Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File: 8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier: TW5SIrArFk/fobw3aHzYUtPjGaial4BdO7m8nOQ73O4=
Subject key identifier: 3B:9F:98:5E:44:56:4F:5D:80:07:90:C0:BC:61:B0:DA:A2:8B:BD:16
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer: /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial: 0195E0EB7C8ED747CF2980E55453342EAC24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number: 0442
Signing time: Sat 29 Mar 2025 08:01:23 +0000
Manifest this update: Sat 29 Mar 2025 08:01:23 +0000
Manifest next update: Sun 30 Mar 2025 08:01:23 +0000
Files and hashes: 1: 1-a6iBHASMUxMW7asjxbfE0QEd5w.roa (hash: m3RXlatEBF9cA7N2EEjPPwV4+LMKEGb0hrpMsfXqqsk=)
2: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: S/BQlRhtnskO+Ltfvge+ixnqmdRb0OY0+vpdlVVQcAk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:7c:8e:d7:47:cf:29:80:e5:54:53:34:2e:ac:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Validity
Not Before: Mar 29 08:01:23 2025 GMT
Not After : Mar 30 08:01:23 2025 GMT
Subject: CN=3b9f985e44564f5d800790c0bc61b0daa28bbd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:52:06:1e:48:77:ef:b7:51:0b:40:39:d9:46:
4f:c8:6c:24:45:f7:b8:12:ab:17:87:d0:73:96:88:
46:f5:18:30:c9:a3:ab:f6:0b:e0:c7:13:c6:f1:4f:
4a:6d:9b:8f:3b:40:73:7e:67:a9:8e:11:9f:35:29:
49:7f:06:1e:79:e5:7f:28:3f:9b:b3:15:17:39:ee:
35:51:bd:b0:ab:a0:d5:b4:32:b8:da:b3:03:e6:fb:
d6:96:b4:94:88:0f:ea:20:d6:39:a7:66:19:35:fa:
27:13:9c:ea:b7:6c:35:55:b6:b0:94:11:4d:66:c7:
c6:e2:f3:32:4f:58:95:ac:43:66:12:6b:84:6f:2c:
d4:c4:b2:17:57:e6:ab:30:b7:4b:8e:49:38:76:b0:
52:a9:15:cd:c8:6d:6a:c5:22:59:3b:0d:3c:55:49:
77:0f:65:11:5c:01:2f:c4:36:73:03:e0:18:21:a6:
a3:28:26:cc:b4:0c:b5:2c:d1:39:fd:ec:20:d7:15:
2b:0d:b5:e3:1c:ee:28:71:6e:45:a0:f5:4a:40:32:
1c:39:f7:88:1c:89:a9:74:5f:67:ea:70:cf:d3:b4:
10:73:b3:84:3f:ca:db:5a:ca:49:4b:c9:53:e3:20:
89:04:1f:16:66:31:d7:4f:fb:6e:38:72:36:75:75:
ee:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9F:98:5E:44:56:4F:5D:80:07:90:C0:BC:61:B0:DA:A2:8B:BD:16
X509v3 Authority Key Identifier:
keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:10:40:7a:6b:b1:db:c7:eb:0c:14:06:ac:b1:f4:56:7e:02:
43:3f:6b:cb:f6:d7:1c:31:81:a5:74:1b:de:55:43:bf:81:ad:
8e:71:92:c5:2d:1e:bd:8e:e9:a0:e5:42:08:c2:68:49:20:b7:
65:84:23:41:0d:dc:0f:c6:7d:41:58:de:5b:69:b1:91:58:82:
2a:09:7d:a7:02:d8:41:3c:57:38:d8:c3:27:2f:2c:c4:f6:2c:
46:48:88:4b:d4:6c:48:17:94:13:f0:f5:a7:e3:b8:99:e6:49:
25:db:6b:63:1c:74:e9:d5:66:29:eb:95:23:82:5e:0a:db:fc:
e3:fd:6c:91:f0:59:14:05:fb:0b:9f:fe:cb:67:ee:18:39:71:
36:eb:09:2f:99:7c:81:44:ef:0f:23:f9:25:19:d5:72:b5:d3:
93:41:11:00:f9:62:bd:10:96:2b:9c:72:7b:a3:52:5f:62:1f:
5d:01:c7:ae:b9:45:ea:77:27:33:68:84:f4:2e:f9:16:58:0e:
da:4a:b4:08:f9:7f:fd:97:5a:35:b9:69:03:98:76:68:77:f7:
2d:c4:88:f6:94:ad:f5:7d:61:9f:5f:79:47:3d:23:8f:56:ab:
00:14:77:38:d1:13:a7:a7:a1:f1:d5:8f:f3:3a:af:1b:a2:91:
92:e7:34:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:50:06 2025 by rpki-client