Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
File: 8iL76FrkCNN3shfU66eziyS69d0.mft (raw, json)
Hash identifier: jnjM9iySH8tkhyCBBd/1XXyryyhfJY2k8SHsy9IJpLg=
Subject key identifier: 70:3A:52:D7:5C:E3:5D:0F:71:37:13:89:99:65:CA:2A:78:9D:1A:0A
Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Certificate serial: 0194BCE0A1EC229CB00A18D9139CC002DD30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
Manifest number: 0ADA
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: 5-tO1DtUPdvn-gHncHuAbgt6OiM.roa (hash: L6Z02H1tfyOJ9fsH+lsAomG7wfqgJlWMWjJh/1Ka9SI=)
2: 8iL76FrkCNN3shfU66eziyS69d0.crl (hash: Crgj4F5/+BIFx7P+iii0+A3Fs6lANHyC7x0xDqmrwJw=)
3: gPE9V0tO8JPLDv8MCZH-UuWvdnQ.roa (hash: 5qjlUc3/t7psPBo135Wzs5OYxrc/B+KKSYzn0gcEaGk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a1:ec:22:9c:b0:0a:18:d9:13:9c:c0:02:dd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=703a52d75ce35d0f713713899965ca2a789d1a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:44:cd:20:21:9c:c3:bd:6b:95:04:cb:e4:c7:
56:79:d9:76:36:a7:08:42:f3:62:6b:e6:ef:7d:fc:
14:9c:19:a7:c5:a0:dd:08:14:cb:13:77:f9:08:0c:
77:29:1f:08:6d:3f:8f:03:61:4d:2a:26:9d:66:33:
53:e2:05:90:1a:14:1f:a2:bf:8a:1d:e3:1b:1c:a0:
26:e4:16:16:a8:40:dd:af:9e:b6:5b:8c:71:8e:c6:
c9:bb:b8:2b:47:65:bf:ad:be:29:3a:4a:fb:a8:eb:
83:59:ce:a0:f9:88:b9:2f:e0:30:38:08:81:6a:fa:
0f:34:47:34:75:ec:41:4a:72:ad:49:b2:ca:16:76:
f9:1e:0a:bf:00:eb:fc:74:6b:2b:bc:4c:f9:76:d9:
ac:86:d4:a1:e5:ee:ff:ba:1d:50:21:aa:94:63:7d:
f2:00:01:69:3c:7b:8b:f9:8f:a2:44:3c:44:77:6e:
44:5c:21:0f:6b:ce:dd:a4:b0:e3:8f:38:0b:7b:cc:
3b:e4:68:40:42:f0:cb:2e:41:37:07:e9:b7:06:1d:
85:68:e4:8d:9a:b0:8d:16:29:d2:9e:b1:69:e8:0a:
bd:01:02:c5:76:99:b3:0e:b2:79:2b:e8:1a:a0:94:
4c:0c:8b:d4:04:9b:4e:6b:79:e0:f4:ca:db:43:98:
ce:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3A:52:D7:5C:E3:5D:0F:71:37:13:89:99:65:CA:2A:78:9D:1A:0A
X509v3 Authority Key Identifier:
keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b1:ec:26:62:3e:00:76:d1:ef:aa:22:82:5d:dc:a0:de:dd:
ea:ad:d3:62:9c:3c:fd:00:13:9e:d3:66:cf:09:5d:b4:b6:af:
29:5a:35:33:0d:6d:af:3f:92:93:ac:e8:5c:eb:c3:55:2e:a6:
67:c9:f3:6e:3b:25:45:d8:9c:99:03:a6:20:ad:71:97:c3:ac:
7c:28:44:dc:b6:c7:c1:3d:50:1a:fa:6a:98:a0:e2:1d:35:71:
d6:bc:9e:b3:91:dd:78:da:16:6f:9d:0f:e9:7c:19:a2:7f:0d:
b9:90:91:b0:a4:91:04:12:3d:65:52:1c:39:26:96:8b:74:f9:
5a:7d:8c:34:ff:ec:7c:6c:cd:b7:d5:a0:55:24:3b:c3:da:f4:
57:8d:eb:56:4c:2b:69:f0:a4:76:6f:1f:cf:9a:f4:86:6d:53:
b5:1c:f8:11:9c:f1:1d:d6:74:c0:80:85:a0:cf:c3:c2:2d:04:
e5:a5:18:c4:35:1c:d6:5d:a4:64:a2:ec:59:e7:2d:fb:00:b2:
ee:a5:d1:31:c8:83:0b:57:0f:3d:be:43:1c:c9:bd:dc:4b:25:
25:44:69:2f:cc:ee:30:cc:56:dd:c4:1d:3b:ee:8c:3b:a4:27:
c5:b4:e3:bb:df:2b:0a:72:a5:63:3c:7f:27:46:5b:2f:ff:9b:
3f:f0:80:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:28 2025 by rpki-client