Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
File: hH0b6-TCPEIXuE9_2BkqslVUFag.mft (raw, json)
Hash identifier: OI0BCr+F3oWNbQN1uQsmOUiWY+S86Ui7+Y/hFLK4mGg=
Subject key identifier: 8C:D4:4A:4D:32:A9:19:63:EB:73:39:92:83:CC:8C:82:6B:2D:3E:3A
Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
Certificate issuer: /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Certificate serial: 0194BD175C9143F25EB38D5A7719A9FE6A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
Manifest number: 12BE
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: PAjoOsQf0RmmoZA6UENFacJ4ClY.roa (hash: ZTPqKop0ZcVt0foxrf1KsXpnvWpYw7IeU4H32JK9XIU=)
2: hH0b6-TCPEIXuE9_2BkqslVUFag.crl (hash: sqOfZrr7nnXCNtlyipm2j4BtF8TupztSEVIg1SwADQw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5c:91:43:f2:5e:b3:8d:5a:77:19:a9:fe:6a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=8cd44a4d32a91963eb73399283cc8c826b2d3e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cb:8a:7b:87:ff:94:67:c9:1e:77:39:f9:60:
37:3b:75:e5:8c:d7:3d:72:91:c1:4e:25:de:94:2d:
e3:7d:90:62:8e:73:d1:a3:ea:d8:ed:a8:0b:12:98:
1c:12:c7:99:75:d1:39:71:26:c0:c8:58:3f:83:bc:
1c:80:3e:73:3e:26:dd:22:71:4e:0c:29:f4:6a:d2:
89:21:f9:5f:f6:88:72:46:b1:b1:01:ac:44:80:82:
ce:32:e9:ca:97:7d:0b:38:bc:18:43:63:1b:af:3a:
98:16:8a:6e:1b:70:b9:e5:99:6f:c1:4a:26:ad:aa:
f8:2e:47:1b:34:91:06:ca:0e:cf:b4:38:c8:d4:8f:
19:e6:f5:8e:b8:51:00:b7:ed:37:2d:39:cb:e3:2a:
33:91:20:dd:23:ab:0a:fd:12:92:e3:51:32:d5:66:
cb:67:0e:d1:9f:ab:b3:b6:c5:3b:3a:34:f4:7f:ff:
a5:99:c1:ad:e1:22:57:f5:56:a4:1a:89:ea:4b:d8:
5f:ff:32:79:17:f7:33:18:98:a8:a0:b0:94:5b:91:
e2:3a:51:12:b4:b2:5b:93:0d:7f:0f:0e:e8:6f:f0:
65:27:cf:82:0e:ce:63:e9:54:9b:f6:81:84:a9:fb:
84:38:91:9a:ee:f9:48:5a:ef:7f:da:2c:ba:af:e8:
78:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D4:4A:4D:32:A9:19:63:EB:73:39:92:83:CC:8C:82:6B:2D:3E:3A
X509v3 Authority Key Identifier:
keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:69:9d:4e:c6:8f:a5:2b:0d:0c:b6:13:1b:4e:a4:6e:cb:fd:
e9:8e:d4:e0:41:9e:42:ab:01:e5:58:b8:91:88:90:78:40:99:
6d:c0:ba:e0:00:1b:d5:db:07:58:04:91:53:24:4a:49:9d:4b:
b7:ff:49:4a:dd:e8:d5:f4:c6:59:cd:49:32:26:39:a0:8f:2d:
fa:65:a2:56:ea:2d:0b:ac:13:e8:e5:89:ac:f3:54:69:f0:29:
a7:2f:e5:3e:8f:10:3a:6d:34:c6:65:07:9c:30:d5:68:d0:a2:
2e:d4:4f:85:3b:7f:b3:8a:f4:a1:05:8b:f3:57:2c:96:81:42:
42:2f:3f:95:6e:6d:fe:f4:ac:e7:ae:95:6f:a6:01:a7:8a:10:
00:61:01:e1:ce:09:27:3f:70:f4:6c:21:45:f6:43:74:db:c0:
8d:8c:6a:bd:e9:c4:01:80:4d:b3:a6:c5:f9:ce:d3:bc:96:06:
3d:e6:41:aa:b6:8e:17:62:57:9f:68:3a:71:00:ae:29:ca:32:
56:19:fe:9c:d5:b6:00:05:86:08:18:cd:2a:ca:25:07:c4:8e:
85:de:de:24:1d:52:58:0e:5e:9a:8e:56:e7:dd:1a:88:08:79:
9f:60:db:c5:b6:f9:2b:60:e7:18:a3:ed:f0:42:28:f3:37:92:
3a:e0:11:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:10 2025 by rpki-client