Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
File: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json)
Hash identifier: 936BfS31Cq8EcSrzP2Ievv2SRuJXboh+TYkh2n/RhYM=
Subject key identifier: EB:1A:9B:5B:81:D3:47:2A:7B:8A:FA:84:9F:2D:6D:5E:2C:61:6E:78
Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Certificate serial: 0194BC04F638EDED029629656E847BB79FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: YOyr4rKnnzDrXdmtMOktrTLMhdg.roa (hash: 9XaoEGH44aifrIE9gnosDm/sLWWt90nSBonwPhD6BKU=)
2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: RgvZijPlCpk/uJkx/LtoVGqmE2TwQVE64Iw5lV/XmNM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f6:38:ed:ed:02:96:29:65:6e:84:7b:b7:9f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=eb1a9b5b81d3472a7b8afa849f2d6d5e2c616e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bd:14:b7:1c:7c:cb:bf:0e:19:21:cd:f6:68:
a6:08:7f:e6:e5:67:02:0f:60:c5:da:5b:e5:6e:bf:
75:1d:57:48:83:5b:b5:f6:be:e6:bb:3a:db:b8:e3:
3c:ec:92:79:d8:fa:9e:4f:97:f7:4d:e3:03:1e:7c:
26:54:1a:4f:93:ef:02:cb:6a:14:ad:3e:5f:33:80:
8c:3c:99:89:03:dd:74:4e:97:41:8b:7f:65:2f:af:
df:87:8a:f6:c8:1d:5c:fe:79:6a:c7:1e:86:cd:c9:
30:d7:87:89:b7:d0:b2:30:e9:e0:87:b4:7f:5a:a2:
ce:62:3b:38:95:62:82:46:b0:ee:58:79:d3:9f:38:
7e:48:75:cf:d7:4e:f6:7b:1b:88:1a:30:11:05:df:
2a:56:0b:61:9a:42:82:bf:13:7e:18:31:3f:f3:3b:
7c:82:2f:44:99:42:3e:b7:0c:90:4e:8e:17:34:f6:
e7:c2:4e:63:30:37:47:c1:19:69:fb:e6:5c:fb:56:
86:ed:a8:61:3f:8a:19:83:18:4a:15:cf:5e:ee:ad:
e5:41:49:d1:0d:ec:b6:97:7e:2e:c7:52:c5:ee:4d:
0f:7d:71:6f:93:77:d7:c1:5c:46:2f:6e:fb:21:01:
3e:76:d0:10:40:0a:21:82:a3:38:c3:1c:e4:a1:6d:
59:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1A:9B:5B:81:D3:47:2A:7B:8A:FA:84:9F:2D:6D:5E:2C:61:6E:78
X509v3 Authority Key Identifier:
keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2f:03:0f:38:df:14:11:ab:46:1e:e3:ae:d8:de:6f:78:74:
c8:68:c9:ce:42:68:a5:91:0d:2a:12:a8:24:93:e9:a2:8a:92:
29:95:10:0d:4f:a3:83:46:7e:94:86:fb:7a:1e:56:b9:86:09:
76:70:8f:d6:81:78:1a:9e:9f:90:5c:ab:6e:83:22:a4:b0:e1:
08:bf:9a:32:40:41:f8:ae:c8:ee:4c:87:36:9a:5a:26:d7:dd:
d5:5d:7c:cf:4a:0d:1b:e5:6c:48:6b:be:88:b6:14:b7:c0:10:
a2:bd:3d:ed:db:d5:1f:46:24:b1:22:5f:b9:aa:1a:58:8d:07:
40:ad:33:d8:fe:bd:66:af:64:fe:dc:46:d0:0d:0a:f8:4c:af:
68:e2:ef:d4:1e:cb:26:56:af:39:4d:7a:ea:1b:71:2e:95:8d:
0b:cc:1f:1c:0f:04:6e:35:76:e6:a0:f6:91:bd:e9:63:d6:fd:
f6:8a:73:90:ff:12:e0:7f:b7:1a:38:e3:1f:81:a1:87:33:f0:
85:43:98:2b:9d:cb:06:99:ae:d0:5d:63:ab:4a:04:c6:22:da:
78:34:be:6d:ab:7b:62:91:08:b5:8d:e5:ad:a3:c7:e9:68:cc:
0e:37:16:7e:39:d9:20:49:1d:d7:f3:08:d7:80:15:83:14:43:
f4:6c:79:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:00 2025 by rpki-client