Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
File: hD0a_PE70hF9R99oPkCmMocATP4.mft (raw, json)
Hash identifier: jU1SACKUM39fjbd0fi4aFcA3CDoRiiCZt41bgUaY7ec=
Subject key identifier: 3B:E5:52:13:CE:79:CB:15:FF:11:61:E2:E9:DB:30:B9:9E:72:FD:6D
Authority key identifier: 84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
Certificate issuer: /CN=843d1afcf13bd2117d47df683e40a63287004cfe
Certificate serial: 0194BC72E71ECD9B071B4B333BEA29AE5820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
Manifest number: 10D0
Signing time: Fri 31 Jan 2025 13:00:34 +0000
Manifest this update: Fri 31 Jan 2025 13:00:34 +0000
Manifest next update: Sat 01 Feb 2025 13:00:34 +0000
Files and hashes: 1: OvE7gVL8MCEWJHKpQXsF4bPe3UM.roa (hash: l4/jaJLOp+Avt+TjQWwkFvtdykblfc3pi7YpMoKQxCI=)
2: gRQ4yCuvseaLE57M9fowKbjZKdc.roa (hash: 2erIoIyPnSV3Zcfsjq1qAurwTSkvBBBTKvIM2MmgiUw=)
3: hD0a_PE70hF9R99oPkCmMocATP4.crl (hash: 5m9hn0ClZpwQZUbV1JrNCg3LSAhrSQRX95IgADWFVfg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e7:1e:cd:9b:07:1b:4b:33:3b:ea:29:ae:58:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843d1afcf13bd2117d47df683e40a63287004cfe
Validity
Not Before: Jan 31 13:00:34 2025 GMT
Not After : Feb 1 13:00:34 2025 GMT
Subject: CN=3be55213ce79cb15ff1161e2e9db30b99e72fd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:79:45:ed:1a:40:81:5d:38:bf:9e:d6:e1:
b7:6d:13:9c:c8:0e:6e:d8:8e:93:68:29:4b:1d:9f:
86:8a:ed:29:ad:0d:1d:57:dd:20:9b:1b:f7:16:41:
57:80:f8:69:7f:83:f7:a1:91:83:bb:75:6e:4d:49:
8e:36:78:a6:af:a8:59:e0:67:29:e3:81:a9:cc:83:
8d:44:1b:c5:07:ef:9b:31:2c:69:00:10:e7:96:e2:
3a:6d:d8:0f:38:93:45:24:d8:42:46:3e:3e:32:4c:
7b:b8:7e:4d:b2:89:98:8b:fc:a4:20:a7:6f:27:5e:
17:37:5f:0c:de:01:a1:f7:a9:ad:0a:f5:ea:c0:3a:
db:75:d9:86:87:b2:1d:aa:fb:eb:62:7d:19:88:d5:
48:02:25:69:d6:37:f7:de:b9:3b:af:22:ef:25:f7:
27:e6:da:bc:99:b0:69:fa:7b:94:ca:70:74:e9:7e:
9f:38:40:90:a4:bb:9a:a8:b7:7e:61:5a:ea:7d:be:
27:e5:0e:26:4f:87:57:4c:b2:80:ca:e3:45:63:60:
69:56:2b:38:a8:36:3c:66:2c:9f:85:45:66:f9:8f:
f1:1e:03:4d:63:81:b8:c2:c1:a8:55:a2:6d:29:8f:
56:19:15:b6:0b:3c:24:47:75:10:23:dc:c0:c3:a0:
38:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E5:52:13:CE:79:CB:15:FF:11:61:E2:E9:DB:30:B9:9E:72:FD:6D
X509v3 Authority Key Identifier:
keyid:84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6e:d0:19:de:7b:35:c4:58:0e:16:ee:f0:ed:15:d7:c1:a4:
f4:d3:09:1d:4c:f4:5a:c4:c3:ee:f2:66:c5:2e:4f:d1:53:d2:
33:68:31:b8:b3:a9:f7:fc:a1:f9:24:2e:06:b4:95:61:0f:ac:
80:31:52:91:cd:31:97:60:67:b3:df:d5:94:1a:17:e6:9d:ce:
08:91:2b:8d:d3:b0:ca:16:fb:6d:96:21:01:1f:14:8f:be:06:
ae:9a:95:ed:75:e1:c2:cd:90:e5:15:11:72:fd:9a:de:29:f1:
59:70:2b:1d:eb:a4:9f:90:f8:72:22:4f:9d:06:6d:ff:00:88:
21:7d:31:35:81:c3:57:1f:89:b1:0d:b9:1a:7a:21:fd:fc:6f:
ba:d7:47:5f:fb:0f:43:10:b9:b7:49:db:27:08:35:f6:9e:63:
35:d9:f1:84:55:1a:b2:0e:4c:aa:da:d2:e8:d5:a1:2c:69:aa:
68:08:55:04:7c:57:af:a3:d3:4e:c7:ae:d4:76:02:29:33:f4:
26:bb:4f:4c:71:54:7a:60:0f:1f:0f:6d:43:e7:55:d7:4a:7e:
00:fa:ec:61:ee:08:23:e9:1d:15:70:e5:b9:ab:c9:af:a7:47:
f7:33:d4:d1:26:f4:33:ff:48:2b:e0:b9:cb:d5:f9:69:1a:79:
30:96:86:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:10 2025 by rpki-client