Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
File: hGlcglEp42VKUIs7xSn-Ols4ObE.mft (raw, json)
Hash identifier: Vcdh2yUK2hc+owwohYTHvOgi51FjXvYH1z/Gs2ECbI8=
Subject key identifier: 7A:25:53:DE:BA:BA:51:C5:A6:0B:AA:FD:06:88:D6:F7:A0:24:15:E0
Authority key identifier: 84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
Certificate issuer: /CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Certificate serial: 0194BBCE8F5AB9F46414BEABEBBDE3FCBE3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
Manifest number: 0F7B
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: DLIEmy-lWsyrr-sd36twYuEevio.roa (hash: aUcurTUu0ie7YyEr+ll+2DTq3WZheC8vTveKU2r56C8=)
2: hGlcglEp42VKUIs7xSn-Ols4ObE.crl (hash: thjEQIhJowyoQhry4zCvCUbM+EzKtYeKklb4VsjAYFM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8f:5a:b9:f4:64:14:be:ab:eb:bd:e3:fc:be:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=7a2553debaba51c5a60baafd0688d6f7a02415e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:af:0f:3f:ea:84:37:76:9f:37:ac:14:21:
c6:d6:ce:59:e6:29:65:d4:14:cc:ef:1e:d7:3a:20:
6f:8f:df:1b:75:dc:41:a2:63:6a:f8:c3:69:28:47:
63:dd:96:b9:c7:a3:62:f6:e1:2a:67:cf:63:fd:58:
e3:32:61:5b:ee:4a:8e:d0:26:81:25:b2:fb:cc:46:
ba:82:78:fc:ef:4f:cd:fe:71:8a:5f:e4:50:5e:77:
f0:76:81:63:6b:c3:5c:93:3b:a4:b5:9c:49:c1:48:
01:7f:09:f8:85:86:6a:55:4b:0d:45:27:fd:29:d7:
f1:0e:62:fc:10:9b:c6:4b:09:8d:ab:69:0d:5e:9a:
51:84:cc:48:f7:64:f2:38:75:2b:73:c5:b2:a2:3a:
14:5f:6f:fd:32:54:d5:ee:ef:91:84:8d:e0:c7:45:
3f:38:b3:e8:9b:45:1c:7a:f3:9b:79:e4:d6:ae:cb:
1b:1a:da:ac:cc:dd:53:2a:6a:45:ff:a7:78:26:1a:
57:9f:4e:0a:c2:da:43:53:b4:30:69:25:84:83:d5:
39:8f:8e:dc:4a:f1:10:95:09:fb:18:e8:74:2c:9a:
98:44:d7:30:d3:fd:5c:fa:36:0f:e5:91:df:50:01:
d7:73:1d:3e:7d:bb:03:b0:05:40:c0:74:44:37:2e:
dd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:25:53:DE:BA:BA:51:C5:A6:0B:AA:FD:06:88:D6:F7:A0:24:15:E0
X509v3 Authority Key Identifier:
keyid:84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8d:3e:90:e1:35:ae:93:f8:a7:ef:6f:6f:f5:50:b9:19:b0:
3e:72:ff:dd:cf:37:94:99:7f:e0:0d:ba:ec:c1:ac:22:9b:61:
75:5f:f6:6b:65:14:9d:db:5c:c2:05:2d:d2:15:25:af:39:c9:
a9:8b:a8:92:c3:92:d9:07:58:89:e3:86:3a:ef:c8:93:cf:e3:
64:d6:c7:48:2b:74:e6:f7:88:f7:bc:26:98:ed:19:76:3a:cb:
1b:4f:22:25:a6:6e:01:45:4c:24:bb:9b:d9:ea:5f:16:41:9d:
0e:45:54:50:b5:7e:ac:46:87:f6:06:05:d1:c1:5c:5f:20:56:
5d:3e:84:fd:f5:0b:d8:75:d3:2b:ac:80:6e:99:2f:7e:d2:ab:
70:e8:05:cb:32:0c:c2:39:9d:09:9e:5e:ae:44:86:e7:26:04:
bd:ea:ec:61:1f:3b:ee:35:15:a8:cf:1d:dc:6d:e3:da:61:14:
76:ed:36:f3:f9:08:ce:92:48:67:0d:49:db:3b:67:c9:c8:24:
be:3d:70:e6:e1:bc:c1:02:dc:d6:07:fb:89:bb:99:2c:b6:f3:
0a:9d:62:01:0a:bf:3f:78:92:8b:d6:19:85:cd:37:92:3b:1b:
fa:b5:ca:8b:eb:fb:35:5e:36:fd:05:f5:10:cf:40:3b:85:06:
54:e9:0f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:38:58 2025 by rpki-client