Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: ymsWvIsTDBK84DG8ydeBODFluMnPOMHiATdOx/3oiKY=
Subject key identifier: B5:87:51:47:9D:95:5A:E0:83:60:5A:61:DB:0D:95:88:91:02:85:7A
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 0194BD17A4B0FB8D6D7855154683286A21BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 0C95
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: 5_1Oehi1GaiGFF5FcoEXudKt-rg.roa (hash: +IrkWyDfHszKgk2p5jRqK6M5yZERwh+OnuDNPN9qm8s=)
2: V78L3J5oIjHVBChvXIOgu9Ohs78.roa (hash: CdwTBRVREg2srUT+l5SA7LltUlSHpLsaVjkjqAH9C7o=)
3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: q0gsmC77z6Vo3jp4YPX11dnElGJG6RdXOiQyA2qu5Dg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a4:b0:fb:8d:6d:78:55:15:46:83:28:6a:21:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=b58751479d955ae083605a61db0d95889102857a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9e:1e:15:64:3f:26:63:7d:8b:c4:28:a6:d9:
94:44:60:b5:0d:41:c6:39:92:a9:db:89:2d:59:e1:
14:8f:18:ac:71:c5:f5:18:35:14:4e:a2:af:cb:cc:
ea:9f:57:8c:d3:b0:f0:d8:b2:81:00:3e:49:b7:23:
c4:79:74:6f:62:f2:8b:ea:0c:37:d6:1f:1a:71:bd:
98:a0:45:e0:d6:ea:da:03:34:90:53:0e:70:28:5e:
74:15:44:97:0e:4e:4c:6e:ee:e6:3c:ff:7c:62:ce:
67:bd:09:05:e5:35:e5:1a:97:f8:9b:99:f9:2b:e1:
c8:b8:9b:4c:77:95:70:a3:e5:bc:b2:3c:39:da:1f:
db:32:68:d3:b1:f9:4a:8d:78:c2:d0:54:f4:98:3c:
05:bc:45:d3:e9:b1:45:2d:50:da:34:8c:d4:4d:79:
fb:f5:ac:66:2d:75:c3:cb:aa:a3:0c:83:fe:57:f3:
75:b8:1e:99:24:5a:c4:7d:c3:84:e4:36:40:29:db:
2b:ad:16:fe:91:ad:45:f0:b5:48:af:c8:4e:b7:79:
bf:18:e8:d3:34:c4:2a:75:0d:e3:04:04:80:a2:7c:
94:6a:3e:8d:ef:9a:e7:ad:4d:c7:8f:9c:37:c5:df:
16:91:26:ac:f7:7d:17:30:ee:d4:16:b9:e4:83:8f:
3d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:87:51:47:9D:95:5A:E0:83:60:5A:61:DB:0D:95:88:91:02:85:7A
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c9:59:96:f7:d5:d1:f3:7d:30:c9:b2:3f:98:27:1d:ff:30:
8e:f0:68:8b:d3:46:c4:76:c5:84:f3:7b:f6:4a:e9:51:e7:20:
cf:7a:96:0a:ff:a4:4d:eb:d6:d9:74:53:24:47:54:1a:e5:a0:
17:d6:26:e8:5e:e7:95:74:f0:6d:99:9f:d5:4b:c6:33:4f:91:
59:be:18:d0:b0:5c:5a:aa:9c:07:bf:61:ca:6d:43:e3:5c:d9:
8b:71:0e:f8:e8:ca:48:9c:76:aa:b7:48:7e:3b:37:a3:d1:7c:
b2:d0:7e:98:42:4d:ae:44:39:eb:57:5a:68:27:5c:26:d6:29:
18:55:f4:ca:d6:1e:9d:3d:a5:a2:a0:f0:8f:4a:28:82:d2:51:
44:d8:e0:4e:7c:d0:71:6d:5c:99:de:3b:38:8c:2a:a4:47:30:
44:c0:6e:24:6d:16:5d:49:fb:af:f1:bb:7e:38:e3:ff:be:3f:
2f:89:5d:1b:7e:5d:90:2c:e8:33:99:88:15:17:c0:e0:d1:98:
a6:9a:4c:b8:ed:d2:d9:42:f2:d8:fe:24:a8:46:13:12:46:18:
3e:d6:7f:3e:63:0a:4d:24:fb:b7:4b:4d:21:54:f2:81:b7:71:
d3:69:c6:b4:12:69:66:ec:e8:7f:f7:20:ce:82:0b:7e:b5:d2:
45:ca:f6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:09 2025 by rpki-client