:c7:bb:53:21:c3:
6f:1d:3b:86:63:0d:96:8a:6b:3d:54:cf:df:ea:9e:7c:6f:48:
57:d6:ac:d2:32:4a:7f:90:7c:22:1c:65:1f:be:bf:48:3f:1d:
51:73:50:fa:0c:e5:92:7d:5f:b9:8a:47:a3:6c:79:01:90:36:
a0:9f:aa:81:24:bd:6e:a7:33:6e:c0:8a:4c:6a:c7:55:1c:bb:
45:f9:92:22:62:72:e8:13:4c:97:6d:96:a6:fd:21:b5:2d:f2:
8a:78:09:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:13:21 2025 by rpki-client