Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier: NBC6oZsgeywLToeHrCnmzm4oJ5pSgDA1RjTghS0zhmE=
Subject key identifier: 3D:91:59:0A:4F:E1:6B:58:01:91:CC:E0:C0:66:EE:3A:10:EB:18:90
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 0194BBCE13B326EEC6766F6B382318B70388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number: 0E2D
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: JQTWtShPwGEwVFU8i8E82c7erRQ.roa (hash: AWyFT4kOA1zNKVFniNaOQlkLDIns54LN+qDhlyph/BU=)
2: nc7DP5U-Jl22CsJJw2phARU5j0c.roa (hash: rdcrf8/30vk8VHZdwnISLBUlsokPeOe7cBYMpoPH+B8=)
3: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: fMpRJVL+vhwm1SRRfcsOirJCNVkdN3xtT/ztEGzczUI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:13:b3:26:ee:c6:76:6f:6b:38:23:18:b7:03:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=3d91590a4fe16b580191cce0c066ee3a10eb1890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a1:7f:8f:71:3f:93:9d:0c:16:e9:17:1a:a0:
ca:c9:c1:b3:c3:e3:99:42:e2:0e:7e:57:55:5d:a9:
cb:66:9a:9d:45:3f:1e:04:0e:cd:9d:82:39:ee:28:
1b:ec:f0:94:fb:f9:33:ab:3f:07:ba:90:81:a9:b9:
40:f7:52:eb:be:9f:8c:36:b8:d4:2c:2d:7a:de:73:
1d:f6:ec:09:b5:d8:20:c6:73:75:14:43:8b:b2:4c:
01:8a:95:57:05:bf:92:a3:f5:1e:e7:94:54:4a:1b:
7f:de:91:17:f7:83:c3:79:26:13:67:2b:53:81:2c:
dc:ce:8c:07:32:7f:77:a9:dc:06:0b:0a:b2:0f:82:
c7:d7:56:f4:bb:5e:ab:e7:b9:2e:1f:34:07:b3:f5:
bd:83:e1:c4:cb:75:f4:ea:01:82:62:cc:d7:c2:f5:
fd:98:3e:00:83:66:e6:c5:e5:83:3e:c8:e1:b9:5d:
5f:5e:03:a3:2a:a1:61:65:13:67:2c:51:b3:a2:5f:
33:ae:3f:5d:2a:51:02:56:ec:f7:5e:b5:31:2c:71:
92:5a:f1:6d:52:1c:5e:a2:6e:a0:42:a9:67:35:68:
f3:d0:1f:81:a0:21:b3:e0:e6:ee:04:fc:d5:f7:cd:
d2:e3:d8:4c:d0:0a:e7:51:7e:c1:06:c8:34:f5:65:
dd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:91:59:0A:4F:E1:6B:58:01:91:CC:E0:C0:66:EE:3A:10:EB:18:90
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3b:60:56:a8:19:a0:01:8a:33:8b:5a:f9:1d:75:6c:fc:0b:
29:32:69:18:77:bf:f1:31:fe:d9:38:0d:2c:d1:d2:0f:8a:4c:
15:20:39:3e:b4:59:d4:eb:70:74:a5:29:ef:86:56:3a:32:1b:
5e:d3:23:90:c3:68:fa:d6:98:0b:f9:7c:6d:b0:01:56:7a:20:
72:d0:ab:0c:66:db:7a:7b:b7:e8:5c:db:48:27:9d:e8:71:7e:
52:fd:26:1f:a5:93:c5:6b:1f:a2:e9:e0:50:ab:c4:90:21:d3:
4f:d4:f7:87:ae:7b:66:d3:35:64:72:92:58:3a:29:38:68:60:
0f:e7:2e:ad:5b:38:df:b4:56:18:df:9f:38:d8:fa:15:5a:12:
f5:b6:2c:86:88:64:fc:76:bf:7d:6a:38:42:4f:d9:f2:2d:1b:
b9:16:df:44:02:26:01:dc:d5:94:6e:eb:cf:b9:6b:7b:14:2d:
c9:c1:57:b9:12:43:5c:3d:4c:24:5e:d0:0c:3d:65:4f:c0:1c:
1e:04:d4:f1:0a:73:2f:13:4e:d8:9e:b6:84:50:f7:01:04:ab:
01:ce:bc:2a:48:a2:3a:f4:97:0e:fc:f0:8e:17:84:a3:ef:e5:
69:be:73:78:c1:73:25:03:63:3b:3b:a5:36:55:1f:aa:4e:e9:
d9:81:f9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:42:41 2025 by rpki-client