Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
File: 82BUCSXbyxoJ-2XzspAD1o8j3ms.mft (raw, json)
Hash identifier: vGnPMmWfNU7hZArJufJlMR17lWtr61z4ljcvKSzLCdQ=
Subject key identifier: 1C:FD:37:EA:41:37:0C:9A:13:36:94:81:6F:6E:17:62:56:86:DA:A0
Authority key identifier: F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
Certificate issuer: /CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Certificate serial: 0194BD85A59A35A7E4D54C46216864630887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
Manifest number: 07D7
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: 82BUCSXbyxoJ-2XzspAD1o8j3ms.crl (hash: 8xl2MPE6dsAyzV8P3k8oOltSgWdafDC8ObJkhexvRyk=)
2: WO4Lx-SRYYsLgDA8d_7YHDSf7BI.roa (hash: nMdj6H5AmHScUq7iFK7ub3BJ0X174BqxH7J5lRBxaFk=)
3: oI7kOSiG8h1OQh9w777ujGQ8d5c.roa (hash: 7bzozQwhPvIcjtgW8D6KNMw02ktIJKUDIRXI6dPZ7uY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a5:9a:35:a7:e4:d5:4c:46:21:68:64:63:08:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=1cfd37ea41370c9a133694816f6e17625686daa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8f:0c:f2:a2:4f:f5:d1:97:61:c9:67:34:1f:
ad:80:6b:a4:65:d6:95:8a:2a:60:39:7b:29:55:a1:
05:6b:9c:7e:bf:e0:d3:52:14:61:c4:e5:7e:44:ea:
4e:0d:48:99:bf:63:5b:7d:ae:b0:1c:8c:b9:df:12:
25:4c:7f:ec:ae:54:f8:09:83:ae:24:a7:fc:34:1f:
d7:a1:9e:79:23:b5:c1:9c:a8:6d:c0:31:c0:04:d4:
fb:25:70:c7:ee:08:e7:95:b6:bf:9f:52:9e:cb:43:
28:36:24:af:bc:7d:53:ee:49:00:41:78:65:db:eb:
ac:63:76:56:dc:19:b2:51:2e:46:4c:0b:65:64:ab:
9e:ac:7e:92:ac:d2:13:5f:ee:8f:4f:dc:57:fe:fe:
8a:3f:68:e6:8b:76:67:eb:0a:32:e1:fc:5b:55:ef:
08:5f:c3:ee:11:08:7e:8c:33:87:ca:08:fc:02:07:
fc:92:4e:06:16:b7:91:3d:e3:64:98:4a:97:42:f5:
39:85:db:28:84:43:c9:36:6c:0f:1c:86:eb:30:0e:
05:b1:0b:ad:1c:98:6f:5b:cb:2f:ed:db:bd:b8:c9:
6b:20:69:e6:a9:1f:5e:57:78:8e:eb:66:24:82:fa:
06:65:2f:71:89:8d:56:d2:29:ee:75:98:2b:b5:df:
9d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FD:37:EA:41:37:0C:9A:13:36:94:81:6F:6E:17:62:56:86:DA:A0
X509v3 Authority Key Identifier:
keyid:F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c7:7d:d6:77:5e:cb:b0:32:e4:7b:55:8b:3a:83:58:7c:62:
c3:04:f1:cd:74:dd:39:87:01:b8:80:b1:22:77:38:ab:d8:e1:
04:71:65:85:7f:ce:e2:07:cd:9b:d1:fd:b4:99:fe:74:dd:64:
fa:fc:29:8d:87:21:73:61:6f:96:28:7b:81:08:4f:f1:53:23:
a8:e6:bb:a9:e6:81:d1:7d:de:3d:0d:7a:21:9b:1c:c9:54:bd:
24:11:56:e2:58:82:42:be:c5:72:75:ea:93:55:29:e0:36:b7:
2e:46:c9:c2:b7:1b:88:f6:5c:f8:9d:ae:eb:33:1b:78:5d:03:
a7:05:6d:fd:d3:58:c5:a0:0b:9f:43:95:1e:57:36:7e:9f:44:
20:75:3e:b2:3c:e8:a6:d4:58:cf:d2:16:e1:f0:82:89:21:11:
46:09:c0:b3:f4:00:58:38:f2:41:ee:f2:da:d0:ed:3c:15:1e:
6b:69:dc:6b:56:8f:37:56:57:5f:0c:15:e6:aa:f8:fd:05:00:
5a:d1:7f:c6:5e:ca:a1:17:dd:d7:0b:0d:cf:32:ba:1d:8e:85:
f6:d5:b6:5d:c9:12:6a:97:ab:8f:db:04:b6:d9:4d:90:b2:4d:
53:24:a3:77:6c:52:7d:cf:ab:f2:11:f9:1c:50:85:9d:a4:b0:
44:3d:46:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:46:34 2025 by rpki-client