Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/dc0c2f-b193-4d0f-8f72-4cbdd25711ee/1/8DQsOtktr9k43DUXJYW8NBtlIBU.mft
File: 8DQsOtktr9k43DUXJYW8NBtlIBU.mft (raw, json)
Hash identifier: clgmbPr6Sj/DAHwEUU6I0AcCLIXdf1YatSYij12lDP0=
Subject key identifier: 3F:2C:EC:6A:A1:A8:7F:0E:7A:48:4A:7F:02:0B:E2:15:80:7A:3C:0B
Authority key identifier: F0:34:2C:3A:D9:2D:AF:D9:38:DC:35:17:25:85:BC:34:1B:65:20:15
Certificate issuer: /CN=f0342c3ad92dafd938dc35172585bc341b652015
Certificate serial: 0194146FBD89C39EE0B7FB8062E84A9D21BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DQsOtktr9k43DUXJYW8NBtlIBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/dc0c2f-b193-4d0f-8f72-4cbdd25711ee/1/8DQsOtktr9k43DUXJYW8NBtlIBU.mft
Manifest number: 04
Signing time: Sun 29 Dec 2024 22:00:54 +0000
Manifest this update: Sun 29 Dec 2024 22:00:54 +0000
Manifest next update: Mon 30 Dec 2024 22:00:54 +0000
Files and hashes: 1: 8DQsOtktr9k43DUXJYW8NBtlIBU.crl (hash: ngfYDeDTl53XVK5FPXlb8BaTB6JrrBq6CMstQraphHs=)
2: Kl-ughv2EmEhIB3ahgtxYE-Dyck.roa (hash: s3YU4qAoE5xTiqhN9Ug+LjJ5tNJHF9/+LZpP2G0x/kw=)
3: pdtMvZqQaBtPcrRVy9rMMi04XPg.roa (hash: X33ybAT/dDXUsU5fqt1oxHmIz5vfrEfl3OaqMLXfG9I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:14:6f:bd:89:c3:9e:e0:b7:fb:80:62:e8:4a:9d:21:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0342c3ad92dafd938dc35172585bc341b652015
Validity
Not Before: Dec 29 22:00:54 2024 GMT
Not After : Dec 30 22:00:54 2024 GMT
Subject: CN=3f2cec6aa1a87f0e7a484a7f020be215807a3c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:0b:d3:93:d7:36:53:4e:1b:93:ae:d0:53:
51:f0:db:53:43:91:6d:8d:3d:7f:49:c7:e6:eb:ab:
cc:57:07:a4:e6:63:a7:fc:7b:25:dd:00:07:28:e3:
84:09:b4:c0:9d:f5:a6:e0:ec:09:3c:0e:44:3b:c4:
2a:26:a2:7e:67:97:15:66:3e:e1:45:67:eb:5e:89:
2c:b1:79:1d:cc:65:2e:34:37:ce:22:45:3d:78:e9:
91:6e:3c:ec:6c:12:88:21:db:d4:de:3a:89:15:22:
89:65:e4:40:7e:93:c2:29:a6:3f:5a:8d:25:b5:dd:
a7:9c:b4:dc:a4:90:d5:7c:b1:55:22:03:f4:58:ab:
a6:50:33:71:72:41:67:23:4c:25:07:e1:4c:ab:fb:
d6:ef:15:ea:df:05:7d:07:ea:58:ed:75:4f:1b:fa:
2c:26:e9:e1:cb:27:9b:7e:6f:f5:9f:ba:98:9e:c4:
7c:e9:88:a1:0e:81:d4:bd:c9:79:75:24:36:95:77:
ce:2a:0a:be:22:cd:f3:03:23:27:a5:ac:36:ea:56:
70:d0:50:95:ed:f8:a8:d3:ff:31:1a:05:c7:a7:0a:
5d:a0:2c:a0:eb:ca:b7:a1:f8:77:05:f1:e2:18:55:
7d:8a:71:28:ee:3c:95:aa:87:19:bf:04:71:f1:11:
f6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2C:EC:6A:A1:A8:7F:0E:7A:48:4A:7F:02:0B:E2:15:80:7A:3C:0B
X509v3 Authority Key Identifier:
keyid:F0:34:2C:3A:D9:2D:AF:D9:38:DC:35:17:25:85:BC:34:1B:65:20:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DQsOtktr9k43DUXJYW8NBtlIBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dc0c2f-b193-4d0f-8f72-4cbdd25711ee/1/8DQsOtktr9k43DUXJYW8NBtlIBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dc0c2f-b193-4d0f-8f72-4cbdd25711ee/1/8DQsOtktr9k43DUXJYW8NBtlIBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f7:2d:20:84:05:6d:1c:15:a4:e7:dc:b0:47:ed:19:c3:88:
e0:a0:47:40:f3:4b:6a:70:1a:95:b1:e4:99:14:dc:e3:5d:4c:
b6:dd:70:60:83:00:00:36:0d:1a:cb:9e:e7:4e:0e:02:77:ce:
87:f8:d5:6d:83:2b:69:d4:c9:1f:63:d7:5d:e1:5a:84:b1:44:
05:59:6c:24:13:32:2a:31:d9:16:a3:4d:11:08:04:58:bd:27:
ce:28:3a:39:da:d7:46:5e:6f:d1:89:c3:29:c8:37:e1:ef:09:
dd:fb:75:e5:96:97:e5:cf:c3:1c:59:8c:d3:e0:42:f4:4d:a1:
1e:c7:03:8b:0c:97:74:47:1d:94:c8:0f:3d:b0:d1:a0:cb:f6:
c8:88:c0:d9:37:33:5e:3e:94:23:e6:46:ac:24:04:ce:e0:8a:
4c:c9:80:e1:07:a8:7b:b6:43:99:8f:2a:44:6c:ba:e8:2a:31:
ba:13:f0:76:18:09:85:3a:ff:da:76:87:d0:7a:18:3b:40:91:
2b:ac:1e:c7:95:39:89:aa:4f:63:19:07:b6:9d:5f:4e:f4:76:
7b:d7:e4:53:da:36:4f:5e:bd:ae:fc:01:12:59:1f:0b:1f:b6:
61:69:b3:61:38:da:72:6d:8f:e9:3f:a2:db:8a:d9:35:b6:45:
e1:67:0a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:22:54 2025 by rpki-client