Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
File: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft (raw, json)
Hash identifier: YbeV+i/LvA3BDoe58KCrgplX+7ia5omk/7bPhcvjHrA=
Subject key identifier: F6:93:18:B5:F0:DB:ED:A6:FA:6A:66:2B:A7:4F:3C:6E:D0:35:85:61
Authority key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
Certificate issuer: /CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Certificate serial: 0195E046EEF3709E10124335B84A14F65750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
Manifest number: 031D
Signing time: Sat 29 Mar 2025 05:01:39 +0000
Manifest this update: Sat 29 Mar 2025 05:01:39 +0000
Manifest next update: Sun 30 Mar 2025 05:01:39 +0000
Files and hashes: 1: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl (hash: B5p9f3AH2hIsgrV0eRee2I5PFMKQ5rdKAuWG4DAEmkY=)
2: i40en23OGg_DEWIRxhMGmgEox1s.roa (hash: iWUkdAfgE1mLIKUO/1DuqvBR2l5IncPfNwSFVOKSJKY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:ee:f3:70:9e:10:12:43:35:b8:4a:14:f6:57:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Validity
Not Before: Mar 29 05:01:39 2025 GMT
Not After : Mar 30 05:01:39 2025 GMT
Subject: CN=f69318b5f0dbeda6fa6a662ba74f3c6ed0358561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:90:b7:4d:a5:ab:a1:b5:a0:37:7b:ed:78:
8e:e2:2b:99:fe:54:b6:92:3f:88:00:2b:f4:ca:08:
61:e2:9e:0e:5b:82:c9:f4:79:06:14:6e:c2:30:74:
ea:4e:3c:d8:29:e8:7f:27:d1:e3:d0:81:5e:35:9c:
82:a8:d3:75:7e:e1:ad:63:22:25:46:75:c4:2e:ee:
40:ea:c9:78:08:d6:91:13:21:c1:ea:70:7d:66:8d:
73:43:8d:22:94:a8:96:8a:67:6e:89:e7:1d:9f:79:
5d:c1:2b:ac:4b:8c:24:d5:fc:91:95:ca:e1:5a:10:
21:6d:74:2e:22:2e:71:7a:00:95:67:11:ea:98:5d:
a0:d2:d4:4d:13:fd:0b:c2:4b:49:2a:dd:6a:b7:10:
6d:79:8a:e3:96:bb:76:46:63:62:4b:92:c5:44:ff:
87:7f:91:b9:a6:96:65:d7:90:2a:e3:1e:d4:84:e2:
5e:6b:d1:a8:56:80:c2:80:2d:c4:1c:14:06:e6:61:
ba:5c:ab:74:bf:64:4b:9d:a8:5b:19:99:f4:7c:27:
a3:be:0a:2d:f0:37:36:e4:28:65:24:f0:54:fe:29:
64:38:91:2c:89:c5:5d:b5:83:71:db:e6:7a:96:0e:
6d:00:f6:37:15:78:fd:60:b3:6d:e4:3e:1b:f6:55:
67:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:93:18:B5:F0:DB:ED:A6:FA:6A:66:2B:A7:4F:3C:6E:D0:35:85:61
X509v3 Authority Key Identifier:
keyid:F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c2:6e:6b:4d:fd:9a:39:63:de:d0:b1:e3:27:33:55:95:8b:
bc:76:6e:23:cc:2c:a8:c8:57:47:b9:3b:f5:1c:bc:b2:19:70:
34:ab:cb:3b:62:da:e3:67:8e:f8:b1:d3:fa:0c:c1:64:85:e3:
be:62:99:f5:0e:4d:54:20:2c:59:72:37:c3:aa:48:c1:0d:be:
21:9e:d7:50:26:57:f8:3f:e9:4f:91:7d:15:f4:38:ec:68:f7:
10:26:9e:d9:be:bf:f5:7d:a3:57:f9:2e:81:6c:a2:a8:59:e9:
81:3a:27:dd:f6:ac:52:cd:40:42:68:ae:98:f4:c0:d7:1f:ce:
36:51:ab:06:89:c4:d9:dd:a8:cd:30:d8:d3:91:6f:c5:a5:06:
f7:b7:ff:d6:48:f2:fe:be:c8:a8:40:66:82:95:9d:f6:a0:fe:
01:ea:9e:c6:fc:f1:3c:57:8f:16:55:73:29:2c:d6:e5:dd:bb:
5e:32:ef:36:cb:16:f9:a7:81:01:ce:8a:f7:b3:66:5e:c2:2f:
13:68:45:67:a3:bf:d6:07:1c:b5:da:53:3c:de:d2:c5:74:ec:
67:b6:a5:54:41:30:7d:30:cc:65:58:17:db:72:13:e9:f6:8b:
a9:fd:ca:e4:3c:44:05:90:89:5d:89:60:9f:00:60:2f:2f:f5:
b9:5f:27:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:37:58 2025 by rpki-client