Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
File: hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft (raw, json)
Hash identifier: h8z1FU+/5fe4drB+HB6RoUcbj1n+P6q60EBIryaxAL0=
Subject key identifier: 6E:C1:FD:60:B7:FA:CF:D3:BE:A2:5D:5F:21:12:7E:32:17:14:71:94
Authority key identifier: 85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
Certificate issuer: /CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Certificate serial: 0194BBCEE95CA7235BD32120FD8850DC5527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
Manifest number: 0C29
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl (hash: 3iM4evGcfW9gpsLtNiqG00wM+khm7PbOX6go/CGaDN0=)
2: lHldbm0YksaCuz9XIehAf5kRzB0.roa (hash: BN7mh6nrwtoaOUPVrCKlYMfyId9M155pIfSIqKbQaEE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e9:5c:a7:23:5b:d3:21:20:fd:88:50:dc:55:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=6ec1fd60b7facfd3bea25d5f21127e3217147194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:e8:0a:9e:30:b6:d7:2d:8d:a7:e7:f8:4b:
f5:dd:ef:2b:da:37:7e:3c:ff:f0:5e:1b:f4:85:95:
fc:c0:46:32:ef:da:dd:72:7b:f7:e7:24:a7:ba:7b:
d1:c7:52:03:c8:01:e5:f6:2e:a3:9f:72:8c:c4:e8:
89:5c:ed:57:0f:63:63:16:31:b1:b1:3d:0f:ca:80:
cf:53:3f:46:ab:12:30:21:d4:3f:0c:65:64:ab:d9:
59:80:dd:a2:3b:32:eb:96:9e:6b:6f:bd:47:28:9d:
fe:60:2f:75:81:70:22:92:fe:01:38:23:59:df:4e:
c2:bc:74:9c:10:d6:ca:c3:ba:52:b8:9d:76:3e:42:
be:51:8c:6a:b1:03:b8:51:10:e6:07:90:47:ed:d2:
3a:d9:e4:61:e1:5c:a6:df:b8:4f:91:4b:f3:d7:56:
15:7a:c7:fb:cd:c0:92:44:f6:3c:fb:92:a7:aa:54:
9f:a4:06:74:8e:c9:37:b7:72:7a:94:ab:12:81:2d:
ea:ca:ed:da:ca:cd:54:28:89:d6:f1:bb:a3:02:30:
14:08:3d:98:8b:52:f8:83:a0:1e:92:79:2e:15:92:
d7:01:8b:8b:6f:01:cf:03:a7:a8:10:66:1b:0b:7a:
ee:b0:66:c7:ba:08:39:c4:5e:cd:68:0e:b7:08:f8:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C1:FD:60:B7:FA:CF:D3:BE:A2:5D:5F:21:12:7E:32:17:14:71:94
X509v3 Authority Key Identifier:
keyid:85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:87:b5:8e:69:88:e7:00:d8:01:27:70:74:76:43:e3:72:b4:
54:7b:87:68:8b:f3:5d:04:7a:f2:57:da:8e:c9:e7:1e:5e:23:
ba:3c:93:e7:d6:33:7f:43:6e:a1:c1:ed:c6:fd:3b:a7:97:c8:
7f:93:58:a3:4f:be:70:2b:f3:c4:70:53:76:ee:c9:33:25:4a:
db:6b:e4:82:70:60:38:88:fc:e4:22:9e:a5:72:22:35:c1:7b:
53:ea:ee:d4:59:41:d5:ab:17:e4:be:7b:a6:8b:b7:95:3d:b3:
47:3c:da:36:4a:ac:de:4f:07:44:11:7a:4a:34:ce:3f:c0:dc:
41:a5:8c:4d:5b:a7:12:d3:84:25:91:69:76:c6:fd:5a:05:35:
13:d3:61:27:8e:0a:4a:88:2c:c8:30:5a:8e:c1:3e:f2:b4:60:
61:3f:14:8d:f6:a0:19:40:1d:be:fc:74:ab:79:e7:a9:ef:c7:
f9:1d:c6:5b:b6:59:9b:fd:47:a8:e8:61:c6:e8:4c:3e:a5:64:
f1:a9:35:0a:aa:00:6b:db:ef:26:a3:fd:6e:ec:11:f0:26:30:
47:53:5b:2e:bf:43:de:ab:02:d8:14:7a:67:9d:01:e8:ea:eb:
47:a3:ac:93:09:5a:55:be:cf:24:5c:52:a1:29:af:f6:44:d0:
3f:6b:9c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:53:55 2025 by rpki-client