Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
File: hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json)
Hash identifier: J3ew5d3Vhsx9GL/eRvcB8CoqsYrM96YFV4OnKwEqGpw=
Subject key identifier: 2C:83:A5:2F:D9:1E:0E:18:BF:C9:24:78:D6:8C:13:A8:3B:FD:0B:67
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 0194BC729A4A4426548DAC53D715B69E0194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
Manifest number: 0D6F
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: bY5mkAJO0t1esNNj9cEpQ4nzKkc.roa (hash: z13XZYVRnwVPeNhKWRhYmONg5auw0wvV41lj3Dj2Gf8=)
2: cLEKj8GM0acRn7Cs8v580FPbBBs.roa (hash: wo0XTDsRYRsl1PGcvpAOP0n7UmXDd0OQihwCBpXGJ9c=)
3: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: 1xmjs1It/Iwq0HESG0r5hs+FiR+gopcrW1/MqGBhYKs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9a:4a:44:26:54:8d:ac:53:d7:15:b6:9e:01:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=2c83a52fd91e0e18bfc92478d68c13a83bfd0b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:cc:0c:a1:c6:fb:9a:18:3f:5e:15:ce:81:
b7:9a:74:a6:db:a6:f8:3c:47:83:1d:af:98:6b:42:
60:87:d7:80:33:5e:d1:ea:fe:e2:63:18:2c:e7:26:
93:5f:63:83:e6:62:a4:c3:8c:d4:e5:26:5f:35:1e:
7f:d0:9e:b4:4a:b9:96:11:32:75:02:77:bc:23:b4:
38:5f:d7:3d:4b:a7:ab:8e:87:4b:17:a0:b3:ba:fd:
8f:b0:0a:8d:33:f8:59:8e:c3:9c:4f:90:f7:5a:b8:
99:cb:47:14:93:f5:54:97:4e:4b:5a:8d:c3:c6:9f:
55:28:72:4e:4b:61:bc:cd:1f:e1:34:8f:37:46:44:
9e:0c:fb:1e:7a:15:a6:0a:e4:0a:60:3a:f2:10:f9:
f2:3c:9a:47:4a:e7:ff:21:2a:ad:8a:e7:dc:e0:85:
fc:73:ff:9d:3d:68:b4:cf:91:b6:34:48:26:1f:b3:
3d:dd:58:51:a5:7a:7f:10:33:22:1b:72:01:37:86:
a2:42:ee:de:26:5e:d5:d2:7c:e9:7d:0c:0f:8f:92:
88:b7:4e:51:ed:15:5b:5c:1f:14:e1:83:4a:7a:2b:
2f:fb:c7:90:9f:a0:a1:8e:e2:7a:a1:05:55:1a:6a:
e4:05:2d:a8:fb:de:d7:51:83:de:a5:09:87:9a:eb:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:83:A5:2F:D9:1E:0E:18:BF:C9:24:78:D6:8C:13:A8:3B:FD:0B:67
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2a:fc:97:6b:6a:90:c6:ee:e9:f3:b4:bd:6b:54:43:0b:44:
22:49:a0:cc:87:28:bc:ea:c7:41:7b:c6:eb:94:d0:e0:b3:2c:
63:3f:b9:eb:d0:6a:c4:01:c9:19:3d:83:57:bb:38:ca:d5:7a:
3f:b9:b9:a2:fe:15:44:f0:93:a4:3a:9d:ce:50:6d:e3:29:bf:
17:04:b3:80:89:70:46:01:51:5c:ad:f9:cb:4a:ee:b4:6b:e9:
6e:1f:66:b1:ca:84:9e:1a:b8:c4:dd:50:7e:26:51:b9:c8:34:
38:bd:03:a8:03:b0:1f:2b:77:f2:d0:8d:01:2b:9b:f8:84:e9:
ad:dc:e4:2a:ec:44:b5:1e:e8:ce:f1:89:11:c1:30:0f:bd:16:
5c:00:ca:f8:13:a8:6a:bc:92:9c:32:99:ce:b2:06:26:d7:d4:
59:34:25:28:b9:49:81:22:d7:18:e6:2d:6c:e5:cc:8d:95:43:
30:b1:c8:60:27:13:82:f9:21:f0:08:41:98:8d:d6:ba:2d:76:
9a:46:f0:fb:6b:c8:b8:6a:4b:29:cd:52:3e:b6:60:dc:3f:ad:
4f:d8:f2:0f:45:c0:1d:17:6e:73:b2:55:7e:e9:ad:87:1f:ff:
d1:5b:f8:1b:c0:75:11:74:3d:a3:8c:42:19:f9:dc:8c:2a:39:
b9:80:a3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:49 2025 by rpki-client