Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/ca4114-2fb9-43d1-b528-032af836c172/1/hSOM5-r2mlui8JR7K6BTOUtFts0.mft
File: hSOM5-r2mlui8JR7K6BTOUtFts0.mft (raw, json)
Hash identifier: YDUZjQ/mECkof6S5DHMLRLRDUnoORdoBGmJnp0BpaqY=
Subject key identifier: FD:00:26:40:19:D4:26:CE:36:F1:F9:E7:8C:CC:C0:1B:C5:09:59:41
Authority key identifier: 85:23:8C:E7:EA:F6:9A:5B:A2:F0:94:7B:2B:A0:53:39:4B:45:B6:CD
Certificate issuer: /CN=85238ce7eaf69a5ba2f0947b2ba053394b45b6cd
Certificate serial: 0194BC04D68EA620EA207E4D9294E60F4373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSOM5-r2mlui8JR7K6BTOUtFts0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/ca4114-2fb9-43d1-b528-032af836c172/1/hSOM5-r2mlui8JR7K6BTOUtFts0.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: WlFkHZf-mGa6meWaQmN57qSrEtA.roa (hash: B5J0da5BqpBMDIf+RMe68Zm2sCoZIjqiRagoU19Nd+4=)
2: hSOM5-r2mlui8JR7K6BTOUtFts0.crl (hash: 8Cmxm+/Ea+BwTxS8L8hvKzIRM3yeht4QNBwCK2QVq9w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d6:8e:a6:20:ea:20:7e:4d:92:94:e6:0f:43:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85238ce7eaf69a5ba2f0947b2ba053394b45b6cd
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=fd00264019d426ce36f1f9e78cccc01bc5095941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:03:90:b2:a4:d7:4f:31:36:12:29:ac:34:33:
40:25:03:b8:5d:46:10:fa:3c:73:64:77:7b:3f:a3:
f0:c3:c1:7f:94:9d:4b:d0:1a:f7:c2:24:39:9e:c3:
b0:ef:6b:10:91:f2:f7:59:35:c9:10:d3:b3:ef:4b:
4e:c9:c6:99:b2:54:c1:97:7f:ed:80:45:af:6a:3d:
2f:ad:9e:e6:97:f7:18:a6:8e:37:11:2e:87:cd:f0:
2d:b8:b6:b5:35:f2:50:d5:5e:c4:4f:9e:98:70:6f:
69:f7:3a:59:a4:a7:e8:c5:1c:8d:a7:62:f1:b4:74:
ad:85:a0:3a:07:e5:06:e5:b2:74:c3:ce:16:bd:3a:
14:e0:bd:c0:ec:ae:4c:c8:b9:9e:6c:4a:32:d5:46:
b9:91:87:35:41:b6:0e:48:f9:65:20:1b:ff:d5:32:
d7:a2:d9:a9:fb:b0:a6:7e:98:de:9c:d4:3f:03:38:
bc:59:8a:c9:33:47:bf:ec:31:a8:f6:dd:73:91:f5:
43:de:2c:5e:77:a5:c2:62:c7:65:7b:91:8e:c8:e2:
52:b2:29:fd:1f:0d:d9:a6:bb:35:cc:91:4a:40:90:
f4:f0:85:4d:12:48:8c:67:36:55:00:e9:2a:9c:2d:
e3:13:a7:0d:7d:68:44:60:26:57:79:da:6c:77:35:
60:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:00:26:40:19:D4:26:CE:36:F1:F9:E7:8C:CC:C0:1B:C5:09:59:41
X509v3 Authority Key Identifier:
keyid:85:23:8C:E7:EA:F6:9A:5B:A2:F0:94:7B:2B:A0:53:39:4B:45:B6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSOM5-r2mlui8JR7K6BTOUtFts0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ca4114-2fb9-43d1-b528-032af836c172/1/hSOM5-r2mlui8JR7K6BTOUtFts0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ca4114-2fb9-43d1-b528-032af836c172/1/hSOM5-r2mlui8JR7K6BTOUtFts0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9b:bc:99:41:70:33:f8:68:a5:bc:68:0f:51:4f:c9:0f:fb:
b3:99:bb:90:f5:a1:2b:b0:af:f8:23:04:e6:95:79:51:1e:21:
39:a0:c9:5c:e3:cd:2a:63:42:4a:cc:1b:99:d2:ca:de:cc:6c:
b2:09:27:42:b9:8b:86:19:17:e0:c4:51:c2:9b:ab:5d:cf:76:
b9:1f:96:5d:b2:aa:76:19:83:96:09:8d:3e:ca:77:98:18:c3:
85:ca:d5:a8:69:7b:0a:e3:97:fd:5d:a0:58:f3:67:6a:d7:9c:
6b:f9:2c:d2:c2:4e:25:0e:46:44:57:0d:54:70:4c:76:be:f2:
fe:48:c3:52:e5:fe:7d:38:3a:84:7b:44:18:8d:a2:39:a0:a2:
6a:34:14:a1:0b:5a:d0:07:d8:48:ed:ca:1f:9a:17:cd:0f:57:
21:cf:fc:33:2b:d9:dc:e4:a1:9d:3b:27:af:51:08:11:2b:76:
a1:1d:85:9e:91:3f:8d:b7:f3:44:dc:dd:e4:0d:cc:70:75:b3:
4c:54:fb:6f:9f:90:35:7f:14:c2:6d:e7:b3:d1:dd:ea:c3:56:
0a:09:6b:0c:a5:b8:5e:30:94:5f:25:42:46:75:6e:0d:81:6e:
db:0a:f0:9e:fc:cd:27:33:ec:66:01:b7:99:dd:25:5d:3b:c4:
bf:4e:70:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:07:54 2025 by rpki-client