Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
File: hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft (raw, json)
Hash identifier: /ntGCgiXdinZojjDG301oSb2/fNYFck0DGyEBnRALhk=
Subject key identifier: 46:A0:4A:94:B1:BB:FA:72:45:1B:E2:A5:2F:F1:24:9B:A3:4C:0C:7C
Authority key identifier: 84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
Certificate issuer: /CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Certificate serial: 0194BCA97E1657142BC79B297FEF917F48FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
Manifest number: 0788
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl (hash: oZawFBsTmTr99pMhA1NkeXa80zLlzT+fdfvuvkeMiHo=)
2: nkA7CUcmlzAJuGx_3HjuUPjmAbc.roa (hash: FtjNcs/Ikv5rVNiwdDeOxS0oJdHrtBYVifsyHe4+WbE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7e:16:57:14:2b:c7:9b:29:7f:ef:91:7f:48:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=46a04a94b1bbfa72451be2a52ff1249ba34c0c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:66:82:9d:8d:9c:e9:1a:f2:29:f0:75:1c:
85:59:e5:da:85:10:bb:e5:dc:71:b9:28:df:68:85:
cb:f6:4d:ac:39:67:68:9f:f7:ea:b5:9f:3f:3f:70:
e7:75:db:1c:fe:9a:c0:d5:79:75:46:df:99:1a:da:
4d:64:93:47:8c:fc:92:6b:1b:c7:e0:c4:37:b0:fd:
5b:ca:ac:57:49:9d:2e:86:56:60:9d:06:47:92:6f:
75:5e:08:c9:32:ae:ec:71:a6:e1:65:3c:82:a5:04:
30:71:22:51:31:0f:9d:6d:42:a9:05:60:b2:e2:62:
be:19:b3:a5:f7:eb:94:13:5b:1c:aa:7b:cf:d9:8f:
7f:ae:0f:ef:18:63:f6:ad:3f:ec:26:f5:99:2b:02:
b0:5d:1e:e3:5c:77:23:80:53:46:62:26:e3:96:bc:
b4:83:cb:b4:51:5d:6b:56:99:22:9d:f6:91:6f:8c:
da:60:84:d1:c5:cb:32:54:25:e7:16:a3:e7:eb:1b:
83:af:2f:7c:9f:18:a1:6b:d7:f0:ae:4c:25:1e:30:
94:a2:c8:92:45:d2:48:47:05:2c:c5:95:d6:a7:d3:
32:e5:e4:03:77:d6:c0:bf:af:11:b5:f8:db:75:5c:
5c:98:aa:5d:6b:b5:ef:d3:43:94:34:e8:dd:9a:f4:
d0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A0:4A:94:B1:BB:FA:72:45:1B:E2:A5:2F:F1:24:9B:A3:4C:0C:7C
X509v3 Authority Key Identifier:
keyid:84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:83:39:0f:e9:d0:8b:79:73:09:e0:03:c1:4e:03:32:7f:97:
f0:26:68:a0:d8:72:73:02:01:b9:1c:fe:2f:ca:23:98:48:2a:
9d:96:73:8c:95:6f:a7:c8:4b:39:cb:39:c6:f6:af:e5:fa:cf:
85:16:9a:b6:cd:4b:15:af:42:ea:67:bb:e4:8c:a8:73:d1:a7:
7b:54:f9:77:fa:d5:72:ee:0c:05:34:80:ef:6a:9b:98:24:11:
5c:8e:a7:99:4b:6c:aa:65:dd:a1:af:10:6c:40:69:47:21:e7:
ce:56:7c:c3:39:5f:f8:eb:61:f4:61:0a:4e:32:e4:4c:ee:c2:
e7:0a:91:bf:9e:98:86:5c:66:20:49:7d:70:97:18:b7:ab:a4:
ee:62:b0:f5:e6:82:75:60:2d:06:c4:36:ac:d1:01:c4:c0:db:
b9:5d:f7:f4:f7:02:1e:67:0b:a6:07:64:cd:69:11:c8:a6:c5:
82:22:d8:6c:ed:bb:13:3d:61:10:18:54:a5:99:78:26:06:81:
cb:16:c0:10:36:31:f8:59:e5:e8:02:10:b8:0c:31:fd:c2:c3:
36:90:ff:a2:38:ba:5b:e4:64:2c:a1:5c:75:49:7d:3b:e7:09:
c4:d9:74:09:98:b2:12:b4:c0:b7:86:43:e8:5f:4c:1a:ba:63:
ba:86:56:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:18:04 2025 by rpki-client