Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
File: hZtbaj2CvQDtMcbOs66nrVke5Tc.mft (raw, json)
Hash identifier: uPFGd77AgBZM2OCcLkKruVVaWITP2Ir2fKseOp5TnMo=
Subject key identifier: 21:FB:26:C4:07:C6:C1:2D:4A:12:33:29:9D:FA:02:66:74:06:42:AF
Authority key identifier: 85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
Certificate issuer: /CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Certificate serial: 0194BC3C3113F5C82F6398D1AF8C5D2FEA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
Manifest number: 04D3
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: hZtbaj2CvQDtMcbOs66nrVke5Tc.crl (hash: jceIVD+oZWijFGfshZUzTEkN4MFcMO80SfhywCHUyoA=)
2: iDoekYbnPiOIxLiqr48QVJjIZ7I.roa (hash: BFGeDsq9cIJPFhHXYs9ml2z2YYV20g/bd7ZbGgfmSrA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:31:13:f5:c8:2f:63:98:d1:af:8c:5d:2f:ea:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=21fb26c407c6c12d4a1233299dfa0266740642af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4e:80:6a:bc:c3:93:65:44:5e:85:9d:ab:00:
0d:6d:88:56:a4:41:a5:4b:19:66:d2:f7:01:e3:47:
4e:f6:e4:28:15:61:1f:13:c1:f8:58:45:2f:31:f9:
01:a9:19:6c:39:0b:46:25:66:cc:8e:d0:05:66:a2:
5a:e8:40:1a:1d:8c:8f:c3:00:b6:e0:2c:ee:94:09:
4d:9a:e9:7e:15:92:5c:d6:27:35:f0:76:76:de:63:
91:67:9e:ec:bb:ee:6b:61:46:12:22:b7:cc:fd:5d:
bc:0b:46:3b:5d:c5:a6:07:82:21:a9:de:19:53:ee:
2b:87:72:87:be:57:02:ba:cc:39:ad:63:6d:df:24:
b4:9b:d9:eb:b6:67:6f:41:b9:6b:60:41:b5:28:ff:
98:f4:f6:b9:c8:c5:14:cf:95:f6:b1:19:d2:78:44:
87:4d:e0:8c:a4:0f:5c:29:eb:08:63:77:eb:34:07:
bb:af:8e:d0:70:71:8e:31:c8:33:70:89:d7:11:9b:
d3:5f:f5:40:d0:91:18:40:8b:f4:cd:1c:9c:10:a5:
ce:a9:18:60:5f:cf:91:17:56:42:9c:b4:5b:d5:98:
b2:7e:ae:fa:77:25:e3:fd:c9:b2:85:43:93:43:d5:
e8:37:33:00:11:bc:07:26:86:63:a3:0f:59:24:31:
ce:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FB:26:C4:07:C6:C1:2D:4A:12:33:29:9D:FA:02:66:74:06:42:AF
X509v3 Authority Key Identifier:
keyid:85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b1:06:00:7d:8b:fc:f1:eb:3a:24:20:ad:03:97:98:f8:4e:
00:5b:7f:35:05:9a:e7:08:61:ce:ca:fd:5b:10:e1:e4:62:15:
36:e9:9b:97:55:35:01:bd:ee:b6:40:19:a7:67:05:a5:47:77:
23:fb:a8:67:02:02:9a:70:46:ec:4e:8d:74:e6:94:08:c7:e8:
f4:30:36:38:43:b2:64:30:5f:ac:3e:b0:33:a3:87:b2:79:72:
ee:3a:e8:43:f1:15:05:6a:b0:7c:6e:41:85:0d:72:65:d1:14:
c9:16:7e:75:6c:8e:cd:19:53:31:b9:2b:d4:e0:9b:90:db:69:
4a:ec:d8:d2:2e:33:69:40:ad:c0:6e:f3:b9:b7:20:c1:c7:17:
91:4b:1e:d5:9e:cd:e9:8e:aa:80:f3:a3:aa:65:be:69:dd:3f:
70:22:82:74:ab:8c:95:ac:1f:a5:98:34:a6:f9:92:ce:fb:97:
c5:2b:86:3a:1e:a5:02:ce:05:83:51:58:b7:98:03:9a:29:8a:
37:f7:c7:68:3b:25:20:2b:13:15:c1:68:c6:ad:61:15:59:b8:
12:3a:1c:38:69:96:d3:e1:51:11:d6:7c:a3:64:fe:93:0b:3b:
53:7b:a1:9c:84:4c:59:fc:b2:16:97:47:ed:d6:eb:5d:56:b3:
46:6f:e8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:19:59 2025 by rpki-client