Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
File: 8iyKma2nf70-JAFPXiTxr2lQXCM.mft (raw, json)
Hash identifier: bo3IWV1DxjvGh8EwEOn955nmXHD7GwwqPn5pL8V/fso=
Subject key identifier: FC:9D:BF:89:1D:1D:30:3D:71:93:42:8F:99:8D:B7:92:BC:44:31:9F
Authority key identifier: F2:2C:8A:99:AD:A7:7F:BD:3E:24:01:4F:5E:24:F1:AF:69:50:5C:23
Certificate issuer: /CN=f22c8a99ada77fbd3e24014f5e24f1af69505c23
Certificate serial: 0194BBCE8984D73CBDDFC519AB9FA314BF78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: 8iyKma2nf70-JAFPXiTxr2lQXCM.crl (hash: XdPGjjhreT1lsXziv2gzpuV5leAf+X8QJG9d+bFShPM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:89:84:d7:3c:bd:df:c5:19:ab:9f:a3:14:bf:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22c8a99ada77fbd3e24014f5e24f1af69505c23
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=fc9dbf891d1d303d7193428f998db792bc44319f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:cc:51:c4:6a:80:13:78:8b:cf:96:60:87:
1b:31:6f:da:07:19:e7:f7:30:77:69:d9:f4:ce:b3:
5b:4d:7c:1d:bf:27:2f:3a:0a:07:e5:72:90:a5:74:
89:b7:fa:2b:35:3b:e0:76:b2:6e:dd:70:8b:39:73:
b8:f4:0a:d8:84:22:e0:06:e7:b2:9f:d5:e3:3a:6d:
e6:aa:43:c7:59:88:98:2d:90:36:ff:ba:34:31:d8:
8d:5e:f6:ba:67:b4:84:f6:27:7c:e4:7f:79:06:b6:
e9:fa:91:4d:39:a4:73:95:20:14:9d:24:23:8e:0a:
e2:a9:d6:44:1b:f0:3a:83:8e:15:90:c2:e8:e2:a5:
e7:3e:1b:a4:23:df:20:2f:d8:61:87:fc:ab:0c:ac:
b6:f2:29:48:d8:71:89:64:5b:f9:b6:77:13:2b:db:
ef:56:36:55:a0:5f:21:5d:6c:4e:af:e1:91:af:89:
49:bb:31:96:f8:c5:e3:d0:07:81:20:1a:d6:dd:08:
26:08:90:07:c5:2b:95:35:8c:0c:d8:dd:c4:4f:41:
53:b8:25:86:e3:37:73:72:a2:2f:fd:c1:47:60:e8:
91:c8:33:48:e1:0b:88:77:1f:22:1c:2a:36:4d:4b:
d2:51:4d:0a:62:d6:e5:dd:10:f9:4d:70:b8:80:f0:
90:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9D:BF:89:1D:1D:30:3D:71:93:42:8F:99:8D:B7:92:BC:44:31:9F
X509v3 Authority Key Identifier:
keyid:F2:2C:8A:99:AD:A7:7F:BD:3E:24:01:4F:5E:24:F1:AF:69:50:5C:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5c:f3:da:bf:d0:2d:6e:e4:85:ff:5e:67:53:83:50:ac:1b:
94:70:e4:89:7d:3b:a2:82:4d:9a:07:14:57:b2:6f:40:11:cb:
21:e0:5c:ad:62:cc:18:c4:dd:29:3b:49:99:17:e6:0a:87:50:
c9:6c:fd:30:6e:61:59:a7:88:42:bb:36:7e:56:3d:a0:84:00:
6f:74:23:78:1a:8f:7d:35:af:70:59:74:7b:cb:0d:91:2c:f4:
1e:a9:4f:79:9a:ec:22:a1:bc:7b:12:46:22:fb:97:a9:ae:8c:
3b:0d:5a:82:84:e6:78:d5:c3:f1:09:8e:85:6a:73:7a:1f:15:
c5:42:6e:77:4b:9d:d2:cb:4c:51:78:47:96:bd:5c:a6:b3:b5:
ae:f7:35:53:c3:f9:97:2d:b0:76:d9:24:d7:2c:de:6f:9a:13:
a8:f4:04:45:8b:36:7a:fe:1b:35:7d:cc:66:15:17:bc:aa:45:
d9:d0:0e:3c:1c:ec:60:00:e2:78:e8:d0:01:2d:af:03:94:ee:
0e:93:09:38:ad:e6:8b:06:b3:1f:3e:ae:70:e4:8d:2a:fd:80:
49:96:35:7d:6f:68:44:10:0a:99:78:aa:dd:e6:c9:6e:a8:04:
ca:0c:ac:18:f2:0c:dc:b8:54:cd:db:55:88:0e:d1:bf:9e:de:
1d:6b:aa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:05 2025 by rpki-client