Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
File: hu-0nfJHSmBCufIQv-qGGxsohu0.mft (raw, json)
Hash identifier: IUmGYGs09qIiLcQANQ7wOqhZlXuWZoRYGlP5qIYt2oA=
Subject key identifier: BA:C9:1F:DA:92:A3:50:DE:65:29:9E:D9:B5:EA:06:97:2A:E9:02:97
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial: 0194BD853A4F55F4837DC38175536C3AA219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
Manifest number: 0AA5
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: FSXy2TtOSpMZ2XDcNKgNNiQnbKM.roa (hash: /T12WOhZaUuSku4ox6ePPcvZ8Y26JtVUn7Ay1gZp9DI=)
2: aM3cc5239WAy4buFXqwE6avsPpA.roa (hash: IiNQUlQAEuG6gzv/NjmTi9efglVA0BqHGXlQ4OoKAfs=)
3: hu-0nfJHSmBCufIQv-qGGxsohu0.crl (hash: LjxjtXgCuhzsaolZgQucL0RLqwAfBDKe41Fcs8DCPXI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3a:4f:55:f4:83:7d:c3:81:75:53:6c:3a:a2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=bac91fda92a350de65299ed9b5ea06972ae90297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:f9:0c:5a:7a:c3:bd:71:8d:46:24:2d:d5:
67:e7:aa:7a:9c:25:1e:38:19:61:b3:32:3d:c5:bc:
bb:2a:f5:d7:2a:df:d0:fe:08:53:64:34:1e:3b:f4:
a9:bb:1a:41:0b:0d:c5:88:af:80:95:a5:1f:3d:17:
87:86:d5:c5:54:67:da:8d:af:6a:a3:dd:cb:c8:15:
ed:5d:e8:46:1a:27:13:99:4c:d0:d3:44:c1:ca:f4:
85:a6:e1:b9:9d:63:41:93:c0:2c:ba:fc:ea:30:21:
52:d7:e6:af:20:13:81:b5:7a:e3:03:3d:fc:dd:cc:
55:a9:38:33:b1:bc:c3:ea:d9:38:33:e5:89:56:e5:
d6:ce:52:75:a3:79:82:7b:47:b8:59:77:bd:a7:f2:
6a:c4:c6:cd:de:6f:e8:f9:9f:4c:05:f8:9e:eb:5a:
52:44:dc:f2:82:42:41:52:09:17:e8:6c:ec:af:49:
e2:30:fa:8b:a2:9b:f5:59:59:63:9b:67:61:96:09:
43:36:70:4c:46:f8:b9:97:d6:b3:80:7c:d0:17:44:
23:b6:8f:36:47:5e:63:43:db:e1:a6:c3:93:5a:9a:
02:10:c6:5d:1e:b5:f5:3e:10:2a:97:81:4f:2a:6c:
0d:7c:5f:05:df:8a:27:dd:e1:26:9f:b5:51:2d:e7:
bb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C9:1F:DA:92:A3:50:DE:65:29:9E:D9:B5:EA:06:97:2A:E9:02:97
X509v3 Authority Key Identifier:
keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:4e:fc:0e:47:1e:0c:05:3c:71:a0:6b:d7:b2:c3:ad:dc:57:
d4:5a:e9:8b:d1:6f:00:47:30:53:37:68:b0:36:44:6c:2f:01:
a9:bb:b0:51:0c:e8:0b:c2:4d:e6:7e:59:73:e6:be:ef:f5:18:
42:84:c3:d4:4c:da:87:ed:11:9f:a5:17:7c:6f:fe:51:e0:43:
4b:b3:ec:03:f8:e5:f0:de:b6:1b:4c:19:05:91:89:86:d1:0b:
73:2d:fb:11:d1:d7:13:0e:07:92:8f:7d:03:09:3a:96:c1:04:
be:ba:dc:6a:a9:bc:c7:2c:e0:6e:20:90:93:d8:f8:78:c5:2e:
e9:3f:38:fe:bd:33:05:e2:63:05:df:c5:06:f1:4f:e4:e0:0e:
d7:52:d9:64:69:e3:95:e9:00:be:42:b2:b1:b9:c4:3c:49:4f:
e1:8d:4f:30:40:8e:a4:15:7a:50:9e:df:85:07:3d:66:f5:21:
fa:53:a2:06:98:9c:20:54:c6:eb:4c:51:63:30:a5:c6:46:71:
0c:df:6b:c7:96:70:17:be:56:f8:80:5f:52:46:b7:d1:a6:28:
f7:07:7b:19:5c:4f:20:9f:d4:ec:79:de:45:4c:07:b0:df:56:
13:44:5f:32:e3:0e:03:67:9e:57:db:f2:74:f2:e8:5a:31:5c:
58:93:7d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:48 2025 by rpki-client