Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
File: hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json)
Hash identifier: GuWXxWdpUK05zrlhNqYTAI+4TU+/BCGayNY1aOi3/HA=
Subject key identifier: 8C:40:BE:A7:58:CB:32:04:64:F4:A1:A2:3C:04:6A:1B:AD:56:AC:92
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial: 0194BCE0836E6EEDC02843F1271B32EC4C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
Manifest number: 13FF
Signing time: Fri 31 Jan 2025 15:00:17 +0000
Manifest this update: Fri 31 Jan 2025 15:00:17 +0000
Manifest next update: Sat 01 Feb 2025 15:00:17 +0000
Files and hashes: 1: 5PJXNIBNkIDizHXqABCfI2weMXY.roa (hash: mf+a4WKnZwf0YHj/JFfXY0yYuBPjjgdMLip3MBUWcAI=)
2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: qdQwlwHbTGiJKC2Q3YRzihuqDLbiU975/0m6eUakEb0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:83:6e:6e:ed:c0:28:43:f1:27:1b:32:ec:4c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Validity
Not Before: Jan 31 15:00:17 2025 GMT
Not After : Feb 1 15:00:17 2025 GMT
Subject: CN=8c40bea758cb320464f4a1a23c046a1bad56ac92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:70:a1:42:9e:71:a2:f4:6d:7b:57:89:80:
a4:d4:07:80:26:53:49:90:52:93:0c:a7:3b:6e:98:
0b:a7:d2:60:7e:1b:2d:fb:be:db:33:e6:c2:18:05:
63:d6:85:0f:bd:e0:61:74:20:e5:ef:c7:0b:85:85:
51:55:db:99:1e:fc:fa:95:11:41:a7:a9:c1:04:dc:
10:d2:5c:d6:83:87:f3:00:67:f4:ff:c7:df:54:68:
4f:8d:0e:0c:10:17:45:b4:8b:ba:0a:5b:c3:ae:41:
12:60:cc:f4:3a:66:8a:a0:99:2f:da:e1:44:da:c5:
75:d3:c7:93:98:ae:83:af:9c:d4:c1:84:6c:70:e4:
a5:05:1d:8e:db:88:c9:73:0e:a7:ba:5e:95:24:96:
24:0e:22:f2:45:37:1d:4e:cb:e3:f6:a2:23:81:91:
6f:8c:6e:10:55:27:f9:97:b8:9b:6e:08:af:e5:2a:
9d:ee:69:57:49:11:dd:4b:87:81:99:50:96:1a:f4:
c5:b0:63:79:c9:3d:e0:21:cd:aa:a5:12:4b:f8:a3:
70:9e:34:aa:d7:af:b4:43:b8:58:c3:33:8b:53:72:
03:25:d4:53:ba:04:1d:04:2b:95:b6:29:15:de:0e:
ec:12:3c:93:0f:69:5e:25:31:5d:ea:40:35:9f:aa:
c4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:40:BE:A7:58:CB:32:04:64:F4:A1:A2:3C:04:6A:1B:AD:56:AC:92
X509v3 Authority Key Identifier:
keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7d:2e:7e:4a:4b:38:55:08:48:cb:2a:45:7f:b7:43:df:5a:
0e:e3:28:da:5d:84:55:88:9a:62:ec:d2:2d:ff:0a:a2:d8:e3:
fb:83:99:5f:7a:ee:57:ea:43:eb:12:bc:5a:6a:30:c8:ae:16:
98:68:1a:59:30:31:ce:00:0d:fd:21:80:7b:4f:3d:50:dc:60:
9e:9c:51:ce:65:a5:73:f7:8e:5d:1a:e3:a8:db:fa:15:cd:58:
50:55:94:70:0c:ca:fa:40:82:d3:dd:9e:14:10:a6:7b:d1:9a:
dc:4b:d1:04:7a:35:c8:b4:22:fa:6e:9a:44:bb:a3:9d:52:80:
48:82:1d:59:f7:81:97:e3:89:57:e6:54:e3:04:c3:63:f0:d9:
b2:e3:87:e1:13:71:89:5a:e3:aa:3a:9e:08:5c:e9:cf:5e:23:
72:20:cd:52:28:18:44:59:af:1e:23:41:89:6f:b2:fa:9c:bf:
11:37:79:87:30:11:25:6b:9f:89:cc:f3:82:39:b1:4b:8f:b0:
49:1a:52:ce:9e:5b:4c:8a:80:5d:2a:11:6e:70:4a:1b:75:5f:
b3:2b:7d:94:11:7c:88:bb:9c:0c:bd:8f:bb:eb:05:03:f3:8e:
44:0a:21:e2:7a:1d:30:d8:ed:ad:0f:48:86:6c:e5:8a:d1:4a:
0b:41:6a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:52 2025 by rpki-client