Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
File: 8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json)
Hash identifier: rlCAZpCSAS1dNdmTg7p3qlictqA6/B2tofQ9/xP6poE=
Subject key identifier: EE:23:60:3F:A7:F3:F2:29:04:82:B9:AF:8A:7B:9C:24:CB:3E:AA:60
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Certificate issuer: /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial: 0194BCE07A257ADAEEEA17DB5934EC5BB442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
Manifest number: 132F
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: ZV66mjyOWZgAVJ3h2kkU4pNKFktRCIY3fs8xb4Jtr8w=)
2: YuVFbu671lxJtgp8Dd5trr77imo.roa (hash: eoCcK7MisnOAgEVb/tn2NdbeYwDzl1a566p1bHV7AcM=)
3: n5Snke9qrVszV2r6iCOXAr8xpfU.roa (hash: OcodRKZ+v9kxH+amb1gjlja43PdbaBmuEGTA3TTwgu0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7a:25:7a:da:ee:ea:17:db:59:34:ec:5b:b4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=ee23603fa7f3f2290482b9af8a7b9c24cb3eaa60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bb:ef:8a:59:a6:81:06:4e:6d:63:bc:ee:a5:
57:a1:0f:09:be:b5:5e:b3:64:85:15:d7:23:31:44:
12:34:03:ef:2d:e7:8c:fb:a1:bb:d3:7c:76:9d:5a:
cc:79:e1:70:7b:ff:f7:6a:b8:64:b0:52:7c:cc:ef:
a1:a6:73:e0:b3:b3:7c:d5:7e:28:f0:3f:a3:a2:df:
f9:77:c2:2d:5e:b2:6e:bf:09:17:fe:72:40:f0:9b:
f0:6f:79:f2:cf:50:f9:15:54:80:58:85:be:0a:1d:
da:6c:9a:ab:f8:fc:d6:d9:56:59:ed:92:2b:d3:fb:
24:c3:26:80:ca:9f:eb:76:74:c4:35:46:0c:a2:d3:
2b:b6:84:08:14:ed:54:63:68:c3:fb:77:6f:79:d2:
f3:ee:32:00:c5:e0:25:6c:b9:63:b0:bf:e6:45:1b:
fb:48:b9:51:89:ed:fe:17:31:ea:64:29:7b:d6:d9:
58:d1:96:b0:60:fb:4f:0d:c6:0a:8c:72:86:69:40:
e8:79:2b:14:84:01:bf:e4:e2:d0:d6:b3:96:13:4d:
59:21:40:92:b5:aa:93:ee:b7:3d:c0:0d:25:a6:88:
d3:63:a2:60:01:d0:40:07:b3:ca:b6:d9:71:08:45:
df:33:18:0d:38:35:51:4d:c1:36:d6:af:6e:69:af:
b6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:23:60:3F:A7:F3:F2:29:04:82:B9:AF:8A:7B:9C:24:CB:3E:AA:60
X509v3 Authority Key Identifier:
keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d1:76:3a:31:f3:06:43:db:8d:d1:04:5d:a2:72:b3:01:7d:
c3:5f:4e:51:5f:0b:5c:7f:34:df:e8:3a:6f:12:95:48:cc:6a:
e6:d0:bb:21:b3:1b:61:d6:21:6a:2f:9c:fa:bc:c7:f5:85:e0:
80:75:3c:de:e9:8b:99:4b:1d:53:38:23:d6:8b:ac:49:07:b3:
83:52:4d:6f:f0:0a:94:9b:8d:57:6d:a5:a0:51:74:c9:e3:3b:
36:c2:c9:6d:a3:fb:7c:a5:9d:4c:0a:8b:01:8a:35:e3:0e:8b:
b8:cb:49:73:df:e3:8d:aa:ba:9c:4b:4e:6e:44:18:11:e0:16:
6f:6a:ee:33:03:8e:59:1b:8c:67:ca:32:82:b7:70:d7:58:cf:
1a:3b:38:56:e8:61:d3:7d:3d:6e:fd:4d:2c:1d:a3:22:e9:4d:
45:03:59:38:c7:f8:2b:a2:14:8c:6f:b4:c1:c6:5f:a5:42:e0:
79:5d:93:2d:68:35:b0:a9:70:25:8d:71:73:4c:20:d0:7c:d0:
35:c2:95:27:86:58:9c:48:18:68:f3:1d:b8:7f:bf:52:08:4c:
e6:12:c8:16:89:37:d8:4b:66:21:4a:cf:e3:5d:a5:ff:23:33:
45:1d:47:f5:6e:6e:90:40:0d:ac:6e:c2:be:1f:84:68:78:41:
66:6a:81:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:45 2025 by rpki-client