Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
File: hFwjee_tEAVs-GXVLDLh4euowUA.mft (raw, json)
Hash identifier: Dj7m3KLR5HZj4JF80yD4FF6bVXxdtD7MlHNTCWWON3w=
Subject key identifier: FC:57:42:EA:7A:4B:4F:ED:3B:1B:B3:E0:ED:51:35:EE:7B:68:7E:B0
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial: 0194BD4E7353931A6BB7275B3183A48F9CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
Manifest number: 1469
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: 1-Q0wy33jSBSnWmXiTqQykiTqkYk.roa (hash: AFl9DeBDP0dSG/OK6zMhaGWYU/Hi58NsW+5Sbk8Zc2c=)
2: 6N4n07cpVsvDfcO3eEPVPOVbfQg.roa (hash: nhZwGT39i2nPsTiPGKrLhdrJBmLcv3M5z0QYlPKdUVs=)
3: hFwjee_tEAVs-GXVLDLh4euowUA.crl (hash: 2h1JahC5g2M07B9nwh2M6LBkUZZpgQjjUOgg4WgY9L8=)
4: jZDFfglCAVXqMiHQiNaCS_ykt5c.roa (hash: Z9pj0iwTHPQ+PmAz+kp9u4GZKNWWC8RI/dko3M2WedQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:73:53:93:1a:6b:b7:27:5b:31:83:a4:8f:9c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=fc5742ea7a4b4fed3b1bb3e0ed5135ee7b687eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:87:ea:d1:3a:17:e3:26:34:bc:e5:93:90:
dd:d3:b9:e4:03:9a:1a:5d:c9:64:f0:98:97:8f:a0:
51:3a:e1:37:53:15:c6:21:c7:61:32:43:79:c8:e7:
82:ae:90:36:57:42:f2:d1:fb:0d:85:a0:3d:a5:1b:
4a:5e:7f:ce:dc:fd:44:8d:1e:81:5b:43:9e:ec:a2:
29:c0:90:1c:e4:81:af:1f:45:6e:32:35:08:2a:91:
1d:cf:1f:74:49:14:33:27:3e:ac:94:9d:66:4d:87:
3d:c1:7f:40:3b:38:ad:ae:d8:3f:91:35:45:6d:cf:
df:d3:14:28:38:f6:b6:22:8d:dd:f8:c4:aa:64:5d:
09:0f:08:34:06:f8:47:89:e0:60:e1:42:53:0f:50:
66:d6:2f:38:c5:5b:bd:22:53:c4:22:e3:79:06:d7:
c2:a1:cc:8d:56:31:1b:5e:57:be:29:0a:f8:2d:07:
76:e4:12:63:d4:2f:fc:6b:24:ad:17:52:d5:83:41:
c1:45:e6:be:52:8d:9b:53:25:29:e3:ec:25:03:f1:
ff:17:db:21:72:32:16:65:c2:da:05:a4:13:45:f9:
67:7f:f2:5b:29:2f:4e:a5:b5:5e:98:d7:f6:1c:ff:
39:d0:3e:05:94:70:ee:b8:72:a9:7a:b7:83:fc:75:
bd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:57:42:EA:7A:4B:4F:ED:3B:1B:B3:E0:ED:51:35:EE:7B:68:7E:B0
X509v3 Authority Key Identifier:
keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4e:a5:87:5f:1b:b6:6a:a8:5b:d7:20:34:bc:6c:4f:8b:06:
9d:3c:50:0a:53:cb:d6:12:47:d2:b5:bc:2e:50:04:5e:72:9a:
ab:69:46:3c:c9:01:8a:41:99:97:18:db:55:a0:a8:ef:ad:79:
68:bd:a3:77:e1:ea:78:07:f1:5c:79:3b:02:f8:cc:9e:73:65:
90:6a:f1:1f:2a:63:d1:e1:5b:66:5a:43:bb:5e:02:a0:31:2a:
bf:c5:86:37:cb:c8:ed:f6:fd:13:8b:7e:1b:74:c6:8a:9a:f8:
9e:44:2e:c6:98:ea:4f:d5:dd:d9:7b:67:76:04:6e:06:58:1b:
71:fa:39:15:7f:dd:07:0f:ba:5e:ea:82:4f:b5:c1:0c:1a:81:
7f:2d:d2:bc:ac:fd:fd:96:6e:34:e8:10:0a:cd:cc:b5:55:40:
4c:80:fc:59:8f:07:2c:f3:a2:96:82:74:66:9f:fa:06:36:f8:
d3:33:e7:0b:e2:cb:31:30:e1:f8:92:6e:9e:91:4a:5f:f6:3e:
1f:85:aa:9d:c5:ae:2d:c7:39:c2:35:43:51:09:06:b7:52:0a:
67:c7:29:1b:13:35:c5:5f:43:6a:1c:dd:22:39:c9:0a:e7:a9:
50:a5:24:3a:07:b1:1c:1d:b9:9c:2d:d1:4b:9f:b2:99:27:3c:
8d:fd:9b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:07 2025 by rpki-client