Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File: RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier: sxWOvNGi/6JiM98HmyHQl6a4VzquR7nUYN268ZzJdnA=
Subject key identifier: 4E:F1:75:A6:A2:6C:8B:67:56:39:1C:CF:20:02:52:A9:29:79:09:3F
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 0194BC72DF597BEBACD76DCBEBDB19282A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number: 0F28
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: 2V9yE_-2gPzUwYdccQgBOoOM18I.roa (hash: eOCHHWhfMlB35sI0btwTirM6dsTLjT95v8bNNnNalmA=)
2: NEq6MArjlQuQ-WIB1VyRrErjAd0.roa (hash: MidMhTk3ASBcuW3/c0/stqSyljlKyQu+afJNZt4dhek=)
3: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: hQowOVNzpWRL23yJkrVsifs0Z2FK+5yeUFj3Ex370Qc=)
4: T9enhqzdG5yQEOgWkABkrQAk6M8.roa (hash: SxiuxM/I8FF8zreMQuHoAzLYfdJRNYC8zGUE4C2+MUg=)
5: TpBonKzdgVHgS_Gy-DCcGH-ISN4.roa (hash: fc1S9Y933e/VnBvBlMJ607HkBmXbxqMq3az/lWDVmME=)
6: kaShJaLkR3B81NHQpcp6VAc_nlg.roa (hash: pqDRdBas3v1MNi9715+npvAM7Hsxyhh7JGLBbksQ+7E=)
7: ruSnsHIoRf__VNQdOlftIpOTYMo.roa (hash: a5VzTK9QuTb35mXak0y1htCjIoHxsPCRhBpuXgEnDy0=)
8: rzgytveLNvuOFB1P42grRqzKspo.roa (hash: /OYgIzhZx8IoJrXB+qq8SFzexdOd724xyqoUlN1FVag=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:df:59:7b:eb:ac:d7:6d:cb:eb:db:19:28:2a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=4ef175a6a26c8b6756391ccf200252a92979093f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:98:b6:27:98:2b:d0:70:99:dd:e3:7c:ee:
73:b7:a0:ce:d7:55:c8:33:e2:1f:e0:21:f2:a9:b2:
ce:a7:1a:e9:89:99:a9:11:de:27:fb:41:22:a1:8c:
bf:a4:40:95:f3:3f:70:98:f3:62:fc:f8:af:a4:e9:
62:2e:f1:22:ea:bc:01:0d:7d:73:93:82:1b:bb:29:
05:cb:d5:be:6e:27:45:d5:fb:d9:c1:79:27:04:da:
23:a8:1d:44:d3:c6:fc:b8:78:d9:ef:56:5e:96:0a:
0c:4f:30:3f:61:cf:1a:8d:cb:c3:2e:02:69:da:c3:
14:63:d5:62:72:cc:7b:c5:12:38:d9:8e:d8:85:d5:
a4:21:b1:46:08:d5:01:e4:f0:5d:e5:75:75:e2:52:
4f:f4:ac:f9:11:33:a5:5f:26:ba:b7:96:03:9f:39:
dc:45:e3:78:d0:10:98:4f:b2:c6:7b:85:d0:3f:5c:
a5:6b:e5:2c:9e:7d:3a:5d:07:25:b0:2d:5c:e8:13:
36:0f:be:41:53:aa:ce:cd:23:5f:e0:b7:31:0e:c4:
73:5b:41:5c:84:c8:3a:16:23:45:9c:d6:c6:1a:c0:
35:67:35:39:85:33:df:fa:49:4f:3e:2e:71:c8:16:
07:3a:8d:e6:d9:9d:0a:d4:69:5c:aa:76:72:d6:e1:
93:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F1:75:A6:A2:6C:8B:67:56:39:1C:CF:20:02:52:A9:29:79:09:3F
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9e:cc:b6:0d:5b:09:a2:9b:86:2c:98:d5:2f:9a:05:28:b1:
b0:c8:99:49:ac:96:99:6c:eb:eb:fe:92:09:f6:11:77:ab:17:
ad:5d:28:5a:6c:6d:87:83:e5:05:97:b5:69:fb:55:e7:1f:66:
68:56:e9:85:f0:6d:22:0b:0a:68:a2:07:f4:51:02:c7:a8:1b:
8f:69:58:6c:6f:7e:6c:bc:7f:97:c7:72:a7:8f:65:e6:f2:d9:
de:45:22:f2:ed:1b:44:7f:52:26:b7:01:be:a2:02:c6:c8:c6:
44:09:0c:f2:03:0c:c2:e2:5a:0f:78:b0:92:e3:2c:87:68:c3:
10:41:e7:ab:70:50:66:cd:9d:93:5f:53:bb:49:01:db:14:87:
20:ae:cc:4d:16:ad:21:8d:d9:8a:35:e9:3c:cb:60:f2:9f:8a:
f8:a2:09:d2:cb:47:13:44:01:a7:c6:95:5d:98:16:b2:24:aa:
e7:bc:a7:2c:f5:12:ab:53:c3:99:99:7e:7b:32:ad:29:a4:7e:
c9:05:0f:16:9b:89:8b:d2:25:24:29:dd:b8:5b:92:f9:b7:bc:
cf:0d:b9:a4:66:14:93:c7:6d:57:c7:ba:16:f9:9f:68:f6:86:
18:10:73:60:84:df:4b:d7:af:aa:65:ee:7e:2b:bd:9b:55:d0:
3e:fc:4a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:26 2025 by rpki-client