Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
File: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft (raw, json)
Hash identifier: zAaC04T2zVKrQcuZuec/Wc4NA32kXbdvz9Ok4UDc5TE=
Subject key identifier: AF:72:5B:38:BA:2E:15:C7:F7:53:60:1C:2C:68:10:93:9D:E6:46:75
Authority key identifier: 86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
Certificate issuer: /CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Certificate serial: 0194BD176FF7E4773B8C61899BEC0405707D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
Manifest number: 0CFE
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl (hash: ijVJ+N9kogAmqvSydbMJpX66FyjMD45zAvwXIUSSfrE=)
2: zzXnyaTo4BATrc17RusBD7eE0wM.roa (hash: 6905vDk9E6YCZ2ECcGKQ29E/7xlB0Pspqzs3gX2rnWA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6f:f7:e4:77:3b:8c:61:89:9b:ec:04:05:70:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=af725b38ba2e15c7f753601c2c6810939de64675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ce:7f:ff:dd:fd:8f:76:52:df:f6:e9:f2:aa:
6f:c2:b6:82:d7:91:cf:6e:80:28:cc:a0:60:f2:fc:
8b:17:26:fd:bb:61:64:7d:59:bf:a1:d7:79:9a:0e:
85:26:88:bc:31:31:de:05:03:44:bb:97:cf:b9:3d:
34:4d:89:6f:ce:f7:cd:5e:8f:be:48:9c:7f:3e:fd:
85:7b:09:d1:8a:9b:20:02:3b:b2:20:29:6b:f3:2b:
82:f0:22:b3:65:df:14:c0:78:87:ff:b0:b4:53:63:
f8:be:af:ff:90:72:d3:05:b0:30:23:e5:db:ec:5d:
13:e1:93:7d:51:0c:82:d5:62:d5:97:f3:01:6e:2c:
a3:24:eb:fb:82:3b:38:93:4b:bd:1d:8e:d2:69:03:
dd:73:6a:1b:c1:08:87:c8:8d:2c:d4:ce:51:54:dd:
b7:bb:1d:cb:31:27:6f:0e:cf:e1:d1:43:a9:3b:cb:
12:a3:b0:ba:dc:ff:64:11:64:b5:25:c3:5b:e5:1b:
2e:95:69:27:ef:95:4d:0e:de:7a:7f:c8:9a:51:79:
f8:82:af:5f:58:b1:9a:de:92:a7:6d:07:33:49:07:
5c:05:25:6c:4e:8c:e1:90:b4:f1:72:4c:32:cf:c0:
97:b7:77:94:1d:94:a8:e6:1a:a1:44:e4:9e:e3:7a:
e3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:72:5B:38:BA:2E:15:C7:F7:53:60:1C:2C:68:10:93:9D:E6:46:75
X509v3 Authority Key Identifier:
keyid:86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:39:fb:88:fb:89:7d:bd:42:cf:a4:54:58:20:98:d4:dd:46:
14:8d:8d:69:40:f7:34:79:32:b2:45:76:c2:f7:e3:14:a1:57:
b6:c7:a8:15:28:d3:a8:cc:e0:36:67:b0:ce:61:f3:e5:fb:0f:
1b:e4:a4:76:5e:f7:a8:8c:96:f4:e9:88:b4:d4:d3:a7:b0:78:
1b:d4:5a:58:2e:ea:ce:cf:09:04:83:af:84:52:cd:06:c6:9d:
15:20:f0:7d:0e:01:ec:2f:fe:c3:a9:c5:1a:e7:c6:ad:04:7f:
9b:10:c0:bf:6f:43:dd:62:0b:94:c6:c5:ea:f7:38:3d:63:07:
62:1b:c9:3f:22:60:b2:5e:48:23:ac:65:02:a0:bc:a4:6d:91:
15:6a:b8:f3:9a:55:3e:d8:02:de:1a:9d:e2:bb:14:ab:20:18:
d7:48:74:93:67:fc:0c:fb:d2:18:87:8e:5d:88:d4:d9:f4:a1:
84:0c:12:9d:3d:b0:6b:c6:bf:f9:5e:e1:a5:bd:4f:7c:92:34:
bd:a1:0e:bb:8b:ba:85:98:16:cf:e5:52:78:24:7e:91:09:00:
ab:ef:36:80:eb:a4:7b:09:2f:b3:52:1a:64:1c:f5:ce:71:ee:
29:de:3c:6a:0c:c0:9a:b6:f9:bc:24:89:1f:2f:0e:83:3d:45:
79:3a:04:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:22 2025 by rpki-client