Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0122eb-d367-42b5-a365-5df1872193d1/1/8AmooJT8jrJNxgxn1fEotXrVfkM.mft
File: 8AmooJT8jrJNxgxn1fEotXrVfkM.mft (raw, json)
Hash identifier: 3H/XXC0w3ZaLAjzCnkyHLztsvBxIt3T7CalkZOI46cA=
Subject key identifier: AC:32:19:7B:DE:87:19:D0:A4:B5:B8:34:2B:9D:94:92:E3:70:A0:F1
Authority key identifier: F0:09:A8:A0:94:FC:8E:B2:4D:C6:0C:67:D5:F1:28:B5:7A:D5:7E:43
Certificate issuer: /CN=f009a8a094fc8eb24dc60c67d5f128b57ad57e43
Certificate serial: 0195651B7DD64E34BAA2EB64BFA1F8DF9FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AmooJT8jrJNxgxn1fEotXrVfkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0122eb-d367-42b5-a365-5df1872193d1/1/8AmooJT8jrJNxgxn1fEotXrVfkM.mft
Manifest number: 027B
Signing time: Wed 05 Mar 2025 07:00:55 +0000
Manifest this update: Wed 05 Mar 2025 07:00:55 +0000
Manifest next update: Thu 06 Mar 2025 07:00:55 +0000
Files and hashes: 1: 8AmooJT8jrJNxgxn1fEotXrVfkM.crl (hash: ca7g7Ap0zy5L04ozPC0ZRNcmmawTPXyAaUxLPWS48CE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:65:1b:7d:d6:4e:34:ba:a2:eb:64:bf:a1:f8:df:9f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f009a8a094fc8eb24dc60c67d5f128b57ad57e43
Validity
Not Before: Mar 5 07:00:55 2025 GMT
Not After : Mar 6 07:00:55 2025 GMT
Subject: CN=ac32197bde8719d0a4b5b8342b9d9492e370a0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d1:68:58:b2:e9:df:73:65:37:da:a2:d4:9d:
6e:bb:0d:6f:ab:c8:ec:fd:f5:61:5f:86:bb:08:c4:
36:b8:85:07:d0:87:0a:f6:01:f9:80:26:e0:08:73:
ee:57:45:e9:cd:5f:7d:4f:43:f1:27:db:f1:24:88:
26:b1:75:d1:fa:0e:a7:39:80:65:61:ff:a9:ab:19:
e1:e8:64:7c:28:2e:36:b9:dc:d4:d7:73:43:4d:1e:
97:a9:46:31:f7:54:e7:81:4a:0a:f5:4a:31:32:c3:
63:3e:59:bf:e8:ab:ee:4b:91:db:0e:18:a7:28:8e:
ca:b7:64:6a:ab:b1:07:38:f8:c1:bb:b1:5c:8a:0e:
37:d0:05:c1:d4:9b:25:30:3a:3e:0d:0b:96:90:ad:
f0:aa:bc:fb:08:66:7a:f0:91:c8:c5:e4:b9:7f:c7:
ab:7e:96:f9:ef:87:a5:64:9d:54:ff:f8:1c:42:40:
14:ef:cf:be:24:5b:9b:f3:91:22:22:a0:47:da:77:
a6:7a:91:62:78:94:e9:56:a1:4d:3d:19:05:45:0f:
47:4c:78:fd:4f:5f:7d:41:8e:2f:25:a4:92:e5:77:
41:44:cb:42:e8:18:a4:8c:09:f5:e0:52:09:31:ea:
1c:38:f1:2f:f1:4f:8f:8e:73:37:dc:ea:67:ce:3b:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:32:19:7B:DE:87:19:D0:A4:B5:B8:34:2B:9D:94:92:E3:70:A0:F1
X509v3 Authority Key Identifier:
keyid:F0:09:A8:A0:94:FC:8E:B2:4D:C6:0C:67:D5:F1:28:B5:7A:D5:7E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AmooJT8jrJNxgxn1fEotXrVfkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0122eb-d367-42b5-a365-5df1872193d1/1/8AmooJT8jrJNxgxn1fEotXrVfkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0122eb-d367-42b5-a365-5df1872193d1/1/8AmooJT8jrJNxgxn1fEotXrVfkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f6:c7:eb:fe:3b:8b:db:69:67:cd:f5:12:45:95:03:32:96:
a8:35:9b:aa:4a:b9:82:4a:07:7a:cd:79:e1:da:42:04:e8:13:
14:3e:8f:20:b2:39:4d:a6:43:89:92:0b:2b:85:4a:03:b8:e1:
64:6f:ff:84:de:34:8b:52:d5:9f:b8:3a:d4:5c:7f:a6:b1:26:
e3:56:2f:eb:14:eb:cb:58:e9:00:f8:7a:c2:4d:a4:09:9e:42:
a0:9f:22:ca:ea:c8:b0:00:3c:5e:31:dc:99:df:ba:2a:c5:1e:
32:8a:70:35:90:b7:35:62:48:81:ac:b8:a5:4f:89:5f:8d:44:
eb:a9:b1:81:ad:95:d8:2b:05:55:e2:28:6d:ae:d6:89:1e:10:
96:d3:72:04:9a:d0:49:1e:c5:cb:f8:3e:fa:61:01:16:13:1e:
bd:53:49:20:41:91:d7:65:d1:24:4d:08:b7:a0:e6:c1:8a:47:
38:91:34:8a:95:1f:9d:1d:72:36:5f:b8:26:60:59:c8:ae:73:
32:6c:53:26:e7:2d:0a:6b:1d:fa:a2:dc:67:e9:7c:4f:15:8e:
af:90:a6:ff:03:71:5e:f4:4e:4e:3c:58:b1:10:77:6f:2e:10:
bf:6e:38:4d:0e:b9:de:07:5f:b7:34:7b:1c:67:40:72:e1:db:
a3:47:74:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:38 2025 by rpki-client