Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
File: hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json)
Hash identifier: SWB1/NP2xYoLgGiwJX3yIQLrRt5OMzET5TgxscZf0h4=
Subject key identifier: 95:29:65:E3:49:16:2E:18:D9:1A:B8:72:98:BA:1D:92:31:B5:D0:E4
Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
Certificate issuer: /CN=84a69fc568894cb3985edef22216bd99974de251
Certificate serial: 0194BD4EC2BAD4CC46402000982A59F09D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
Manifest number: 10F4
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: gTuMJj4zNk4inmWeuwHt2oopg5M.roa (hash: zopPOsMBU8dt9Dr0i+LUD1TPbnQUzJ4uDKxUzfrnRiY=)
2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: 164ivOLqSnTuDuDXxeqj4lUmRptqij8tEbKpKTnwvZ8=)
3: rnwY-7oYw6V-trqxlfGxfeIKZIY.roa (hash: Yep0/R2aV0HSvC5J3JSqbOslIcQ/KKdPdI5bChqi8Qg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c2:ba:d4:cc:46:40:20:00:98:2a:59:f0:9d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a69fc568894cb3985edef22216bd99974de251
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=952965e349162e18d91ab87298ba1d9231b5d0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ae:f3:83:33:5d:fb:ff:59:ba:04:87:83:fa:
13:98:4a:7e:ba:1c:9a:4c:68:ae:f9:47:ad:5f:51:
fa:26:b0:36:a3:d5:56:c6:df:2e:14:c2:a8:84:1e:
c6:8c:c6:dd:63:5c:61:2c:f2:b1:18:bb:b6:fb:fd:
7f:e7:95:a2:aa:48:ba:6d:2a:86:f3:1d:bc:b2:24:
04:b9:27:2d:c5:8b:c6:0e:82:22:25:93:a9:d8:58:
0a:52:16:76:f5:14:94:1f:14:b3:07:35:ee:cf:f0:
c1:9d:06:1f:04:0c:9f:7e:7e:1e:ac:35:96:ab:26:
4d:41:4b:85:0a:a6:fb:9b:10:e9:73:4f:35:fd:f3:
ae:b2:34:16:06:55:09:fa:74:be:5c:19:01:24:e8:
a1:f7:84:58:4f:21:3a:ad:c3:3b:f5:68:97:72:1c:
3a:b1:6c:33:01:70:7a:1d:23:b9:2f:ea:db:e2:1c:
fa:61:b4:70:41:30:5b:b1:35:b7:d4:2e:fe:13:6a:
46:64:6b:c8:8d:42:dc:58:56:9c:88:b6:38:da:3f:
b3:d4:c3:d6:03:88:d3:1f:59:9a:1c:0b:9d:2f:2a:
b2:98:e7:75:e1:00:5e:06:a3:4f:82:89:d8:1b:3d:
fc:74:09:2d:89:b5:42:a4:52:10:5c:4c:f3:ac:81:
32:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:29:65:E3:49:16:2E:18:D9:1A:B8:72:98:BA:1D:92:31:B5:D0:E4
X509v3 Authority Key Identifier:
keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e3:85:48:c3:c2:aa:24:f4:84:20:e8:6e:ab:09:42:1e:82:
15:9e:bb:d9:cc:52:74:28:5b:6e:ca:13:0f:41:e4:ce:41:ee:
af:23:73:80:ae:79:ef:95:cd:0e:63:77:5e:7f:a3:24:47:ad:
c4:a3:40:92:51:73:fd:61:dc:ea:81:e9:80:25:82:36:48:88:
3a:26:97:7d:fe:02:bb:2f:8d:03:93:93:41:f2:8d:0c:d5:4d:
27:39:f8:69:9d:a1:a4:f0:d5:66:a2:ee:d3:dc:e1:c8:50:b6:
54:f5:92:51:5b:71:bd:80:29:43:d7:5d:33:3c:15:5e:bc:7a:
b4:59:ad:cc:78:48:8e:53:ae:29:93:22:89:e4:e2:f0:69:54:
ba:79:5a:4c:a6:f6:0c:d2:7a:60:48:ad:97:94:a8:0b:93:c5:
f2:6d:13:78:62:72:8f:61:6c:18:8a:0d:86:01:67:59:ba:84:
fd:5d:e2:99:4f:20:64:4e:fe:b3:00:10:ae:dd:83:0b:d3:f5:
42:a0:8d:f9:ea:80:6c:fd:a2:18:89:18:ce:45:79:02:3d:4e:
3c:2c:a3:6d:97:82:da:6e:47:0e:d9:c8:9d:5f:d5:8f:96:d5:
85:73:45:cd:8c:a9:85:73:b7:c3:c9:35:95:90:7d:41:42:bd:
3c:69:22:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:35 2025 by rpki-client