Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
File: p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft (raw, json)
Hash identifier: ancirhbIEzzXXpZ3tw8B00Kyx2cHOKGlyYgFXzW0QzE=
Subject key identifier: 1A:75:46:60:40:5A:B6:EF:15:9A:7B:87:81:3B:BD:09:11:2C:3A:B6
Authority key identifier: A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
Certificate issuer: /CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Certificate serial: 0194BC3BF4E6B6CA90748304533F8DEFDFF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
Manifest number: 10F8
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: AGh_BXwDaFnqdr1rluMLMPMOrnM.roa (hash: L7VSHEAFfvwnZGbHuhPcAH6Mmh4M0FtFsSBsZ0VnfV0=)
2: p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl (hash: 5REUQEpBRIzDezE/E5w54bM1V9SmFT5Uk3i+oKocoSM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f4:e6:b6:ca:90:74:83:04:53:3f:8d:ef:df:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=1a754660405ab6ef159a7b87813bbd09112c3ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9c:70:f9:42:e2:43:90:cc:91:3e:95:9f:4a:
0e:20:f1:94:1f:bd:47:01:58:67:e2:98:48:08:05:
83:32:56:8a:64:25:42:f1:d9:99:1a:20:18:b8:65:
e4:18:7e:c2:9b:95:fa:fc:c2:f4:17:e9:d3:f1:b4:
a6:9a:94:0a:5c:ec:a7:e0:b6:e1:c3:47:17:b5:0a:
c7:61:47:3a:f8:9a:29:38:58:a8:a5:e0:1d:ee:66:
ac:39:02:bb:a7:9d:7b:dd:ab:4e:d2:2a:dd:af:db:
09:fd:a4:a2:c9:75:3b:f2:8b:77:c5:a5:a1:ab:70:
1b:99:9a:2a:90:80:e5:6a:22:01:77:87:f0:b2:fb:
6b:63:c7:31:1a:08:9d:fd:a8:e8:17:17:d7:bb:3d:
d0:b1:7b:aa:4f:45:5d:95:cf:82:0f:5e:b0:85:5b:
63:5c:d9:59:78:9d:dc:8a:ad:c0:d0:e9:62:17:c1:
76:d7:32:42:dc:99:76:0e:51:d8:0d:56:bc:72:2d:
8a:24:42:c7:6b:b0:1a:4d:7a:7d:e1:8a:9a:a4:9f:
13:6e:17:35:77:fe:46:d6:08:66:7b:2a:cf:6f:ea:
9f:2c:73:fa:e8:f2:0d:98:f5:18:23:00:19:4f:7c:
0e:38:f8:78:61:b3:75:14:99:f0:e5:b6:37:48:72:
11:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:75:46:60:40:5A:B6:EF:15:9A:7B:87:81:3B:BD:09:11:2C:3A:B6
X509v3 Authority Key Identifier:
keyid:A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:64:7d:d5:97:88:bc:a3:ca:16:25:c1:3f:c7:c9:33:36:bf:
77:40:29:ea:e9:52:fc:70:ae:94:39:98:07:db:cc:9e:55:5b:
c2:31:65:5d:a8:9b:06:d3:8a:6b:59:24:6e:67:29:13:2e:a3:
0b:46:3f:96:50:94:48:6f:b7:6b:79:e0:ef:ed:69:b2:3e:c2:
4f:25:71:a9:9a:b8:96:cd:da:1f:f8:19:da:64:30:c2:13:8f:
2f:ce:37:9c:86:69:b0:9d:a5:22:6d:0c:cd:56:ed:34:14:40:
9e:37:d5:69:55:1d:ce:95:f3:cd:23:b9:d3:86:e0:e9:ea:c8:
d9:68:ca:ea:31:e1:f6:b4:d9:65:fa:91:4d:25:91:22:7d:22:
39:f9:8b:16:46:91:36:5b:55:c7:17:67:fc:16:2c:42:0d:c5:
30:89:2b:3c:6f:1e:24:29:7e:e4:20:ef:a7:0e:70:e6:3c:5b:
e2:c1:13:a2:ad:86:f3:39:1b:db:57:9d:d9:e6:8a:1a:a1:98:
dd:a5:ad:7f:c1:01:5f:0c:f6:76:15:8a:e2:82:bf:fa:e3:cf:
c7:c4:99:ee:20:7e:6d:38:2d:73:f9:a7:32:b7:d5:1a:12:12:
0d:81:c9:10:e0:70:d5:6c:08:5a:d2:ba:49:4c:9c:fc:13:de:
77:5c:02:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:54:00 2025 by rpki-client