Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
File: 8rwR5uzToK8-5DlNy7ez75AYfTA.mft (raw, json)
Hash identifier: fyT3pGpL/5QXPy6gxNoCe0LEC4stDFXoMv/ObZ376zU=
Subject key identifier: E1:59:8A:70:EB:59:1F:B7:43:79:A3:4C:4F:92:0C:CF:23:8C:E4:DA
Authority key identifier: F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30
Certificate issuer: /CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
Certificate serial: 0194BC72EBA31314A08A006D7827C5D17732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
Manifest number: 07AD
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: 8rwR5uzToK8-5DlNy7ez75AYfTA.crl (hash: t+kts4k/3dSFNzpzrDnXUIPnp6Coi3MzdJcJb7jIKE4=)
2: Jt10BH3qKoOGqx6R1oafXbYBRvg.roa (hash: 9VB1KYRqUDPucDZfXSnHKaNbHiQLBOlnBbvyv/YEMkA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:eb:a3:13:14:a0:8a:00:6d:78:27:c5:d1:77:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=e1598a70eb591fb74379a34c4f920ccf238ce4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0e:43:5d:a2:08:93:f0:64:e8:54:2b:4b:f1:
14:ef:83:cf:02:51:0f:06:7e:e0:e2:34:bb:ae:6e:
d5:67:3c:5f:67:a4:06:1b:65:48:4a:8e:c3:df:96:
f2:d2:d6:76:a5:af:4a:27:75:22:42:ca:1a:67:de:
33:8c:9b:93:38:15:21:cd:52:ca:8a:61:72:14:fa:
6b:eb:26:2a:48:14:d4:52:0a:91:1f:9f:b3:cd:af:
19:3f:5e:00:7d:bc:d2:78:e8:38:42:96:1e:2d:e7:
c8:c6:fa:c8:1e:40:e3:41:54:c4:46:8b:ea:0a:da:
4f:0d:c1:f0:98:2f:07:7f:c6:2a:ee:1d:99:75:46:
5c:55:a4:e8:a8:fb:fe:39:ac:66:68:0d:ef:d7:48:
89:c4:e4:97:de:f8:b9:f9:3d:33:20:31:53:4c:3e:
6e:98:95:74:6f:36:ad:77:a9:45:d0:5b:b7:eb:31:
19:f2:64:79:ff:a4:50:61:2f:41:23:00:47:f4:29:
09:c6:bb:4f:04:15:a5:00:c3:50:fb:6a:69:90:17:
f7:cb:0d:eb:05:2c:dd:e1:f8:af:34:38:87:02:59:
67:76:ba:07:bd:64:de:3c:a9:42:5b:b8:a2:08:68:
88:be:26:74:7f:33:4c:c1:b1:8a:bf:bb:17:33:86:
3b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:59:8A:70:EB:59:1F:B7:43:79:A3:4C:4F:92:0C:CF:23:8C:E4:DA
X509v3 Authority Key Identifier:
keyid:F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:29:6a:dc:3d:65:0f:b6:19:50:ed:26:31:c6:f6:a2:3f:f3:
db:14:c5:fd:58:2e:ac:24:a4:36:86:70:7b:2f:6b:6f:be:23:
f3:47:4a:f4:84:35:b3:d4:f5:c5:53:da:a2:36:2d:66:66:37:
49:39:05:7b:0c:eb:8d:97:b8:0d:ad:2e:be:20:32:d1:1d:02:
c9:3c:f3:f8:fb:43:d5:4e:08:7f:da:d3:f8:15:43:c7:a3:03:
f5:43:0d:ff:2c:00:5a:03:1d:c1:6a:e1:6e:f7:39:de:d6:1c:
a7:3d:01:6d:79:9b:ee:d3:e0:18:ef:38:b3:bf:ad:53:b4:8a:
df:85:5b:75:7b:86:d9:98:3c:54:28:b5:4f:df:24:0d:c8:b9:
0f:74:6c:32:09:9b:1b:ca:92:16:9d:c0:67:f6:80:10:57:61:
81:aa:7d:6d:f5:3a:fe:68:f8:30:8c:9b:a7:19:19:67:8c:33:
27:5c:a0:99:70:04:ee:ef:42:31:dd:ca:5c:c8:fa:ef:6b:9e:
3a:e4:88:3d:f8:e5:e0:5e:31:0a:2a:27:4c:50:df:e8:6f:88:
7a:d3:fe:93:fd:b6:e7:98:4e:54:81:e9:fc:a7:b0:21:c3:2b:
27:02:6f:50:18:75:52:28:31:e4:f5:f7:5d:b9:47:cb:cb:70:
f9:22:4b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:09:29 2025 by rpki-client