Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
File: hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json)
Hash identifier: jvWcjVjYi9TEIWk0Uav7cbu+2ItybZkcf+dp2MTuIxk=
Subject key identifier: 24:3F:9E:1F:7B:96:1B:29:F5:AD:80:5B:C2:C4:B7:E4:7E:89:E3:53
Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Certificate serial: 0194BC04BEE819270058650D95735DEDCAC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
Manifest number: 13F9
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: 0IcMola3+k7fTnyO01NzVbpqlclxmvzbQyKa/M9z59o=)
2: t2I34y0ofKpembvBe1b_-CyvIM8.roa (hash: mSrCvo09CP/j+cfORar+o3HK77VwUvlajzCQ530vifA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:be:e8:19:27:00:58:65:0d:95:73:5d:ed:ca:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=243f9e1f7b961b29f5ad805bc2c4b7e47e89e353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7e:f4:8e:00:77:44:19:e9:bb:46:bd:51:82:
a9:54:6f:10:7f:17:9f:8c:10:7a:6a:96:4b:00:da:
42:6c:6c:8d:a8:15:97:0a:d4:8d:72:59:68:12:c4:
35:02:fb:4b:92:5a:be:c1:84:72:1d:65:3c:28:c0:
05:c6:fa:e4:90:e7:b0:17:b8:cd:d6:96:c2:08:e6:
35:4d:df:51:af:cb:e0:e9:3a:08:09:c5:d1:9d:4b:
d2:08:62:6c:23:cb:40:ce:04:76:cd:af:5c:0d:cf:
35:04:af:a9:eb:de:17:64:1d:be:71:62:9a:3d:91:
cc:45:ba:de:cc:5a:45:40:88:bf:0a:1c:52:6c:cd:
92:e1:fa:74:b0:bb:50:f0:6e:a1:1d:74:91:59:77:
4e:4a:8b:ae:b5:de:1f:2a:ab:0c:e8:19:6c:35:e0:
aa:2b:99:3c:4a:34:ee:d4:ee:3a:85:aa:ae:39:6b:
79:b0:fa:aa:24:e2:55:32:96:ad:3b:23:5e:47:7d:
81:e3:d0:e3:15:78:8a:c8:f8:3b:28:4a:b4:7c:89:
50:e2:19:aa:50:88:a3:c8:1e:51:bd:10:27:c6:6d:
27:fe:43:e2:d5:a3:71:cf:89:e3:97:49:25:9c:07:
e9:fb:81:9b:dd:11:5b:39:db:17:e1:88:c8:2f:a5:
bb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3F:9E:1F:7B:96:1B:29:F5:AD:80:5B:C2:C4:B7:E4:7E:89:E3:53
X509v3 Authority Key Identifier:
keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:24:4c:06:b5:b6:b4:d0:bc:5a:d7:2a:d5:fe:37:91:63:00:
6e:7a:90:96:f7:bb:bb:e5:af:71:51:18:27:2a:1f:cf:d0:52:
50:bf:db:ab:cf:83:43:6c:3d:fb:c9:66:01:45:db:a4:34:48:
68:67:64:1e:ab:9b:96:d1:1b:5f:6d:5d:48:e1:6e:20:b0:75:
a3:73:d4:3d:7b:46:41:2c:39:2c:40:76:44:59:fc:01:5e:28:
77:35:6c:14:3e:0e:b9:0e:c1:0b:8e:86:56:02:a8:f3:b3:72:
44:2c:7e:3d:5b:d6:81:81:ec:ef:f7:6a:6e:90:46:94:18:66:
79:ce:e1:53:09:29:15:e5:9f:e0:63:ab:2d:f9:96:16:12:aa:
f0:d4:ad:34:9e:d9:40:e1:24:d9:13:09:b4:4a:a7:43:b0:6b:
bf:b7:5b:96:9a:35:37:1a:2f:5e:73:aa:d0:83:16:4d:ff:f1:
89:25:f3:1d:e8:dd:56:ed:a6:7f:60:c9:54:5c:b8:cd:99:d6:
e1:84:0b:9d:fe:42:78:17:74:1f:78:e8:83:4a:ce:46:6a:db:
3c:d9:4b:20:3e:63:17:e8:19:10:c1:1e:93:f1:f1:1a:21:a8:
b6:ff:3a:6e:7c:66:10:cb:4e:99:c2:31:8f:e4:08:3d:3e:e5:
1c:8d:81:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:53 2025 by rpki-client