Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
File: hWhAcEemLmSDAMUYKik1P_WOsF8.mft (raw, json)
Hash identifier: xylwsJAMHwl3iEw58kyD5R4KgfRnNrcylDnOx36Yk04=
Subject key identifier: F3:18:2B:40:35:CF:30:DA:D3:E2:CC:DE:4E:25:CC:86:73:2B:91:6E
Authority key identifier: 85:68:40:70:47:A6:2E:64:83:00:C5:18:2A:29:35:3F:F5:8E:B0:5F
Certificate issuer: /CN=8568407047a62e648300c5182a29353ff58eb05f
Certificate serial: 0194BCA98CEB73A0597B357AA316BD826073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWhAcEemLmSDAMUYKik1P_WOsF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
Manifest number: 017B
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: 0nvhqw7aFiUkSIOiOEerDMnQ_ZQ.roa (hash: HMe62SGaPYEENwRxXbOtER7G/ZP8W5TpI/QjfFDw0sg=)
2: hWhAcEemLmSDAMUYKik1P_WOsF8.crl (hash: Ezv2alPk8SnN1X6tgwn6Aq8fwHbkwg+wtAoUUYby6Xo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8c:eb:73:a0:59:7b:35:7a:a3:16:bd:82:60:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8568407047a62e648300c5182a29353ff58eb05f
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=f3182b4035cf30dad3e2ccde4e25cc86732b916e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8c:3c:27:eb:61:ba:d8:31:3c:c6:bd:0d:bf:
bb:de:76:d5:0a:20:3f:4d:d9:ba:75:70:55:43:0a:
5f:d6:a3:7b:b1:e8:4c:8b:56:76:ed:f0:82:be:b9:
33:47:33:dd:f1:d9:8d:62:76:9e:4c:69:97:2a:fe:
f2:1f:4c:f5:e0:59:60:a1:52:10:0f:98:e1:a7:22:
f5:2a:7f:44:b6:dd:da:fe:55:50:3b:06:e7:1e:55:
03:5a:72:d0:3d:5b:a8:07:45:cc:8f:54:e1:e8:6e:
4e:23:97:32:c5:3a:a1:98:45:48:9e:98:ab:73:89:
38:5d:61:8a:cd:2e:84:69:6b:a3:02:4b:b9:9a:00:
26:b1:91:9f:23:59:5a:96:84:74:5e:bc:b6:9c:c3:
19:05:29:20:ad:60:84:9e:77:ae:d5:e3:72:e4:d2:
de:c3:8e:5f:ac:fb:08:e1:dc:f9:d4:6b:1a:c3:33:
2e:b2:88:0e:3d:85:7c:af:32:06:9e:10:57:5e:c3:
5d:6d:76:35:6f:e3:85:d3:c1:f7:f3:14:81:e4:e6:
38:3d:b0:39:03:fb:2a:4f:de:a8:28:9d:af:8e:eb:
3c:3a:c8:dc:d1:5e:3e:8a:9a:b3:12:cc:00:da:66:
29:04:11:66:ae:dd:83:9a:e7:2a:2d:0a:73:6c:b1:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:18:2B:40:35:CF:30:DA:D3:E2:CC:DE:4E:25:CC:86:73:2B:91:6E
X509v3 Authority Key Identifier:
keyid:85:68:40:70:47:A6:2E:64:83:00:C5:18:2A:29:35:3F:F5:8E:B0:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWhAcEemLmSDAMUYKik1P_WOsF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:57:95:4b:6f:f4:6d:97:7f:5c:f0:a7:cd:34:0e:2c:82:ee:
41:84:3e:9d:cc:6e:76:8d:d2:b9:c3:56:c5:af:62:5c:31:b1:
e3:36:55:f9:12:d3:d9:d5:9a:1b:1d:28:b9:64:f1:9b:02:34:
66:e9:bd:14:e7:de:3c:a0:2a:98:b2:b3:81:19:de:ac:6b:a4:
c9:fe:0d:a6:c0:f2:f1:ed:40:44:72:a9:f7:31:36:2d:22:bd:
52:17:e8:53:de:7d:bc:d4:8d:8a:d2:0b:ef:35:92:da:05:58:
d9:59:7f:69:01:24:6a:7a:c1:d8:bd:e8:e6:5a:c2:c4:5c:35:
fe:2d:6a:85:22:25:7d:ab:8b:21:bc:3e:95:21:58:54:92:8c:
cd:c8:15:44:a7:8a:52:df:4f:a1:91:90:7c:d8:f0:26:af:49:
a9:7c:c6:85:66:33:eb:e9:58:1d:9a:bb:4b:a2:a3:2c:c0:44:
f1:ac:ef:e1:d1:f1:cb:4b:1a:da:d6:29:28:95:b8:fb:ec:16:
22:7b:62:7b:28:e6:58:54:e5:34:74:4d:72:84:bd:54:49:2a:
8e:bc:e8:3f:b8:f7:aa:89:1e:15:d7:01:cf:11:f3:2a:68:1d:
93:c4:e2:68:87:aa:51:c3:14:8b:de:9c:2d:71:32:5a:fc:3b:
1a:26:19:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:26 2025 by rpki-client