Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
File: DHiHWC2D0_CHaCr4eAoySjU854I.mft (raw, json)
Hash identifier: acry++zbKY3UmU84Eye9333vAPG5D6zlBU1d0g3IX8w=
Subject key identifier: B5:0B:38:8D:36:8A:79:7E:3F:88:0D:3C:56:78:88:33:84:57:2B:3F
Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
Certificate issuer: /CN=0c7887582d83d3f087682af8780a324a353ce782
Certificate serial: 0194BD4E98E1C2899E67FC3BB2B0D771C10B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
Manifest number: 0B
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: AyMTRTSNhqKy20C0SEK--C7gNJ4.roa (hash: /rFc3n1MX+dvr9KRftoBZVejlv7vWIrjtjmHQ1QhM24=)
2: DHiHWC2D0_CHaCr4eAoySjU854I.crl (hash: y1J3rjy3o3h939tB+cFXlm/8SB4frknTbfzLf9wAsIw=)
3: ihZ66_FRP1ZEi9NozSdwfCGel-M.roa (hash: wFOQHVX1zMY4YtBKixW4VOsy+9ZxuzYcQZi+JYB6nWA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:98:e1:c2:89:9e:67:fc:3b:b2:b0:d7:71:c1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=b50b388d368a797e3f880d3c5678883384572b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:c4:4e:10:da:63:50:de:79:fe:e0:5b:4b:
3c:29:8e:b2:db:6e:32:52:1f:71:9e:05:36:89:bf:
bf:19:07:6d:9e:6e:91:ab:c9:e9:26:09:62:65:61:
47:31:6e:b6:ab:9b:51:b2:84:c8:84:a0:9d:14:94:
15:6c:da:9e:7e:8b:a3:a9:0e:1d:0f:1b:2c:1a:d1:
b1:aa:44:6f:5e:13:12:b1:45:2c:4a:d4:85:d9:dc:
2b:0f:de:ed:38:3b:7f:28:aa:20:c6:60:f6:c6:2b:
83:f5:a7:07:4d:4a:c4:16:b4:49:61:b9:be:38:c8:
dc:d0:98:3e:c4:01:04:54:51:68:94:67:4d:e7:ee:
85:7b:65:88:b8:8b:ad:30:18:da:55:68:7e:4d:72:
25:67:54:08:1d:0f:42:ed:a4:79:ad:46:aa:e4:91:
d1:c9:a1:9e:51:46:58:d8:13:9d:81:f4:40:49:8b:
7f:d8:a9:02:94:00:d9:0a:f8:44:e4:2f:6a:47:87:
8b:66:c0:16:81:84:a3:47:16:78:14:2a:ab:9b:3b:
37:62:39:14:43:af:9b:62:ea:81:9a:7b:ad:1f:eb:
25:da:a4:c7:b1:36:f1:2b:1c:92:c6:15:3e:bd:23:
65:ee:9d:58:36:88:d9:62:c7:09:e8:31:62:ef:5a:
de:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0B:38:8D:36:8A:79:7E:3F:88:0D:3C:56:78:88:33:84:57:2B:3F
X509v3 Authority Key Identifier:
keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:50:4c:29:1b:35:ec:0f:c9:e1:5d:5c:d3:8e:50:83:83:9d:
38:0e:b1:6c:fa:7e:0c:99:54:f3:e5:b3:14:51:13:7e:e2:88:
9f:4c:98:9d:dd:d9:37:7e:09:cb:5b:a0:b5:69:03:67:0a:25:
36:82:7d:ea:12:88:24:11:3f:77:bd:c6:7c:16:79:b8:8b:d5:
b1:48:b6:25:61:c0:cf:8a:b3:69:28:6b:9d:77:fd:eb:48:a4:
04:41:ee:0f:97:59:41:7e:21:36:f2:40:86:ae:6e:8f:e1:a6:
2f:1e:a4:57:6d:ca:a9:5a:ed:61:d3:d6:eb:84:82:20:9f:79:
ce:24:e6:5c:e7:3b:36:25:a5:3b:28:0f:1c:bc:ce:1b:b4:bd:
ae:f5:e3:df:67:cf:54:e1:fd:ef:9a:22:e1:b8:85:c3:04:cc:
29:db:0d:74:fc:f1:11:66:b5:f0:20:92:f2:bd:1d:3f:9e:58:
70:84:01:06:19:8c:85:57:94:49:99:6d:ed:28:5f:58:4b:8b:
0d:b2:21:90:ea:1f:a5:2b:40:d0:d3:e4:4f:c2:89:26:18:98:
cf:c6:ee:56:c5:cf:b7:b5:7a:2f:bf:25:fa:8e:ee:4f:1b:db:
0c:f4:5d:47:5d:7d:64:97:66:08:17:25:44:6d:17:44:4d:19:
24:cd:b2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:14 2025 by rpki-client