Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
File: T_hs8z4V6kCJ2inip4gddG34Ju8.mft (raw, json)
Hash identifier: 41Cs9lc019OCRQ2tsUh/00yCv8odeFQ56ReQ1k4XnHk=
Subject key identifier: 5B:27:A4:03:E1:92:63:6B:F6:D8:32:5A:4B:02:DF:40:48:DE:AD:CB
Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Certificate serial: 0194BCE08522F4379435B833631B7623CBEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
Manifest number: 0D8C
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: T_hs8z4V6kCJ2inip4gddG34Ju8.crl (hash: 6GZCs/FDDgRd5HChvArjoUSvP42RXfNi265wx2K3hgs=)
2: g8aVgQMBCBvrswyPJiarAr7VpUM.roa (hash: 5HrRjfLYW0OBZJTQk2MmBVB6mxhIUJtfwo5zMV6ZrEU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:85:22:f4:37:94:35:b8:33:63:1b:76:23:cb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=5b27a403e192636bf6d8325a4b02df4048deadcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:27:72:d6:c4:6a:0b:0e:c4:f7:ce:e7:85:
ff:e0:66:73:87:68:c7:4f:f7:c4:70:1e:83:43:43:
23:37:9f:b0:81:a3:a8:d1:9a:0b:04:f7:ae:49:11:
23:5d:ed:00:a5:58:50:3e:45:1b:6f:92:94:61:2f:
60:28:c0:5f:4c:76:60:27:cc:d2:bf:21:ae:6a:77:
22:df:a8:d0:64:cd:c9:b3:2a:f4:a6:75:1a:bf:4c:
0c:87:a2:a7:7b:70:af:36:ee:25:14:b4:92:51:43:
60:0a:9e:9e:59:41:43:75:17:18:2f:31:13:f2:1a:
4d:97:2c:47:55:87:1b:2c:e3:c8:d2:54:cd:e0:e9:
eb:e8:db:09:fc:cc:2c:09:db:13:89:45:8b:3a:a8:
87:ed:42:25:e7:ad:00:db:53:8d:17:08:74:b2:53:
a6:4b:99:7b:2f:21:77:8c:1a:56:d0:0c:5c:3d:5b:
cd:7a:1a:c4:f4:b2:79:70:82:2f:8c:90:ac:a0:b5:
3b:95:90:89:12:07:c7:34:8b:e4:a3:f7:11:96:d2:
62:2a:c6:dd:ff:66:aa:3b:d2:6a:c4:8c:37:e3:c6:
7d:82:fd:27:f6:60:5d:70:bf:74:70:bd:c5:8f:f9:
2d:a3:4b:68:50:81:7d:c9:13:a8:cb:7f:df:af:62:
03:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:27:A4:03:E1:92:63:6B:F6:D8:32:5A:4B:02:DF:40:48:DE:AD:CB
X509v3 Authority Key Identifier:
keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:95:91:24:91:e5:d4:ad:e5:89:16:ca:8d:49:30:ef:1b:80:
4b:85:16:ff:59:65:dd:4c:14:81:5e:21:e3:82:75:35:95:99:
ab:c1:83:cb:aa:f5:12:65:22:02:25:9a:6c:fa:21:36:74:18:
b5:71:65:b0:36:50:51:2b:f7:8f:11:57:75:2e:7c:01:ac:a3:
e9:58:b1:e4:e3:e7:4a:cd:12:77:72:07:4f:f3:f0:66:42:24:
35:1f:f2:a5:4d:7f:ec:7e:3e:fe:64:a2:38:ef:de:76:f1:ef:
03:df:96:67:92:5e:79:9d:17:92:66:9b:86:2b:48:96:19:64:
9e:6a:be:59:49:94:df:79:6f:21:cd:7b:29:18:45:5a:a4:9e:
98:bc:03:dc:b1:8a:8a:c6:de:92:5a:44:be:c1:52:87:88:8c:
f0:76:91:f6:aa:55:5a:31:fb:51:69:a2:02:21:d2:1d:cb:56:
8e:ba:fa:71:27:cb:8f:94:ee:ac:cf:9a:4c:62:96:51:80:e2:
4f:e6:d0:1f:86:41:a7:9f:5b:aa:b2:e2:d7:9b:ae:69:82:c5:
59:1c:f3:f3:da:89:cf:fb:e2:4c:a0:33:a6:e3:1c:9f:da:71:
ad:73:22:bc:2f:f6:6d:a6:01:a6:8d:05:0b:0b:4e:ac:c7:7e:
05:07:cf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:54 2025 by rpki-client