Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
File: h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft (raw, json)
Hash identifier: 6DFh1NGGz9+zY+y1TANQpxb4is2btGBiZ/lE8ZQf/rg=
Subject key identifier: 48:FA:61:24:31:8E:B3:07:5D:0F:02:EE:0E:FB:6B:BC:AA:AC:B9:4A
Authority key identifier: 87:F1:CA:C0:DE:8F:66:A7:07:6F:28:10:F3:F3:51:8A:A7:06:43:BA
Certificate issuer: /CN=87f1cac0de8f66a7076f2810f3f3518aa70643ba
Certificate serial: 0194BC72BC677D549CDD40EB1C1031950241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
Manifest number: 0E10
Signing time: Fri 31 Jan 2025 13:00:23 +0000
Manifest this update: Fri 31 Jan 2025 13:00:23 +0000
Manifest next update: Sat 01 Feb 2025 13:00:23 +0000
Files and hashes: 1: 86_3LCbOcCp3yM191EWRi4FTvKM.roa (hash: T6YVBcckx9oAAL2sgQLtUYTYtIf9ZyYKJMrHcxK/x/E=)
2: h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl (hash: y1hjZYGVgjqIqW2Kqe2G1i2Xh1rOtmMvkIlH+CA8L3Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:bc:67:7d:54:9c:dd:40:eb:1c:10:31:95:02:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f1cac0de8f66a7076f2810f3f3518aa70643ba
Validity
Not Before: Jan 31 13:00:23 2025 GMT
Not After : Feb 1 13:00:23 2025 GMT
Subject: CN=48fa6124318eb3075d0f02ee0efb6bbcaaacb94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f8:55:99:4f:eb:47:2f:9e:64:9f:12:40:bd:
b9:ed:b8:3d:87:fe:22:ba:28:9d:1e:67:2d:d4:e3:
67:c0:97:b9:0f:92:81:bf:4e:c5:7b:4a:4a:9d:1a:
08:10:5c:9c:92:7b:6a:c8:a9:64:49:cf:50:7b:e4:
15:63:f9:f0:07:6d:52:73:55:e7:55:59:a4:59:4e:
89:17:af:48:06:55:f5:fe:29:6d:58:d6:c0:ce:08:
83:9c:23:01:21:b9:60:4b:03:1c:9c:2f:07:f5:3c:
78:91:0f:21:40:89:59:a8:97:e1:b6:cd:54:9e:19:
71:cb:81:ed:bd:da:d4:87:e9:ca:4f:51:01:85:a5:
02:9b:f2:34:3e:df:48:14:4f:1a:54:7e:0b:41:b9:
ae:5d:89:05:10:87:20:1b:cd:14:4e:76:27:f9:43:
82:f3:4f:55:7c:d9:50:d1:68:8c:fa:0e:a5:b5:40:
63:df:cb:16:95:bc:6e:73:40:b7:61:07:2b:32:b9:
f4:87:96:84:d5:d3:2c:5e:db:ed:12:a1:fb:7e:c3:
b5:2c:41:71:f8:24:5b:20:03:c0:1e:5a:40:aa:4c:
c2:04:22:06:88:c3:61:69:37:05:f2:8d:41:51:1e:
07:b3:8c:9b:71:1e:1c:ef:7c:46:1e:13:3e:aa:b2:
7c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FA:61:24:31:8E:B3:07:5D:0F:02:EE:0E:FB:6B:BC:AA:AC:B9:4A
X509v3 Authority Key Identifier:
keyid:87:F1:CA:C0:DE:8F:66:A7:07:6F:28:10:F3:F3:51:8A:A7:06:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3b:86:e7:d8:09:f8:5f:28:7a:db:2a:b9:40:a3:ee:73:89:
6f:92:40:bd:8c:fd:b0:22:73:63:ab:96:8d:33:6c:d4:3d:be:
95:8a:e3:c1:13:f2:8f:af:5e:24:39:48:15:20:64:5b:56:2a:
f8:77:d0:4f:e6:b1:e8:c4:25:fe:7e:9c:26:0a:81:0b:68:f3:
e8:05:cd:62:71:b3:e9:ef:a9:0f:4b:95:5a:e0:2e:ec:75:ab:
51:a2:92:f3:9b:5c:6a:4a:61:8d:24:37:e4:c9:5b:67:45:8b:
a0:d5:d5:5d:43:ea:4e:d1:2d:71:e0:b0:b2:82:80:13:61:cb:
f9:a8:66:25:4a:ec:7f:41:d4:9e:ec:79:f6:12:87:dd:cb:ae:
b9:4a:5f:58:63:b0:1e:73:e9:99:5a:c5:52:2a:ba:62:72:83:
e2:77:f3:a0:44:2b:67:51:94:ee:85:f5:63:70:3c:9b:ea:06:
ac:d4:22:34:24:11:8a:c6:a9:c0:40:32:9f:c2:8f:f1:a8:cd:
df:43:a1:ca:d3:5d:a7:9a:09:e2:9c:34:18:88:e6:fa:ce:96:
78:5a:99:4b:e3:a4:5f:16:ba:85:a8:58:40:fa:6a:b5:e5:58:
9e:75:5d:0a:d3:a8:7a:61:29:10:20:25:62:9e:cb:1d:84:b5:
f7:2f:39:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:15:53 2025 by rpki-client