Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
File: hEcK8NideFuhi6YX3Anj9yxZlvM.mft (raw, json)
Hash identifier: koYQWObar4WRvMits7Ul7mXnuOfYt3moIYrC3Tw+Bpw=
Subject key identifier: 86:9A:C7:C3:0B:DE:B9:E0:58:50:E5:F6:08:BE:C9:29:67:2B:57:31
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 0194BC3C16370F1E9547AD87838C8D6B2B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
Manifest number: 05B0
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: 4fCQs45eSbHPq-vF-L5L1G2QTpk.roa (hash: fDSQzvrv5i8EAdi5WmXe39XNcj1NZmgw2vD+I2bSTxw=)
2: hEcK8NideFuhi6YX3Anj9yxZlvM.crl (hash: dluigjSJttoHXgfH8sJ9y4a1TjiVB/R1QYmGxMSlL3g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:16:37:0f:1e:95:47:ad:87:83:8c:8d:6b:2b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=869ac7c30bdeb9e05850e5f608bec929672b5731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:0f:3f:ad:2f:48:03:c5:4d:a3:ea:d6:77:
1a:8e:4c:62:3f:70:99:ba:80:0f:ab:ec:9c:49:19:
22:09:40:41:e5:7b:c8:31:7b:dc:25:20:8d:93:8e:
20:1d:b4:b8:ad:7b:f4:6f:18:2c:41:ed:65:54:a8:
34:05:6a:b3:72:36:b8:00:0e:a7:4d:8e:7c:cc:50:
b6:8f:81:e9:02:c1:80:30:e4:d2:45:f5:73:7e:0f:
ba:a7:37:9a:e3:18:d4:a2:ae:02:a1:c4:c1:40:20:
fd:e1:02:e1:34:51:a4:96:f4:06:16:a9:d3:34:f2:
e2:e5:b9:50:f3:87:10:2a:27:b2:cf:19:b6:8a:4e:
c7:ad:25:24:b5:ed:13:d3:69:45:e6:5e:5e:68:6c:
80:91:cb:6f:84:bb:26:f1:77:51:20:1f:a4:e6:48:
2f:6c:e5:6b:43:c1:a9:45:19:d7:d9:86:9a:da:7d:
fb:96:90:af:1f:b2:af:79:04:1d:8e:c1:1e:8b:38:
3c:68:29:b9:e1:5d:0f:9f:13:62:9f:83:c7:04:98:
60:60:c7:46:f1:a0:a4:91:73:67:38:6f:75:83:ac:
c8:26:d3:0b:f3:03:7a:49:08:6f:03:cb:42:32:c2:
57:dd:f1:80:93:e0:dd:69:5f:0d:34:d3:b7:76:a8:
de:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9A:C7:C3:0B:DE:B9:E0:58:50:E5:F6:08:BE:C9:29:67:2B:57:31
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:46:ed:66:60:30:8f:da:ac:78:19:90:17:e3:5e:63:14:71:
90:7a:26:d3:21:11:15:75:1e:40:1f:3f:35:2e:fb:a1:5a:a9:
79:b2:af:84:4a:3f:5a:19:95:50:d6:f0:50:83:09:0f:57:94:
05:5b:9c:61:b6:9c:42:b8:4e:bf:a7:ad:d1:9b:23:b7:ba:c2:
d9:47:e7:1b:60:e8:22:21:ea:0a:ac:c7:e2:a1:37:10:ad:3b:
c1:d7:78:5a:f9:13:73:d3:27:fe:dc:4d:4b:65:6c:0b:8c:d8:
ac:52:73:0e:14:31:25:1b:8d:e0:fc:83:99:f8:f2:e3:aa:a0:
62:b6:b6:5b:fe:45:16:ea:7d:e3:9a:3d:3f:71:02:19:fe:d1:
eb:3a:33:8a:2e:be:90:5f:1b:45:21:fb:e1:92:9c:fc:9e:43:
c8:b9:c5:b9:14:96:37:88:36:54:5e:ec:a1:c3:42:6d:04:b3:
43:df:51:14:8a:c2:0e:71:2c:0c:23:ee:c8:9d:5f:50:4f:7d:
9f:65:94:36:3c:fa:6a:38:9c:80:86:12:ff:af:cd:b3:c7:97:
1b:c0:00:ae:ef:06:6b:1e:2a:d5:9c:45:db:ca:20:2f:e8:62:
e1:d3:5d:c8:9e:a0:1f:79:73:ff:5c:8e:67:d4:79:4a:84:92:
4b:59:b7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:57 2025 by rpki-client