Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
File: heFWexaBgzyUSl8mQKngO-jvC_Q.mft (raw, json)
Hash identifier: az6c2xbO77XYVV7wDCDRBowqFr6tuxxnGaVtVxMP9W4=
Subject key identifier: B4:17:6E:25:7F:39:7A:E6:25:E0:61:72:6F:4A:92:3F:47:D4:2A:01
Authority key identifier: 85:E1:56:7B:16:81:83:3C:94:4A:5F:26:40:A9:E0:3B:E8:EF:0B:F4
Certificate issuer: /CN=85e1567b1681833c944a5f2640a9e03be8ef0bf4
Certificate serial: 0194BCE05E4D4F21980DB2008217703F189F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
Manifest number: 0D37
Signing time: Fri 31 Jan 2025 15:00:08 +0000
Manifest this update: Fri 31 Jan 2025 15:00:08 +0000
Manifest next update: Sat 01 Feb 2025 15:00:08 +0000
Files and hashes: 1: IVTm7Sk0HOhJBNyed6XFY_Z2R94.roa (hash: i1RGEeFc6A0tWd9gQ48945gkWc6E43q8yFMFeZXbGTI=)
2: heFWexaBgzyUSl8mQKngO-jvC_Q.crl (hash: QXtYjdTJ7wwWeavk7BeoZbiiMwmikkby3JRdS4wKkxA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5e:4d:4f:21:98:0d:b2:00:82:17:70:3f:18:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e1567b1681833c944a5f2640a9e03be8ef0bf4
Validity
Not Before: Jan 31 15:00:08 2025 GMT
Not After : Feb 1 15:00:08 2025 GMT
Subject: CN=b4176e257f397ae625e061726f4a923f47d42a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:41:fe:55:2e:96:71:d4:1b:c5:f6:6c:f2:d9:
81:2e:f4:72:ab:e0:44:f7:a0:ea:8b:59:b4:a6:ae:
b6:32:b9:f4:04:51:de:e0:42:13:ca:5b:54:7e:42:
df:ba:26:11:f0:e3:1c:2b:6e:b4:80:2d:51:34:b0:
ba:75:f7:6f:cf:c3:f9:e7:0e:88:01:3e:65:75:63:
3b:05:c0:b6:4d:0a:8c:97:e3:55:3a:d1:92:db:19:
30:b3:0d:fd:55:fa:44:e5:3c:b5:2a:05:67:66:72:
fe:8b:46:28:87:12:d8:45:8d:ec:a5:92:8b:a8:09:
78:41:85:e9:6f:25:41:76:7e:c8:fc:ff:b8:03:d7:
0c:bf:df:0c:3e:9b:3f:19:09:44:ea:ed:da:a4:b1:
ba:35:97:0e:3a:b1:bf:60:e9:0e:35:ca:55:8d:99:
c4:50:49:df:17:3e:43:1b:17:11:55:39:ae:a1:c6:
31:2c:25:0b:03:07:6d:12:42:ba:71:3c:ab:23:40:
b9:1e:11:53:03:66:d1:f7:95:61:e7:2d:81:ca:9f:
23:00:03:12:38:44:e7:7f:fd:d8:29:47:ec:38:b9:
96:bb:0f:6f:dd:d8:85:87:8a:9f:93:0c:26:65:98:
11:6c:43:59:2c:b3:f9:59:90:aa:f0:63:99:41:d0:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:17:6E:25:7F:39:7A:E6:25:E0:61:72:6F:4A:92:3F:47:D4:2A:01
X509v3 Authority Key Identifier:
keyid:85:E1:56:7B:16:81:83:3C:94:4A:5F:26:40:A9:E0:3B:E8:EF:0B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9b:c7:53:9e:fd:b1:c0:0a:cd:6f:fe:00:3e:9d:45:c3:e2:
ab:a5:2b:c1:3f:bd:8d:4d:b0:db:57:23:3f:32:c3:f8:69:30:
f6:0b:8e:2b:06:84:ac:bf:18:7f:d1:54:28:f5:75:a5:e4:f9:
3a:73:27:b8:6a:11:7e:d9:2b:b9:49:6e:9f:33:34:f8:f7:e8:
fb:c2:4b:1a:fd:46:9f:b5:e9:46:86:8b:13:09:90:f3:7d:07:
dd:88:e9:e0:72:35:b3:24:dd:c9:17:0e:ae:db:b8:5b:57:16:
29:ab:c7:8c:26:51:14:65:ce:55:47:54:ad:f6:ee:10:42:c0:
2d:33:e7:18:92:42:13:44:2b:55:03:03:75:fd:1c:88:3e:ea:
e7:27:bb:77:40:50:f0:9a:78:a0:2e:ef:8c:fc:71:a8:ee:d2:
23:23:8c:8c:b9:ff:55:5e:35:e2:f0:1e:69:03:47:b4:58:50:
03:fe:0d:db:e1:d0:a8:3f:6c:87:c0:88:4f:fb:19:9c:e6:67:
8b:23:70:ef:d6:a7:b2:24:40:87:44:6a:f6:40:3d:26:e8:4c:
d5:1b:d4:45:cb:0e:e5:ef:67:e4:50:75:4b:8c:eb:45:78:ca:
17:1f:04:b8:8d:af:25:81:c6:db:86:10:1e:8a:ba:06:6e:80:
0e:45:c4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:58 2025 by rpki-client