Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
File: Hay9x9yHS9i-Izb1Znzfd72YDHc.mft (raw, json)
Hash identifier: ni2t/2fRHQYcg/Ugpqxphk/f6Cx2iaet6viFeBLr1DI=
Subject key identifier: 68:1A:B4:8D:B8:18:81:1A:31:78:4A:DB:19:E9:F0:EC:35:94:02:77
Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
Certificate issuer: /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Certificate serial: 0194BC3BD5333252FD05E2E278025CBA1EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
Manifest number: 0678
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: Hay9x9yHS9i-Izb1Znzfd72YDHc.crl (hash: 2+OD4aeFR2dFCHBlvNvl5/DdldusqG/0/JlwMcZNoZQ=)
2: KwnSHUkKazWxA-UlGNkJfBx24J8.roa (hash: L00uKvypQvr4qR3XRikAa5NG4pJ2Ay5tML7IJ1FMIbQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d5:33:32:52:fd:05:e2:e2:78:02:5c:ba:1e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=681ab48db818811a31784adb19e9f0ec35940277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e0:cb:fa:6b:9e:12:9e:12:6f:f8:90:44:e9:
cd:47:cc:90:76:42:1c:5b:a8:9a:f6:b7:3b:1e:ee:
47:c2:50:72:08:41:98:7e:0c:2f:88:ff:2e:92:39:
04:07:b3:e1:32:a4:96:19:bd:c8:30:ae:97:b7:54:
88:cf:d2:c8:1e:92:f5:61:52:11:74:cb:22:9e:60:
e2:73:f7:1c:3f:1c:46:25:c2:cb:5f:9c:9d:ce:4b:
a2:ab:12:84:91:f3:88:95:09:57:f2:08:aa:8d:3a:
bc:50:c6:63:ef:25:87:59:3b:d2:16:b3:07:a6:fb:
24:21:89:ce:8d:a0:c2:09:4f:5d:ec:be:dc:da:a1:
e2:bd:53:d6:dc:34:6f:dc:f3:3e:e7:1b:6c:75:dc:
03:20:eb:4d:0d:c1:35:94:0b:02:75:a8:b4:8a:ff:
66:0b:c1:64:6b:94:da:19:49:a6:0c:87:ee:33:55:
7c:f6:47:fa:23:8d:b9:d5:8a:ff:b4:7a:e5:6f:8e:
60:ff:a6:d3:32:5e:dd:47:6a:00:c7:51:86:71:e1:
b8:bf:bb:18:73:a9:31:21:e2:19:fe:61:39:1d:2c:
80:93:6d:68:9f:f3:21:6c:d6:d4:9e:c7:df:89:10:
22:ce:90:95:0b:05:ac:0c:94:40:f4:4b:2a:dd:56:
f3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1A:B4:8D:B8:18:81:1A:31:78:4A:DB:19:E9:F0:EC:35:94:02:77
X509v3 Authority Key Identifier:
keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:00:96:53:e1:03:07:d4:9c:91:a9:67:01:b2:00:4b:f4:33:
b7:bb:4c:4e:7d:a1:39:d5:5f:62:e5:85:83:61:ce:96:ce:c0:
b0:79:ad:e7:d0:82:3b:15:30:cd:2b:49:45:28:4a:0f:44:e5:
8f:df:14:ef:a1:a7:11:6a:66:74:fd:c2:35:35:ab:7d:96:cd:
77:78:40:dc:ba:5f:a1:00:b9:60:b2:c2:4a:fc:95:bb:b6:fc:
d9:3d:2b:b0:7b:ab:d6:9c:4f:0d:08:77:f7:2e:8b:e1:73:ff:
c2:12:95:cb:e5:c0:8e:4c:16:88:37:d7:1a:4d:69:ec:e7:96:
de:45:bb:7f:88:06:8d:f6:d6:98:d8:4b:9c:e8:4c:d6:20:85:
d2:77:6a:66:d2:5a:ea:ea:63:be:6b:93:bc:1e:1b:61:1f:56:
0d:c0:6c:ea:6d:fc:d2:61:38:09:04:c0:30:b2:b9:0c:59:e8:
37:7a:91:07:b3:0e:31:5f:35:24:b6:d4:b3:e3:5a:95:eb:6a:
cd:b5:87:3e:c0:17:ba:80:63:42:bb:a9:b6:5e:27:7c:f6:68:
da:0c:55:44:78:99:aa:ff:f3:26:60:41:ec:da:e6:ab:df:68:
cf:9c:34:de:87:33:c5:a0:b2:22:d7:8c:79:6c:16:78:ce:15:
ba:0a:d0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:36 2025 by rpki-client