Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
File: hEWCynBHF-sMlL5NiUE_S8LYuOU.mft (raw, json)
Hash identifier: cf7hfRhW6TeQjrCtzu5kalqoHA3IQOSP/3dY0SX1kWE=
Subject key identifier: 30:8E:7D:98:C8:EC:8A:9F:88:A4:07:76:F1:CE:49:1B:9B:6F:F2:31
Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
Certificate issuer: /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Certificate serial: 0194BC04AECC751E05D0C4DF8569871DED3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
Manifest number: 076D
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: CWu5dKrEuf-0nBCltKLJ6Qa-UyY.roa (hash: ykK1nj6nlxboFcnLj7DFZHuLWYTPt9DhUF2Ryrd0hQo=)
2: Yhx7BXYzTzzS5t_9FaN3gvqDvvU.roa (hash: 6o6oe2/9E1nYEVGVicr/zo6Y4uqUD4D2A8TAd6evSwY=)
3: hEWCynBHF-sMlL5NiUE_S8LYuOU.crl (hash: B9J/Lby+GsHHYZGnetGiBl/Y2o7g7hNFeaHk2qHV87E=)
4: ylQ_YVvSmjC4xYfDg6NlfrIxtJs.roa (hash: BS+LVNZet6aS5JWtp0wpo0XqwvlqhVLSQja2K9qhIAA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ae:cc:75:1e:05:d0:c4:df:85:69:87:1d:ed:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=308e7d98c8ec8a9f88a40776f1ce491b9b6ff231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bf:37:85:de:09:b0:af:f1:a5:73:cd:7a:11:
9e:ab:7f:d8:fd:0f:a0:68:32:bb:f3:8e:a1:0f:7b:
f5:09:d1:74:a7:e4:4c:72:4d:b3:59:c6:87:99:6b:
70:96:a6:96:5d:85:43:e6:49:6f:d8:af:f6:a8:01:
cc:11:79:98:6f:6e:7d:0b:93:ef:c5:53:11:0d:69:
4f:75:d6:93:7c:b9:a6:be:ec:3e:e0:b0:67:86:ac:
8e:c6:46:79:4c:a6:12:18:d3:13:57:a0:94:c6:bf:
8f:59:a5:30:22:66:23:93:5c:d4:c1:2e:86:19:0c:
65:be:19:67:e7:58:06:44:14:ea:93:7b:9b:95:a6:
e1:a7:fe:f7:1c:21:8c:c4:54:24:15:76:71:2b:71:
b7:c6:33:d6:ad:e8:5a:de:ec:ce:93:eb:59:e7:3f:
77:b5:2d:3d:12:8e:2c:36:7b:f2:e9:55:f5:a6:cc:
98:30:9d:fe:f5:61:9f:ee:fc:bf:da:74:62:aa:dd:
a1:7e:b2:b1:37:9d:d2:2c:d7:b7:17:05:72:5c:bc:
c2:1f:f0:d3:37:27:69:7c:9a:09:10:83:30:5f:3f:
09:01:5d:5e:32:26:ab:64:0c:48:60:0b:88:e9:66:
e2:72:17:86:08:19:ba:e0:68:d0:ff:ca:74:de:0d:
f3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8E:7D:98:C8:EC:8A:9F:88:A4:07:76:F1:CE:49:1B:9B:6F:F2:31
X509v3 Authority Key Identifier:
keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:76:8f:3c:d5:d9:51:58:6c:08:d5:ec:74:61:a2:19:66:e6:
66:b1:97:75:11:5d:9b:82:23:82:6d:b7:2d:49:22:8b:57:58:
cc:6e:43:68:a0:49:98:e3:ab:d2:c9:5a:fc:65:89:76:d0:12:
45:6e:8d:e9:99:65:12:f7:5c:61:9e:0c:11:73:82:31:92:da:
62:7d:1c:c2:5f:c0:8b:88:a4:31:dd:11:dd:18:f0:8e:40:3f:
fb:18:f7:3c:ed:a7:cb:c0:f8:8d:ff:48:db:2c:58:52:e9:81:
0e:32:59:9c:17:2a:0a:8f:36:8d:c6:93:4f:3f:47:8f:af:5b:
26:b4:a4:da:6d:5d:9b:d3:d4:3d:84:5b:2a:71:f9:44:0a:ec:
c3:65:b5:bf:74:df:bc:7e:86:8a:fd:cf:53:42:de:2f:98:c0:
fc:41:d1:11:2c:7a:f5:14:05:8d:9b:a2:23:19:94:ce:94:d0:
66:ea:4e:85:d9:83:47:06:d8:9e:31:49:da:dc:d7:c9:8e:50:
d3:ff:92:78:a9:58:3e:fd:99:ed:af:83:e4:00:43:c7:88:b9:
b4:a7:83:c4:ac:a2:99:0b:ee:68:c8:4b:42:82:40:7c:bd:c9:
8d:a1:b1:61:f4:7a:1f:a1:4f:35:97:28:14:fe:fe:86:f0:44:
b2:a3:26:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:14:35 2025 by rpki-client