Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json)
Hash identifier: MRwFKwMs21I3dckSix2BygFdUmroWBwR8bFwM1G38/Q=
Subject key identifier: 84:C0:55:96:08:B9:FE:42:36:ED:BC:1E:49:37:6A:15:ED:67:F6:87
Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Certificate serial: 0194BD17C408C02271005C4214FFA9D5CFD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: fY3YUzeQR4J5mSVlYztPydyoN5Q.roa (hash: mNZawaVbKUAZ9lV1chbhqIOQeYk5Gz7JPB6mT6lLW4o=)
2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: XDx7+dMgs+DRqMBPx1Y0PycN4ppc7j3e4VoobeL1qAA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c4:08:c0:22:71:00:5c:42:14:ff:a9:d5:cf:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=84c0559608b9fe4236edbc1e49376a15ed67f687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:77:d8:5d:d4:b0:5e:d4:b4:9d:17:6a:f0:12:
51:71:c3:18:88:dd:a9:96:53:e4:5f:64:2a:23:e5:
48:be:7e:6e:32:d3:5f:7a:77:6d:a4:b1:ff:56:c0:
ce:5c:09:56:3c:a9:a9:c6:55:10:fa:b5:66:c2:9f:
f1:ad:b7:7e:fb:b2:8c:43:d1:d0:20:3c:6c:60:c0:
8d:67:6d:ec:e7:5d:1b:5b:8e:8c:8c:d0:94:96:59:
4a:92:c8:87:3d:1a:e4:b8:b8:29:b8:3a:40:df:27:
7e:25:aa:a9:83:57:b5:75:fd:cc:56:30:62:67:94:
07:57:e3:c9:fb:a6:30:30:93:15:df:f0:e3:08:4c:
08:ff:95:3a:7b:1c:49:b8:04:87:6c:ff:6b:16:3e:
1f:92:21:46:de:cb:3d:1b:38:73:7d:a6:84:bc:80:
df:92:c7:7f:45:c4:42:90:89:8d:9a:dd:62:86:bc:
7c:c4:8a:5e:15:3a:95:24:73:71:b8:04:c0:74:f4:
65:29:65:a8:0a:a9:f4:cd:24:d2:b3:80:29:cb:8a:
59:04:e0:63:3a:92:cf:61:cb:13:e4:d1:64:71:1d:
ca:37:7a:00:8f:1e:6f:7d:43:bf:34:bf:4c:ee:dd:
c7:2d:4a:69:19:3b:ef:36:6a:e9:a1:47:7c:a0:22:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C0:55:96:08:B9:FE:42:36:ED:BC:1E:49:37:6A:15:ED:67:F6:87
X509v3 Authority Key Identifier:
keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:9f:06:88:6a:fb:4b:93:ca:39:9b:44:c1:b9:b9:49:37:2d:
69:bc:42:64:f4:f9:64:ca:f3:92:f6:62:62:13:6e:24:c2:8c:
8f:f4:05:dc:8f:da:57:32:46:8b:d9:30:27:9e:69:82:47:0b:
76:a3:ef:55:f8:d0:63:d8:84:55:bc:cc:96:77:90:a9:ec:12:
c6:d7:24:26:3c:80:65:24:08:1f:2a:1d:57:cd:09:fc:f4:51:
0c:53:d1:a1:18:2d:24:7c:53:3c:8d:cb:69:84:59:77:a2:af:
a1:8f:b5:bd:a9:34:fe:b9:67:1d:90:9c:1a:b9:4b:61:9a:57:
61:65:1a:8f:b2:d2:ab:a0:6e:77:b0:c7:a5:84:41:1a:f6:55:
05:b7:57:38:ce:66:de:1f:16:a1:97:74:48:b4:22:52:46:88:
a2:e2:bb:58:5c:c1:f7:4e:bb:72:e1:9b:13:48:a5:de:57:4d:
d1:45:7e:07:a5:ee:8e:49:79:3b:ed:2a:96:ca:2a:47:a5:0b:
27:80:0c:61:7f:24:44:32:b0:2d:af:c5:ad:0d:3b:60:fe:c4:
25:e7:f5:45:65:6d:98:44:6e:40:d2:f7:ed:93:f1:7f:b7:4f:
78:30:fb:28:5c:6e:19:bb:58:f2:8e:9c:05:b4:ef:31:66:7d:
ff:82:08:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:14:37 2025 by rpki-client