Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
File: 8DqRN3TbyeYF3BerI6BaFoA5jeU.mft (raw, json)
Hash identifier: 73kw8I20BrKKGUCT4yyAVDF4CwAM2rTzHvdNRVo7Hlo=
Subject key identifier: A8:0E:89:35:5B:75:95:74:AB:A8:13:56:D3:1E:01:D8:51:C0:2C:EF
Authority key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
Certificate issuer: /CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Certificate serial: 0195E158E828961B8E0A5B084A1B18CF89A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
Manifest number: 0885
Signing time: Sat 29 Mar 2025 10:00:54 +0000
Manifest this update: Sat 29 Mar 2025 10:00:54 +0000
Manifest next update: Sun 30 Mar 2025 10:00:54 +0000
Files and hashes: 1: 8DqRN3TbyeYF3BerI6BaFoA5jeU.crl (hash: Vy+RS2Uksy8ZW7uAi569w8HTKb6Dd+3B1tfxj0DwexE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:58:e8:28:96:1b:8e:0a:5b:08:4a:1b:18:cf:89:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Validity
Not Before: Mar 29 10:00:54 2025 GMT
Not After : Mar 30 10:00:54 2025 GMT
Subject: CN=a80e89355b759574aba81356d31e01d851c02cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:56:83:41:ec:b1:85:da:47:f1:ba:5a:b4:
23:c1:e2:fc:f3:0c:34:cb:42:56:fb:f7:55:22:0b:
ab:76:73:65:c9:34:94:2f:e3:1f:9f:5b:f7:78:30:
be:68:9a:5d:23:90:2b:7a:ea:d0:2a:1c:55:10:2c:
4c:a9:ea:2d:e1:aa:19:d8:55:3c:95:bc:ee:4b:26:
f6:20:b5:51:e6:b0:e9:ea:4f:8c:b2:62:39:a2:3e:
39:37:b7:17:ee:3c:fc:1e:5c:89:29:8c:01:71:8e:
39:de:60:55:91:d1:e7:3a:d6:7c:d8:5c:ca:f0:4c:
9f:76:2c:34:76:3c:0c:8c:9d:35:b4:e8:15:90:a6:
fe:1d:0d:aa:cd:c5:b1:11:b1:b4:61:35:cf:35:83:
6c:19:d2:ce:08:3b:94:3f:83:87:30:4e:1c:20:d4:
b8:12:4a:96:35:0d:ad:d8:67:20:4d:08:70:d3:b6:
b9:f7:b9:b2:a9:d8:d9:6e:8d:cb:85:7f:51:b5:50:
38:36:cc:bb:00:c4:cc:18:fb:48:d5:56:02:11:0e:
fc:b0:1e:6c:80:f5:a4:bc:aa:ae:a0:5c:12:97:e2:
44:16:54:51:b6:36:7b:b8:86:d6:aa:5e:e1:72:40:
83:fa:37:e6:3d:1c:83:be:00:29:8a:b7:ef:0b:67:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0E:89:35:5B:75:95:74:AB:A8:13:56:D3:1E:01:D8:51:C0:2C:EF
X509v3 Authority Key Identifier:
keyid:F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:39:34:b8:c2:f3:27:15:46:1a:4a:04:2b:2b:c5:fd:d8:7e:
e0:06:65:35:a1:d6:c0:89:04:ab:3e:a7:01:0d:10:cc:d9:ee:
20:c2:47:d6:07:a4:b7:85:56:06:e6:b1:76:ce:0e:6c:25:95:
84:8a:9d:ea:f9:81:db:58:db:9c:76:a8:43:48:50:60:d0:32:
08:29:92:4a:de:38:18:96:dd:84:d4:aa:59:90:73:d8:fa:34:
60:16:f4:21:3f:18:90:ee:9f:2d:fd:a2:b1:b3:b8:58:81:14:
93:56:27:7d:8f:9b:13:a8:d7:7d:bc:56:69:16:96:b3:e8:12:
6a:96:3a:4d:99:99:a6:8a:3d:d3:cd:72:b7:40:30:7d:a6:48:
c3:a8:ef:ca:a4:03:d7:8c:dc:38:4d:c4:55:7c:7c:f5:1c:77:
30:04:4b:50:60:c2:c7:cd:37:25:58:ab:57:a1:4c:61:28:6c:
a3:35:83:1b:83:b6:e0:15:a1:34:54:eb:0d:14:c8:46:ab:6c:
40:c9:72:9f:3b:d4:70:08:10:cb:34:8d:c9:07:af:f1:60:44:
36:f7:70:4b:0f:1b:15:cc:03:84:f3:2d:1f:39:63:53:76:42:
34:a6:a0:56:ac:d6:bc:67:2f:ba:8c:23:ef:04:8c:82:c7:76:
10:7f:ee:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:57:03 2025 by rpki-client