Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/49e0d3-771c-4ebf-9abd-8dc98796b2d6/1/8UvUnWWzx5Arf9WjNpTNMb2GBuc.mft
File: 8UvUnWWzx5Arf9WjNpTNMb2GBuc.mft (raw, json)
Hash identifier: q4ND+i7R+VY9tSxe+wNYgN96r+Dn+h7qnVHsxl1P4h4=
Subject key identifier: 3F:85:AC:0F:9F:E2:E8:90:17:24:67:15:DC:1D:FB:B6:97:82:1F:87
Authority key identifier: F1:4B:D4:9D:65:B3:C7:90:2B:7F:D5:A3:36:94:CD:31:BD:86:06:E7
Certificate issuer: /CN=f14bd49d65b3c7902b7fd5a33694cd31bd8606e7
Certificate serial: 018BEBBF36ADA7E6090DC868EA5CF76D0BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UvUnWWzx5Arf9WjNpTNMb2GBuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/49e0d3-771c-4ebf-9abd-8dc98796b2d6/1/8UvUnWWzx5Arf9WjNpTNMb2GBuc.mft
Manifest number: 0870
Signing time: Mon 20 Nov 2023 08:00:58 +0000
Manifest this update: Mon 20 Nov 2023 08:00:58 +0000
Manifest next update: Tue 21 Nov 2023 08:00:58 +0000
Files and hashes: 1: 1-cZAnUWmhYJT7vOaOuOxkTWOdfk.roa (hash: BTPW9QUwWucbIWFIY1K1pWpIwWXE8Xobam01mgE83Wg=)
2: 8UvUnWWzx5Arf9WjNpTNMb2GBuc.crl (hash: XHH/JhQXTrzhZhXC58Z92PeEs/PS0jvbTimrPCVTImU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:eb:bf:36:ad:a7:e6:09:0d:c8:68:ea:5c:f7:6d:0b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14bd49d65b3c7902b7fd5a33694cd31bd8606e7
Validity
Not Before: Nov 20 08:00:58 2023 GMT
Not After : Nov 21 08:00:58 2023 GMT
Subject: CN=3f85ac0f9fe2e89017246715dc1dfbb697821f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:76:70:f9:58:6f:86:48:a9:ef:e6:fa:32:b8:
7b:87:b2:f5:30:83:e7:68:37:71:95:82:5e:18:c5:
07:09:34:d3:e8:25:61:20:c2:4d:98:ab:14:f2:6c:
d8:f7:01:79:64:cb:3b:f0:0d:48:d7:a5:8d:69:aa:
00:9c:84:05:54:06:e6:ce:49:37:9b:f1:2d:c5:f7:
1b:0c:59:87:9c:5f:b1:51:6f:1c:a3:17:63:1c:53:
65:11:ae:76:20:c5:11:12:99:a8:66:37:40:23:e5:
0b:3a:3a:31:25:00:e3:2f:24:55:4b:e3:81:53:30:
b4:87:37:75:89:78:fb:58:57:70:cc:70:8a:ed:78:
a6:45:03:db:ec:ba:b5:ae:25:22:cd:a5:d4:cd:df:
6a:07:51:55:b7:35:04:00:7c:30:23:de:ff:e4:68:
cb:0e:52:4b:15:66:14:56:53:10:49:af:40:1f:21:
60:a0:26:ce:e4:b5:70:4c:aa:9e:56:88:8b:a0:0d:
fa:92:7e:3e:8a:21:c0:f2:eb:6e:15:46:d2:80:d0:
8f:20:b1:ee:3e:b3:01:fd:33:bd:2a:84:c9:77:b2:
d1:90:42:c0:ac:a9:35:2d:1c:c9:a5:8b:ca:9d:52:
6c:c2:2d:e3:c8:c8:01:6b:c1:5e:8f:90:dd:a0:e6:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:85:AC:0F:9F:E2:E8:90:17:24:67:15:DC:1D:FB:B6:97:82:1F:87
X509v3 Authority Key Identifier:
keyid:F1:4B:D4:9D:65:B3:C7:90:2B:7F:D5:A3:36:94:CD:31:BD:86:06:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UvUnWWzx5Arf9WjNpTNMb2GBuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/49e0d3-771c-4ebf-9abd-8dc98796b2d6/1/8UvUnWWzx5Arf9WjNpTNMb2GBuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/49e0d3-771c-4ebf-9abd-8dc98796b2d6/1/8UvUnWWzx5Arf9WjNpTNMb2GBuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ad:ad:83:aa:6d:c0:52:fa:8d:67:f9:03:de:ab:33:4c:bf:
77:20:75:dd:e0:c8:f9:ba:ba:a5:a7:26:28:f9:0e:3e:96:e0:
b4:c6:5b:db:92:eb:dc:da:fb:c0:09:54:e6:a4:b9:d5:57:6d:
30:14:48:d2:d5:10:5a:02:25:87:d0:d8:d7:01:24:93:1a:b3:
af:36:2e:1b:e0:cc:14:0a:00:3b:cb:ad:b7:ef:78:81:10:b7:
9f:4f:67:3d:8b:11:4b:36:c5:4a:59:ba:ea:84:a7:99:9d:4a:
cf:db:33:26:74:37:c8:1f:aa:0c:fc:ca:ae:28:19:69:2b:af:
41:ae:be:01:40:fd:3a:70:d6:e0:12:2e:99:80:ee:7a:f6:de:
95:8c:72:da:ec:8b:10:11:1c:93:2e:d1:8d:f5:4c:a4:df:ec:
25:dd:d6:41:05:d1:af:70:46:df:78:1e:c3:7f:3f:39:b1:9a:
40:b4:e7:f1:8a:15:cd:24:71:ad:8e:5e:46:af:08:0c:0f:7f:
97:3f:5e:0d:f1:ab:b2:d2:9c:27:c5:db:a2:78:13:01:da:72:
2f:0f:fd:49:62:24:ed:72:dd:99:24:32:8e:e6:bc:00:9a:08:
44:72:c1:1b:29:88:da:ad:62:5a:97:a0:24:55:9d:20:ce:49:
01:b4:fd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:29 2025 by rpki-client