Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
File: hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft (raw, json)
Hash identifier: Uv74ixdGKuMS72rHJnoOdOeiHqRNprojmrKmwZr+TCs=
Subject key identifier: 1F:46:52:4E:C9:2E:FC:A3:18:96:82:C8:EB:0D:C6:ED:0D:C0:C4:75
Authority key identifier: 85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
Certificate issuer: /CN=852bc145c5b22394d6feae996bc0bb25254801c6
Certificate serial: 0194BBCE0BCEDC4E6B36D98EA6B8D811361C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
Manifest number: 0139
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: UUl9tjMfoZ7A5klfeBDKB274xTs.roa (hash: SBvHQQieYmwuldne0ESh4KLqZuA1XSHveZCrpCqrHvQ=)
2: hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl (hash: 686gfal/DvFzqFSqhYogmAKRvim7IGjETc1Cv3qBcwc=)
3: k3kU5aAomwikuRNdsT68Tqjcik4.roa (hash: wCPtZXM9gkCUtgXFEirTaWeSRaiZvXJy0sUEtKPb0ls=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0b:ce:dc:4e:6b:36:d9:8e:a6:b8:d8:11:36:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852bc145c5b22394d6feae996bc0bb25254801c6
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=1f46524ec92efca3189682c8eb0dc6ed0dc0c475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:22:67:98:7b:00:38:0b:d4:65:4b:4f:77:0a:
35:fb:de:e3:b9:ce:10:fe:20:cf:40:55:a6:34:da:
a3:58:eb:e8:df:b6:48:91:c3:44:b2:61:c5:74:40:
b8:73:32:61:51:a2:10:40:9d:d2:6f:db:09:85:63:
a8:e6:2c:5e:32:5d:14:28:e9:02:91:f0:e8:4c:5a:
0d:a6:87:39:35:20:ce:b1:08:c4:6c:bd:46:a7:d8:
89:e9:68:a1:80:8b:44:c0:a7:52:20:b6:05:00:ed:
46:bc:9b:1a:49:ae:be:de:66:de:4f:cb:6b:4c:46:
82:a5:c3:fc:76:7c:08:7b:88:e0:1c:6e:d7:70:d6:
f7:1e:17:34:af:76:2a:f1:de:33:64:d0:3b:eb:6c:
85:e3:28:e4:f5:15:92:e3:ab:6d:b5:f3:87:67:50:
92:ab:a4:13:b2:31:cc:d9:f8:98:bd:b7:92:9c:7b:
e8:b6:f4:34:26:b1:9a:6e:26:62:7b:f8:d4:72:e2:
13:88:ae:bf:bc:df:a2:b8:22:a1:68:46:c6:57:5a:
bc:61:af:86:92:ce:b5:35:a6:1d:08:80:d4:a0:64:
fe:00:45:3d:10:38:8d:53:68:8e:df:c0:de:25:8b:
99:33:7e:01:5e:d2:e0:af:45:a2:cf:a0:55:f8:b5:
25:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:46:52:4E:C9:2E:FC:A3:18:96:82:C8:EB:0D:C6:ED:0D:C0:C4:75
X509v3 Authority Key Identifier:
keyid:85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:19:16:13:87:11:cf:a1:48:0f:1a:2a:54:9f:70:4d:4a:cd:
2a:8b:3f:06:7b:af:55:ab:82:13:02:92:b2:f4:90:48:85:fc:
bd:86:37:69:dd:25:6e:ac:f6:69:d3:03:d5:11:5c:e6:00:93:
c1:21:86:77:17:9e:0c:c3:82:d5:18:49:ee:a3:48:dd:e1:72:
2d:25:9d:10:bb:08:89:7f:6c:27:2c:ac:e7:1b:a9:16:59:28:
49:95:2a:1d:65:a4:7e:91:49:7b:36:5a:e7:4d:01:00:12:8e:
21:52:ad:55:a8:d6:60:4c:f7:df:40:05:73:89:0f:93:1c:72:
73:0f:9e:17:06:96:9d:df:cd:41:8a:07:5a:be:ac:d3:5d:58:
af:ef:69:0c:e3:52:11:e8:24:24:40:2a:d8:a1:91:6e:77:73:
14:91:1d:ae:4b:6b:fc:c5:2e:d2:f4:0f:d8:ac:66:13:9b:91:
f9:39:e5:60:19:4c:bf:39:91:78:b9:9d:19:60:09:17:75:70:
05:40:1a:4d:50:44:7d:81:2e:62:ee:ef:45:53:0b:f1:71:72:
d5:60:56:df:63:de:25:4d:1f:0b:5c:d0:c6:ea:38:72:98:28:
95:a4:6c:37:9e:bf:46:2b:9d:d7:e6:9b:2b:2c:e0:82:f6:01:
0b:9a:bc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:29:17 2025 by rpki-client