Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
File: hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json)
Hash identifier: slle+SGMaL6OlNne9eLdh8m+uxmLrh0/yHZiILGK978=
Subject key identifier: 92:D6:D3:3A:58:9B:08:20:A3:D0:CC:51:7B:C6:B5:35:47:78:AC:4C
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Certificate issuer: /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial: 0194BD4EA60BBBEFDA7E9F69EE3F4B474294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: E0KbPb4RfPbI9ii_1fNlFCQuDLw.roa (hash: be5+koswrVopdsotzqVNJfSpffEio3grzLc2KrNQKj8=)
2: ExjSEeEAZl6w67KQQzB9tboEijs.roa (hash: kHRGvr6/I9lpmyPu60rCwXrYtjs7atLNb5bTbjbxNMY=)
3: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: PIqu1kUMHv1Dxo/J9MPSYFDfyhXIJoiqEsQGGY/Hi0U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a6:0b:bb:ef:da:7e:9f:69:ee:3f:4b:47:42:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=92d6d33a589b0820a3d0cc517bc6b5354778ac4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:44:5e:8e:d0:8e:f5:63:c3:42:86:49:84:
af:06:ac:99:98:a4:17:da:09:8b:8d:50:55:cd:58:
0b:b1:75:3c:11:64:c0:2c:1a:ff:91:fd:06:0a:02:
fd:03:35:b0:e6:42:a1:fd:31:4d:42:8d:11:68:23:
04:97:4f:b7:b2:85:f5:a7:0d:b2:b8:d1:bd:07:36:
b1:78:e4:44:60:20:8f:fb:cf:cf:64:8c:a6:8a:6c:
42:df:2d:d8:2a:24:74:ef:0f:c0:b0:9d:d8:02:17:
89:67:33:e9:83:a2:24:df:ae:7c:85:5a:7e:f3:66:
11:2c:e7:9a:33:7e:1d:88:f6:13:fa:e7:7d:b6:cf:
8a:f8:47:19:89:88:0f:7e:a1:12:dd:5e:c7:42:32:
71:05:65:05:7c:24:dc:7a:6f:e8:6e:fc:36:87:66:
a1:a7:d6:34:29:ea:7e:69:4f:71:ca:67:b1:dc:75:
58:cb:6d:d2:1e:19:c2:4d:c7:8e:c9:59:ec:23:81:
4a:38:de:bc:04:54:77:a3:24:ec:b5:eb:d7:4d:08:
76:de:b5:51:43:8b:59:94:c2:fa:4c:aa:7b:ad:0f:
29:84:9f:9a:47:b1:eb:be:f6:46:b4:ff:46:d4:f0:
9f:1a:5a:9d:c6:75:24:be:41:c5:42:bb:de:8c:47:
3d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D6:D3:3A:58:9B:08:20:A3:D0:CC:51:7B:C6:B5:35:47:78:AC:4C
X509v3 Authority Key Identifier:
keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:d8:26:c8:3c:de:be:41:19:30:f6:28:a6:ad:d7:f7:56:89:
56:60:11:1a:c6:9a:4b:e4:68:12:6b:61:00:17:a9:99:6e:f1:
c8:0a:21:f0:75:95:97:49:c8:30:db:95:2f:6c:82:8e:91:59:
7f:da:4a:bf:a8:e5:af:e0:c1:f9:24:1e:ae:17:96:30:27:a8:
cc:92:45:70:ba:35:48:ab:f7:9e:52:dd:21:14:67:d9:27:0e:
87:cc:5f:6f:fd:9d:51:50:22:9f:60:3d:02:d2:10:89:1e:e4:
09:f7:72:76:7f:14:69:d8:da:18:7b:ab:74:9e:9f:64:d2:23:
bd:9d:52:e1:8b:3c:3c:ce:3a:ee:00:c1:e1:1f:21:9f:79:09:
79:0b:ed:fc:41:1c:72:4e:01:5e:51:32:bc:12:ed:ad:e7:94:
6d:df:32:ef:26:44:18:e3:3e:70:ee:e3:bb:be:f8:0d:ca:19:
9b:1d:2e:fb:05:ae:86:57:c8:10:3b:86:f9:d1:b2:46:c5:34:
07:87:36:4e:eb:18:83:b0:74:ff:76:df:79:51:9c:6d:d1:a6:
54:e7:c2:3b:1d:58:4f:ad:8a:05:5a:16:96:85:82:49:03:2d:
e1:4c:2f:76:e3:b9:3a:aa:af:3c:5c:fc:be:99:86:30:f2:d0:
fd:92:a7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:51 2025 by rpki-client