Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
File: hWklE5rMSv4L6e8JhOPnvVtE6eY.mft (raw, json)
Hash identifier: GsWzDHRAv6F/5AyhWKUHEkjf+ulcFVEjVrzL/Crct8U=
Subject key identifier: B5:A4:A9:0A:BB:B8:D0:33:74:52:CD:F7:99:EC:9D:AA:5B:FF:DF:52
Authority key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
Certificate issuer: /CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Certificate serial: 0194BD4EA3323B4AE3EB1F72E6A082E0EC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
Manifest number: 11BB
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: hWklE5rMSv4L6e8JhOPnvVtE6eY.crl (hash: gEyC8GwUgBjoGHQoHCB4Dq51vJ2uxjLjPBtaR59n9Ig=)
2: siSVK589afKFmNB4xui803eAFA8.roa (hash: pIfAtolx6StiwhL02gSeSu2zm+FTXp7cgi/yqREz08c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a3:32:3b:4a:e3:eb:1f:72:e6:a0:82:e0:ec:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=b5a4a90abbb8d0337452cdf799ec9daa5bffdf52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5a:fc:74:bd:82:fc:d1:f2:a1:a3:00:de:65:
46:f6:f2:fa:d6:f5:6e:ea:3d:74:f5:3f:a4:b6:9a:
b4:5e:45:77:e0:98:35:3d:2d:69:93:10:fc:53:1d:
04:5c:02:ed:19:3e:02:15:53:41:a6:ab:95:ae:4b:
3a:cb:20:ac:b4:63:30:bb:18:ad:ed:d9:b2:e1:6b:
8c:53:2f:a4:68:80:11:19:98:28:54:5b:a4:83:90:
14:29:f0:07:09:99:4b:30:d4:35:2f:3c:17:c9:b0:
cf:1c:ab:60:bd:16:5a:a0:1e:3a:6c:a9:76:fc:89:
0a:f0:90:2c:9a:cf:b1:87:19:ae:f7:75:43:72:b0:
fc:d5:42:51:f2:b1:6b:c1:e7:14:9f:d0:af:39:41:
e9:9d:58:f4:3d:e7:e0:6d:93:3f:63:4b:bb:7d:e7:
56:8d:8f:74:52:97:2f:33:7d:8d:58:7c:f8:ce:1e:
6e:b9:fb:21:74:e1:59:a7:74:0f:8b:b9:f9:4e:fb:
bf:5b:92:ef:41:7d:d5:70:a2:c7:1f:9e:79:2c:7c:
df:a1:5f:d5:a7:de:19:0a:e5:35:87:f2:24:9b:c5:
18:ed:d2:e7:49:4d:fc:04:cc:68:ff:d4:6a:a2:ff:
0d:5d:15:4c:97:2b:7e:31:22:36:45:07:be:ee:d5:
ad:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A4:A9:0A:BB:B8:D0:33:74:52:CD:F7:99:EC:9D:AA:5B:FF:DF:52
X509v3 Authority Key Identifier:
keyid:85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:54:9b:53:ee:fb:a6:14:cf:f1:db:30:55:c6:b5:f6:4e:4b:
72:42:34:09:25:3e:b1:8b:67:ee:bc:bf:2e:b5:bf:dd:f5:ac:
0e:ce:c1:e2:56:29:6e:0c:20:60:9d:ff:4b:b7:88:26:d9:37:
ac:98:6a:e3:55:9a:47:26:f8:32:2d:f7:7f:cb:2d:17:09:cd:
76:72:bb:63:7c:cb:51:1a:5e:10:40:97:63:9a:39:e2:69:90:
30:ac:d1:b0:a2:ad:1b:7c:c5:5f:5d:c0:65:a4:0e:7f:a9:3f:
df:41:e7:e5:34:58:4f:86:8c:76:2c:aa:45:15:42:95:99:0b:
58:08:21:c6:90:45:9c:18:4c:c9:eb:26:6f:fd:0d:bf:15:77:
5d:1b:c6:ed:91:e3:16:7c:f7:a2:b1:1f:7c:7c:cd:24:13:0c:
7f:95:88:ce:ea:99:4d:cd:41:47:a7:d5:32:49:08:a7:be:82:
96:22:5f:52:0b:a2:88:19:04:32:f8:dd:32:c4:cd:3e:66:60:
64:5a:44:27:d1:49:56:36:a1:d2:ef:90:13:d3:3d:f4:5f:8a:
45:c1:53:5d:92:d9:06:c8:d6:76:49:f8:f1:48:80:e1:80:9f:
d1:b0:62:f3:b5:e7:c7:ef:be:60:5e:6d:1b:14:2f:b3:8e:80:
26:7e:68:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:26 2025 by rpki-client