Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json)
Hash identifier: eaIec7kXIBxItPtTvtxd21oRQU5ZFwvlnLi70HNqMPE=
Subject key identifier: 14:9A:B6:BC:54:6D:C8:0B:1F:84:48:BE:5C:1F:EF:75:0F:FE:26:F3
Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Certificate serial: 0194BC3C4DB5A5993309C427F04D26DE6F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
Manifest number: 118A
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: 2-EWeyDof1gs1UXEMD1lZZEw63s.roa (hash: z23ouPdaISiuPb4TFlEiuytYryYuZhpuF1K4d2C9fgs=)
2: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: 8Naxbg24RHsEGKUap2id38FkQcKwrityDdAbjMsfd/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4d:b5:a5:99:33:09:c4:27:f0:4d:26:de:6f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=149ab6bc546dc80b1f8448be5c1fef750ffe26f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:11:54:65:72:e4:fb:2e:10:16:2c:90:a7:6b:
48:fe:de:f1:f1:56:8a:40:d0:62:65:33:42:ee:b1:
bd:c3:2e:74:dd:c7:ce:38:4a:ff:db:fd:66:14:c1:
c9:83:af:c0:a5:5f:cd:71:04:a5:49:dc:8b:3e:00:
b9:75:67:bf:5b:ff:ba:95:e5:6e:64:06:0a:2e:13:
67:f5:ff:30:7f:b0:6b:94:45:9f:96:7d:6d:98:11:
29:57:63:a3:45:35:da:84:70:59:60:3f:39:74:4b:
c8:bf:fb:cb:03:d5:4d:3b:69:da:e8:06:6c:3d:5b:
1f:0a:d2:79:50:8b:f9:37:35:23:04:fe:7a:ce:01:
10:5f:51:de:46:be:d3:b4:26:80:16:36:a1:f3:42:
6e:7d:33:9d:21:5f:d7:09:67:ca:fa:e1:04:9d:b8:
3f:20:44:81:fd:a9:ad:e1:b9:88:f0:d8:7d:6e:79:
68:e7:f0:30:52:35:fc:a3:c4:13:00:5b:2e:2c:99:
cc:ec:d7:06:19:0f:d5:f6:90:ee:8f:7b:45:93:3b:
dd:3e:f0:86:93:c4:d8:ae:53:b1:bb:94:c9:df:eb:
43:17:f6:a4:fa:e2:e6:9e:a9:64:4a:e6:61:f3:67:
52:80:3b:68:e9:d3:3f:ab:56:ab:23:65:77:88:a5:
c2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9A:B6:BC:54:6D:C8:0B:1F:84:48:BE:5C:1F:EF:75:0F:FE:26:F3
X509v3 Authority Key Identifier:
keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:60:db:3a:92:ea:50:21:cc:0d:35:78:7d:33:e6:93:9c:b6:
47:43:8e:59:e2:5e:31:6b:04:9a:a6:73:de:c3:59:e2:8b:5c:
6a:42:c0:4a:57:51:79:ab:a6:f1:28:67:6d:6d:7d:48:8a:af:
bf:bc:0c:5f:33:a4:eb:41:33:30:16:f3:23:d4:c0:87:d9:99:
a6:5c:61:ae:47:49:5d:ea:a5:24:85:48:5d:08:ca:f9:f4:86:
b1:a7:26:fb:d4:a5:4f:f5:a6:aa:02:17:0b:d9:94:e8:7a:9c:
03:d8:40:eb:37:4c:fd:6b:ec:11:90:31:40:33:e8:13:b4:24:
f3:80:47:42:69:c2:d5:37:d1:0a:df:55:aa:64:88:1d:97:81:
9d:8d:6a:c5:43:b1:59:60:64:a5:2c:a7:d6:0f:68:92:ca:3b:
09:14:a3:15:26:ed:a8:65:8b:80:2e:4f:f7:29:3f:e5:c9:8b:
78:37:27:98:c2:c1:0b:ee:c4:ae:f5:9e:22:b8:5e:22:65:d1:
af:09:57:db:5f:85:c9:73:cf:fc:30:f1:1e:b4:79:3c:a1:bd:
55:c3:24:f9:df:a9:d3:9e:b4:c4:cc:83:a4:00:b7:30:4a:31:
12:be:ea:3c:52:9e:ec:7e:2f:c5:db:32:45:db:6c:29:c2:52:
58:e0:19:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:35 2025 by rpki-client