Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f5d671-adee-4e78-ae22-9b38607f4e3e/1/8o0Q_wDnpGPvx_unzU1ERv5q1ng.mft
File: 8o0Q_wDnpGPvx_unzU1ERv5q1ng.mft (raw, json)
Hash identifier: gg1QUwnZUmzdfWSe/owkoUTYILPpbMYA5GQPlPlAjVc=
Subject key identifier: 3E:27:60:93:E6:0B:BE:EA:CA:29:53:BD:50:CF:12:7D:2E:94:36:0B
Authority key identifier: F2:8D:10:FF:00:E7:A4:63:EF:C7:FB:A7:CD:4D:44:46:FE:6A:D6:78
Certificate issuer: /CN=f28d10ff00e7a463efc7fba7cd4d4446fe6ad678
Certificate serial: 01927ACED47A4F9B6EB97886079C284831EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o0Q_wDnpGPvx_unzU1ERv5q1ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f5d671-adee-4e78-ae22-9b38607f4e3e/1/8o0Q_wDnpGPvx_unzU1ERv5q1ng.mft
Manifest number: 0C2A
Signing time: Fri 11 Oct 2024 09:00:28 +0000
Manifest this update: Fri 11 Oct 2024 09:00:28 +0000
Manifest next update: Sat 12 Oct 2024 09:00:28 +0000
Files and hashes: 1: 8o0Q_wDnpGPvx_unzU1ERv5q1ng.crl (hash: A2XKoM/1lLQcGa0hnsE1X83TZFf0CZXEc+uEtfnRRxk=)
2: gZhx7dNobYr7E3TmJ0UmEzsguPg.roa (hash: Qmd1BtYihqQUSCvrnakC73wMbuQChvntibrdq8qLl08=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7a:ce:d4:7a:4f:9b:6e:b9:78:86:07:9c:28:48:31:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28d10ff00e7a463efc7fba7cd4d4446fe6ad678
Validity
Not Before: Oct 11 09:00:28 2024 GMT
Not After : Oct 12 09:00:28 2024 GMT
Subject: CN=3e276093e60bbeeaca2953bd50cf127d2e94360b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a7:4e:d7:08:8f:08:cd:2f:ec:46:84:bb:bc:
72:a8:16:1a:c4:08:4d:b1:f9:2f:24:ab:d6:11:a5:
d3:89:6e:fc:ff:5d:f8:e6:b2:54:21:e3:d8:a3:08:
b5:d5:2e:69:25:84:41:11:c2:13:97:23:99:57:0a:
79:16:9b:42:e7:1c:b8:86:b4:ba:41:3b:9a:b8:35:
3c:40:27:87:4f:73:e3:1f:3c:93:6b:77:3d:b7:e2:
18:1d:38:98:47:d5:49:17:aa:8e:2e:16:46:08:ea:
89:dd:e2:19:f1:0a:f6:22:e4:30:78:60:18:62:cc:
70:40:0b:3b:bc:32:56:50:a3:01:c5:88:b9:ec:56:
25:ee:25:1e:78:00:81:49:7a:70:4b:0f:f1:13:31:
48:aa:e5:b3:57:14:85:61:de:e6:1e:db:3f:6a:91:
d0:a6:be:43:77:29:75:a7:23:9e:f9:96:4d:e6:0c:
ed:b2:af:1e:82:cd:55:db:67:42:96:ad:14:b2:75:
df:8b:a9:f6:07:9d:ce:c9:48:bb:e6:a1:83:20:98:
ef:64:2c:30:4b:c9:c1:3b:78:ac:a0:e2:53:b1:a2:
55:21:7a:9f:ec:96:06:cc:67:66:26:84:40:61:b3:
32:f0:97:29:26:e9:78:1e:56:1d:50:c5:ce:8d:63:
2e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:27:60:93:E6:0B:BE:EA:CA:29:53:BD:50:CF:12:7D:2E:94:36:0B
X509v3 Authority Key Identifier:
keyid:F2:8D:10:FF:00:E7:A4:63:EF:C7:FB:A7:CD:4D:44:46:FE:6A:D6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o0Q_wDnpGPvx_unzU1ERv5q1ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f5d671-adee-4e78-ae22-9b38607f4e3e/1/8o0Q_wDnpGPvx_unzU1ERv5q1ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f5d671-adee-4e78-ae22-9b38607f4e3e/1/8o0Q_wDnpGPvx_unzU1ERv5q1ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ff:a5:d4:50:27:56:16:93:0f:4f:69:41:cf:4c:93:82:5e:
e0:32:0a:6b:2c:c4:5f:a4:21:4c:0b:1a:a5:e2:a2:a9:46:ce:
92:84:48:48:7f:b3:ad:f1:84:72:70:9d:d7:15:83:07:03:13:
e5:21:11:11:7e:58:61:92:8e:96:20:d4:f2:b7:d3:e9:18:a1:
c1:4f:82:d8:41:6e:48:9e:8a:7a:dd:e1:d9:a7:a9:20:d2:f5:
ec:f5:2a:e4:cc:63:12:37:b3:e9:13:dc:8d:3a:3f:e6:7f:87:
12:c1:ca:64:bc:f7:79:22:f4:77:c1:8a:5c:27:e5:95:ea:d9:
a6:df:97:18:d6:61:a3:c8:f5:4c:9b:83:c2:b1:a3:4d:f7:6a:
bf:6b:44:ce:6e:c8:be:7c:7d:6d:eb:7a:5e:1b:3b:f4:8b:41:
a0:e9:33:a6:3b:ef:6f:ee:df:e9:38:96:b6:5b:d9:56:88:1d:
10:81:be:13:42:cb:7e:07:49:df:af:ac:92:15:be:be:c0:bd:
96:f2:99:ba:a6:8f:fe:91:8e:f0:04:08:1b:62:66:da:7d:0b:
bb:ac:03:0e:ef:15:ac:38:c7:2a:19:b0:f6:5b:96:9d:1c:cb:
87:16:fc:dc:58:f7:43:e0:61:cb:23:96:e3:8f:9f:8a:48:9a:
4e:48:79:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:34:36 2025 by rpki-client