Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.mft
File: hS7OnJoyTUXDX5VZ8ynYhp2rU7o.mft (raw, json)
Hash identifier: clMDoPF3P5WO/jua1Ki7pDh+0nkg1t5bLtE4rqlTU7Y=
Subject key identifier: FA:C5:5D:8F:4A:48:B0:B8:64:73:D6:A0:5F:B4:35:55:C8:68:CD:C6
Authority key identifier: 85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
Certificate issuer: /CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Certificate serial: 0194BC3BC4D68D8E3A3E754019472C49C017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.mft
Manifest number: 1435
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: POUPcBO03DMIXVf_MFYgEgCOm2c.roa (hash: U70/4wMtnCfwgqCkp7u+PlnT2NS/US0B2K04xMH3TNI=)
2: hS7OnJoyTUXDX5VZ8ynYhp2rU7o.crl (hash: ekumB0ijyR3RQQSPO5W4EtGwBSyi5cOPmbrxSgEms3w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c4:d6:8d:8e:3a:3e:75:40:19:47:2c:49:c0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=fac55d8f4a48b0b86473d6a05fb43555c868cdc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:41:04:6f:db:93:30:c9:d3:4f:f6:9d:8f:
22:ed:1a:e2:7e:78:c0:cf:7a:c6:a0:c5:f2:00:1f:
b6:18:3a:f7:c4:82:74:ca:1a:02:9e:c8:6b:51:f8:
53:31:eb:06:ab:58:1c:48:b9:31:7e:86:04:32:03:
2e:b6:a2:13:fc:18:93:26:61:f1:75:2f:ae:2d:93:
3b:f6:c6:de:53:6a:29:5e:aa:d7:9a:30:ff:48:a4:
60:fc:f1:0c:f5:52:55:e8:b3:0c:c5:fa:d6:f9:09:
3b:e9:fc:31:32:90:00:37:c3:a5:e1:83:55:c4:b0:
cb:ee:20:b9:5e:78:37:cc:ba:65:0c:49:c2:58:68:
34:d1:4f:17:a8:0c:a1:63:49:6e:75:da:5b:6f:cb:
50:a5:1b:3c:e1:4d:c1:01:64:e6:8b:b8:4a:b8:33:
ed:0d:bc:d1:4d:24:6e:fe:16:2e:4d:e9:e4:6a:87:
7d:18:ea:6d:d9:30:38:90:1f:0d:bd:fa:ab:01:68:
7b:df:54:49:58:44:98:6f:2c:ed:49:e5:32:37:62:
71:3c:bd:6b:e6:07:01:c8:f1:7b:8e:eb:44:de:c9:
66:0d:66:7d:51:57:57:95:d3:f3:e7:2b:02:b7:b0:
90:ab:2e:f4:ed:56:02:08:a5:6a:ad:72:eb:13:63:
5e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C5:5D:8F:4A:48:B0:B8:64:73:D6:A0:5F:B4:35:55:C8:68:CD:C6
X509v3 Authority Key Identifier:
keyid:85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:18:7f:2d:a1:f2:b7:73:44:fb:9a:c5:5b:69:2c:60:5d:b3:
71:d1:25:34:b0:7e:1f:e1:0c:f5:31:71:1b:d6:0b:d5:59:7f:
39:8c:73:5c:3f:f3:63:ab:31:36:5b:8f:49:81:dc:57:1c:24:
40:e6:19:a6:92:af:06:d7:9a:71:65:e6:df:b8:b5:38:73:bf:
4a:98:7e:f3:06:3c:b1:2a:fd:d4:5f:1f:14:5b:56:18:e1:3e:
34:48:f6:5f:90:c6:d9:a7:e5:97:99:cd:4f:04:e8:f3:7b:ce:
56:8c:75:60:0e:09:44:95:71:4e:cc:3c:b7:a9:88:8d:0b:4b:
a5:96:74:2b:96:c3:bb:39:72:34:ce:41:bd:37:d2:30:65:15:
7f:6e:66:75:5b:1b:54:8a:92:c6:d0:64:93:1e:c8:52:10:ca:
01:15:4f:4a:20:a1:71:14:7b:94:fb:23:03:a5:88:dd:4c:02:
12:66:80:21:8b:bf:71:74:d5:34:a4:ea:cb:b0:b2:70:d4:82:
c6:cb:ee:e9:21:8e:e6:b6:ef:4b:de:52:0f:3c:e5:ae:7f:90:
96:fb:66:2d:b4:f5:a7:ee:3e:fa:08:fb:41:13:12:70:aa:18:
72:9b:e8:4a:28:00:c4:d7:73:e4:53:c8:d3:00:dd:00:64:18:
e4:aa:d9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:30 2025 by rpki-client