Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
File: 8spAIO_uYcMQasn-znnHpo9xqcs.mft (raw, json)
Hash identifier: BkwQnCWwviJd0rz8Q5fGebKMcgseaCWa1ble1sYbv8w=
Subject key identifier: 3E:F9:31:7F:5D:B6:81:4F:91:F3:68:3F:B5:FB:E7:56:C4:2D:83:03
Authority key identifier: F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
Certificate issuer: /CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Certificate serial: 0195E00FF3301568C9B17C543A79E53D0A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
Manifest number: 089C
Signing time: Sat 29 Mar 2025 04:01:36 +0000
Manifest this update: Sat 29 Mar 2025 04:01:36 +0000
Manifest next update: Sun 30 Mar 2025 04:01:36 +0000
Files and hashes: 1: 8spAIO_uYcMQasn-znnHpo9xqcs.crl (hash: diyin7cGETW7Vlaoidtz3D/ttAFuTxLsBTDVPO82QFo=)
2: mKP-r2WNz-DcN8jHguqt0IynJdI.roa (hash: 64sCq3JbYFHT/xnTN/Iz1j1wV1/No8n++lWEXivZPic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:f3:30:15:68:c9:b1:7c:54:3a:79:e5:3d:0a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Validity
Not Before: Mar 29 04:01:36 2025 GMT
Not After : Mar 30 04:01:36 2025 GMT
Subject: CN=3ef9317f5db6814f91f3683fb5fbe756c42d8303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9b:e8:bf:89:af:7f:d6:9f:ee:97:55:3f:0b:
9a:16:81:36:bc:0a:d6:a6:41:cf:d9:0a:43:f8:6c:
3e:95:44:c8:12:68:ed:50:8a:52:3c:1c:30:6f:8a:
37:15:30:e2:3a:a7:b8:c7:db:45:d8:10:95:3e:b3:
6f:58:aa:be:07:93:53:b3:a6:f6:1b:28:ec:c3:5e:
27:f9:33:d9:fc:a1:4b:38:53:9f:f3:fe:d0:8c:5c:
ea:7b:a7:04:c8:80:bb:cd:39:ca:a7:8d:11:8e:ce:
6a:b6:b4:b4:f1:dc:25:89:4f:35:1c:38:e6:77:48:
83:89:8d:14:14:90:7a:06:d4:cd:d8:0c:88:cc:1b:
dd:21:a7:0c:38:0d:b0:9f:7e:85:b2:4f:10:07:b8:
9c:3a:50:96:54:76:51:c3:f6:0d:8f:5f:19:bf:b1:
7e:5c:79:bc:1f:27:6c:cf:6b:31:ef:8d:e5:43:43:
f0:6e:24:c7:c4:91:20:04:21:fe:a8:cf:e8:9f:52:
2c:22:fb:70:fc:8b:71:b1:14:9d:87:1f:83:2b:5e:
70:83:99:57:6b:c3:63:75:8f:5e:df:f4:36:45:70:
f0:fc:07:2a:e9:f6:80:84:21:4c:c0:be:9a:39:7e:
de:19:d3:f4:6c:54:bd:f5:a3:96:18:21:3d:e4:ea:
6d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F9:31:7F:5D:B6:81:4F:91:F3:68:3F:B5:FB:E7:56:C4:2D:83:03
X509v3 Authority Key Identifier:
keyid:F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1f:2b:c0:a1:4c:76:06:a0:37:a9:1c:5b:71:56:20:18:5f:
19:e4:87:f3:53:ee:c1:9d:d8:13:23:cf:9e:f7:aa:af:22:32:
81:60:59:bf:c6:df:f9:72:66:a0:c4:c2:fe:4c:fa:63:3a:28:
f1:b3:52:37:0c:03:af:f9:44:30:8c:d0:47:49:d5:4a:14:a8:
4b:76:e6:22:b7:f0:55:7e:ca:fa:20:80:4c:79:ec:6e:ed:4a:
5f:48:7e:5b:6f:81:f7:f6:8a:35:d7:c3:12:68:2f:57:df:00:
8e:56:37:2c:cb:8f:a4:5b:64:bb:8d:6f:78:8e:1c:70:bb:54:
2a:d3:c2:77:fa:16:2c:a4:a3:79:9b:b8:de:51:4e:db:71:7f:
03:11:2d:f8:b4:ba:1b:c0:ba:69:93:13:4e:f0:91:12:79:1d:
7a:9c:0d:4e:67:60:ae:35:71:ec:5e:70:03:25:15:15:ce:e8:
ed:65:04:db:ff:13:4a:3c:09:34:c0:2b:0a:dd:b4:e0:86:f8:
9c:43:f6:5b:64:26:8c:39:b0:4d:3e:a1:ae:ac:0f:4e:76:60:
79:0d:9b:e8:51:29:35:d7:ef:ab:ae:ff:51:7d:7c:23:7d:a5:
66:26:8e:69:d2:a1:20:5f:06:c1:01:e8:ab:c8:7a:cd:fd:15:
73:7a:42:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:51:22 2025 by rpki-client