Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier: jqF/KakbHc0XDOCsAPe6yigT92AKmnQOy1pVGLRTA6k=
Subject key identifier: 73:C0:59:C2:C5:4F:80:E6:4F:05:54:CB:D7:E6:DE:12:5C:5D:0C:87
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 0194BC72FD80176A7F69C20EB40A26A09DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number: 133D
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: YmzUvHWp7j1dCDxS9I2ehnQIrZw.roa (hash: 0siCZkDxZfwwZc19PumdYnR5bnqqXyjDWdMsYvm7sic=)
2: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: jVmVRjuuIxyzLkFT+8puWEL5WVBfijzkqdq1kTOSIvE=)
3: n6MPRl4HeV2oslQVZjQ3r5EuRXY.roa (hash: J3QEJ4pfKQHu+ZNIZ1/n5cXEVM04vV1h4Czaen0IJhE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fd:80:17:6a:7f:69:c2:0e:b4:0a:26:a0:9d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=73c059c2c54f80e64f0554cbd7e6de125c5d0c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a4:59:47:a2:09:e4:c6:7f:47:2c:33:55:ff:
b0:fd:22:00:91:02:63:f2:75:f9:13:24:c8:34:18:
bd:e7:47:19:9a:2c:81:ce:67:59:8d:e1:59:63:38:
74:60:07:b8:6a:79:5b:c8:05:06:9c:46:28:ea:f3:
54:4f:e0:8a:8f:58:d1:3e:3a:73:c1:60:1e:d5:7c:
6a:d7:a9:70:f9:af:06:1a:f3:af:37:50:cf:25:b7:
b0:ab:1a:28:1a:0c:b5:40:a0:d0:b1:d6:2f:6b:0c:
d9:a9:6c:c6:f3:50:73:9a:73:82:5f:16:c3:13:37:
8f:fa:ac:da:c5:1c:ae:bd:9d:be:32:78:c2:02:1a:
01:71:58:ee:05:9d:d6:4b:84:ae:ec:dd:2f:b2:ef:
3f:11:98:5a:76:81:48:aa:57:07:a0:7f:72:a1:f9:
e1:b4:31:51:74:b1:b4:56:aa:24:54:78:b7:b7:8a:
ff:d3:fd:16:3d:a7:75:28:bd:96:8b:29:7d:ab:73:
7e:0e:f3:09:36:d8:14:c2:c1:91:8f:56:89:fb:af:
29:34:0a:bd:eb:29:42:36:e0:78:da:de:be:85:5a:
fa:39:62:87:77:39:28:ae:20:20:6b:3a:ac:72:45:
6a:4a:50:a4:e1:57:f7:09:e2:22:11:15:8d:b0:ca:
2a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C0:59:C2:C5:4F:80:E6:4F:05:54:CB:D7:E6:DE:12:5C:5D:0C:87
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:49:66:9d:a3:1a:46:ad:9c:d1:dc:6d:3a:12:94:94:a8:92:
38:d1:6a:47:f3:82:5c:24:ae:70:0f:fe:fe:42:bc:cf:6f:72:
86:92:1f:89:6e:b7:39:0e:91:30:8c:04:fe:ad:d3:2c:95:c7:
ba:36:2b:17:82:3d:28:88:9b:e9:ec:a0:1a:ce:f0:43:6a:07:
69:a8:d3:f8:17:17:8d:22:8c:38:be:2d:13:95:41:d2:22:8c:
f0:71:65:d9:9a:2b:de:61:d9:0b:02:cc:8f:39:e6:8b:d0:68:
89:45:75:c8:b1:4c:46:56:af:a2:bd:e3:24:8a:d3:70:32:7f:
2d:a9:28:41:2d:7c:10:65:f9:30:04:43:4d:6a:ff:81:47:ec:
50:32:32:b0:9e:e9:13:7e:b7:13:06:c8:d1:fa:50:8e:41:35:
fc:99:10:30:f4:70:9c:9f:c9:cc:e4:bc:22:08:43:18:de:23:
5e:7a:19:bc:4f:df:e3:27:e9:33:8d:dd:b0:02:1b:22:63:93:
db:7c:b0:87:1a:f1:6a:c3:44:89:45:af:22:9b:35:e2:86:a7:
6d:ad:01:f7:eb:9a:29:51:ac:eb:1e:96:30:7b:f2:4a:e9:aa:
21:ca:cf:d0:cd:df:9c:14:04:36:9f:1e:52:52:f5:ef:f3:8c:
e4:31:11:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:03:25 2025 by rpki-client