Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
File: mHyvDLazMBzAhKJdXCFBCpLKfjY.mft (raw, json)
Hash identifier: pf6m84QwoRWUpWne5Piw3gVFzeHm4QtKqRPzHOEBAIY=
Subject key identifier: 75:4B:0D:91:B8:A1:05:3A:77:5C:AB:AD:05:F2:48:55:99:07:AC:41
Authority key identifier: 98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
Certificate issuer: /CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Certificate serial: 0194BCE0E4426AD59D6B9D9801C6F57D3643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
Manifest number: 059D
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: mANtdvjrwJb7CPzwvDq9bTI0qtY.roa (hash: bxccQm8ZlD2A8QhBkFeAoasQeWmGc7036H8m3hd3seo=)
2: mHyvDLazMBzAhKJdXCFBCpLKfjY.crl (hash: 4M8HY8K0nUiLYaA7w8hXIRqnhMFcE7eUfvcGY06QgD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e4:42:6a:d5:9d:6b:9d:98:01:c6:f5:7d:36:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=754b0d91b8a1053a775cabad05f248559907ac41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:63:10:28:6e:7e:0e:39:21:50:4a:98:f2:
df:05:48:d7:84:9c:bd:4a:70:d1:33:53:48:64:6d:
f1:8c:e1:8b:ef:36:d0:04:e0:a3:e3:b8:4f:8c:90:
bf:99:01:cd:f6:2b:05:c5:87:7a:d3:1e:7e:b7:ed:
59:69:7a:fa:c2:68:d2:43:07:41:d5:8d:1e:c6:cb:
bf:a0:97:9f:72:8f:74:9d:92:bb:bf:89:8a:bd:27:
23:2c:cf:b4:da:8f:cf:d2:ab:2b:47:b4:69:4d:26:
a6:aa:7e:f9:f9:71:03:08:96:18:5c:cd:d0:d9:7f:
a1:24:57:f8:bf:03:85:07:93:e5:66:44:23:19:c6:
45:f9:fa:dd:ce:88:26:b1:18:1d:eb:0d:f5:69:8d:
6c:cc:33:47:52:c4:5d:d5:d7:2a:1e:bd:e8:30:de:
49:12:f7:83:3b:40:a1:b8:29:bd:3a:4a:0c:12:94:
02:c5:18:57:5d:0c:dc:99:6b:17:89:2f:dd:9f:10:
72:d7:ac:9e:3c:b2:22:bb:b3:c9:38:8c:88:60:fb:
65:63:d2:c8:6f:f9:54:75:92:d8:f6:67:aa:df:67:
3d:c4:d1:f1:07:2e:90:2b:41:c5:c7:65:44:22:ac:
f4:2f:84:84:c0:54:47:1c:9f:71:92:61:e6:dc:a5:
e1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4B:0D:91:B8:A1:05:3A:77:5C:AB:AD:05:F2:48:55:99:07:AC:41
X509v3 Authority Key Identifier:
keyid:98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0c:dc:03:a3:c7:aa:7c:fb:69:3c:f2:6b:ab:58:93:c7:18:
41:8f:68:d7:2a:69:a8:c7:5e:69:06:0e:1c:af:86:22:50:72:
c2:8e:ff:f6:81:63:1b:7a:d1:90:6c:0f:c1:b2:b8:84:2e:7e:
1c:75:c9:a7:c1:f7:84:58:22:9e:7e:9d:2d:47:25:5c:89:19:
8e:6c:6a:3f:7f:fe:3e:06:cb:12:d1:50:94:67:76:09:04:07:
75:6a:2c:8f:84:a7:1a:cc:1c:16:8e:da:7b:bc:6d:44:bb:74:
78:65:fc:d6:0d:81:d7:04:5c:4d:70:6c:ae:06:37:e6:aa:9e:
0b:6c:1f:7c:5a:bf:fa:6c:71:0c:b0:7c:d2:73:a0:0d:ce:70:
98:46:ff:73:ab:e1:9d:fc:08:34:3f:46:44:09:db:8c:b5:72:
36:40:2a:c6:e6:bf:13:1c:2e:9d:f2:07:5f:1f:71:16:7d:fb:
dd:f5:b4:fb:48:af:16:28:a3:0c:38:a5:75:e6:dd:e8:0b:13:
ad:54:ea:f7:45:61:21:3f:2f:d4:50:96:7f:1a:f3:f9:c8:bf:
03:e7:f8:20:e2:56:12:3e:55:aa:54:93:3b:42:68:27:34:39:
af:f0:3c:da:80:41:06:43:e0:49:e2:1d:72:6a:b3:8b:20:9c:
cc:97:03:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:05 2025 by rpki-client