Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
File: hEoXkcsH8dhhI8Y9w63P11TbEBs.mft (raw, json)
Hash identifier: UFhuK6UfbJPCeqVN1LUBWQLnpNN6j8NP44GkqSad51Q=
Subject key identifier: 90:BF:50:97:AF:5C:B8:1A:30:73:E0:C8:8A:E0:4C:E8:93:75:D7:10
Authority key identifier: 84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
Certificate issuer: /CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Certificate serial: 0194BC3C39873B393EC0AF85A60ED6678E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
Manifest number: 083B
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: Ihp0VP8oRNeTGrBSGwpts6D1JhE.roa (hash: Qldf3LszJ2g2XwaE6LEoxPc+aR59tijRa50IN/mT6PY=)
2: gi2zaUr2ngLXfM8NV7jNPdt_PFI.roa (hash: pPPLz9b8ntu+6vKYV+GHcDLfS03p/6Pt+aGjIk5ADdw=)
3: hEoXkcsH8dhhI8Y9w63P11TbEBs.crl (hash: 9j76XUOjqV/ZPyqqYtbldaY9DSjt7pyCpDxUCnfiXLI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:39:87:3b:39:3e:c0:af:85:a6:0e:d6:67:8e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=90bf5097af5cb81a3073e0c88ae04ce89375d710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:18:d6:23:2f:e5:fe:8d:a3:17:2b:54:b1:
7e:52:4d:be:82:f8:90:ef:86:11:f9:5a:86:7b:e4:
ee:5f:82:54:0d:4e:fe:07:6f:24:d7:20:5c:b9:8b:
d8:e2:7e:39:ee:2f:4f:8a:ed:d7:d6:8d:8d:66:b9:
da:a0:e7:5c:24:20:92:ff:82:2b:a5:dd:ce:c4:c2:
fd:64:39:36:e7:4c:60:ce:0b:58:95:23:e7:f8:9b:
6c:c0:1e:4d:75:bc:52:7c:bd:d1:75:69:84:3e:d7:
b0:3b:b8:9f:a6:6f:fe:4d:af:0f:eb:91:d3:bc:48:
14:99:77:e5:19:e7:00:5a:94:22:27:f7:c9:9f:c1:
fc:58:af:a9:1a:45:1b:62:d6:dc:07:96:76:d6:f3:
9f:be:e3:da:f0:86:3e:6f:91:63:b9:44:94:02:fa:
03:58:a2:0f:5b:91:5a:c6:6a:5f:64:1b:9b:eb:7c:
59:21:d8:a4:23:11:13:8c:ae:d2:1e:d1:20:06:44:
93:2c:33:c0:41:05:95:10:79:91:e1:b7:92:ba:32:
60:5f:a4:8c:29:1e:1f:70:8a:9a:22:80:2b:fc:af:
0a:5b:33:73:83:04:b9:23:b8:ed:71:e6:cd:66:47:
29:f0:40:9c:12:8d:1d:19:fe:ff:cc:6c:2d:15:8d:
6c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BF:50:97:AF:5C:B8:1A:30:73:E0:C8:8A:E0:4C:E8:93:75:D7:10
X509v3 Authority Key Identifier:
keyid:84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:93:cd:f4:90:57:64:ac:84:35:f5:a0:cd:e5:16:0f:c6:98:
e8:7c:48:b3:a2:1c:66:ca:a5:f3:22:94:5d:49:c0:34:8c:7b:
17:69:25:ba:cb:99:bd:b3:53:d9:c8:df:10:59:2c:fd:68:f3:
87:71:dd:a6:df:8f:53:18:71:18:07:ad:46:26:d6:07:67:66:
1e:62:33:c8:9e:a6:8c:50:5b:4f:5c:aa:0b:d9:0f:4a:9f:82:
c8:06:94:89:c3:76:b7:0d:a7:76:a2:c5:ea:2f:88:3f:25:9e:
a0:48:03:d0:33:42:56:73:8a:f2:6e:94:6a:b7:c9:48:55:21:
46:4c:32:1b:70:87:c5:a7:07:1b:55:d5:18:57:b0:f0:38:f4:
5f:c7:05:08:06:83:09:15:5f:4c:d6:6f:f7:58:b6:55:ba:c9:
04:cc:47:e3:9b:77:3b:dd:0f:65:c2:f0:3d:b9:9f:d5:e1:cb:
aa:50:b7:22:b6:a0:16:e6:ea:86:8c:ae:59:ce:12:71:92:b1:
49:4e:91:d1:46:b4:7a:2c:b6:f8:51:26:5b:6f:9e:9b:df:e8:
24:81:99:de:65:d8:01:7c:a7:65:70:3e:6c:ee:98:ad:69:14:
1b:cb:99:af:b3:0d:80:1e:a5:58:15:b9:60:ff:ea:c0:08:79:
54:0e:d8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:51 2025 by rpki-client