Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier: ZZSEaaPIDqynU8GUINQ9EwCEZUL4Gkjdrk99HUtwUUc=
Subject key identifier: 65:1B:E7:88:C4:0E:9A:40:F9:FA:BC:94:3C:71:DE:F4:B4:CF:BE:5A
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 0194BD4E821CBC134C2B680A7904AB193CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number: 04D8
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: PInwxeRmXqybON5cwge4vSvBGWA.roa (hash: 4bCieqFiMwnJv0UAlZvP326qQk+j/iel0eeDXFzOp5s=)
2: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: 6g59Xj3W7awMExlYXQ5ImLibK+YYfbSOmfuHtNVC/tQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:82:1c:bc:13:4c:2b:68:0a:79:04:ab:19:3c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=651be788c40e9a40f9fabc943c71def4b4cfbe5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c9:88:0d:f4:fb:52:02:7f:67:ab:fb:bd:1e:
fc:32:8b:3b:28:6c:af:ab:5a:98:fd:7d:b9:be:6c:
ec:f9:9d:a1:3d:7d:68:4e:b4:92:72:1a:4e:fd:d1:
84:f1:91:88:9f:a5:4f:f3:0b:6d:52:6f:8d:98:38:
85:02:c9:f1:82:22:ec:77:43:af:82:1d:b0:45:f7:
a4:e3:24:c7:30:5a:b0:8d:8a:1c:97:62:52:8c:86:
a3:c3:f2:b1:66:db:82:f2:54:d2:5d:3f:17:34:f3:
88:cf:c2:96:5f:c5:28:e7:7f:40:a5:46:80:a9:78:
4f:d1:bd:af:32:70:42:3b:1d:c7:ff:9c:37:0b:da:
bf:63:13:5e:97:c6:c2:0e:70:00:08:90:83:44:88:
a2:53:3d:53:f4:73:32:ed:91:9e:6e:93:8f:d2:23:
a6:4c:58:91:8b:7f:45:32:25:2d:63:55:da:86:2d:
4a:18:36:9e:04:a4:16:2a:2f:69:1e:82:ef:14:ab:
0b:4c:35:02:05:6e:ce:ac:b8:61:2b:c0:1a:f7:b5:
61:f8:57:a4:05:d0:60:d0:57:e3:68:09:dc:c4:87:
55:f2:52:85:63:2b:1e:58:48:29:55:0c:fa:02:1f:
04:98:f8:4f:b9:7d:69:8c:a8:b1:fa:b4:97:f6:6c:
36:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1B:E7:88:C4:0E:9A:40:F9:FA:BC:94:3C:71:DE:F4:B4:CF:BE:5A
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:af:f3:65:92:d6:90:07:e7:b0:07:60:1c:a8:22:ce:03:58:
81:d5:c7:69:1a:74:95:85:3b:e8:a9:96:df:14:e4:8b:0e:e1:
99:b1:42:72:fd:5a:5f:84:e1:26:44:e9:98:24:e6:03:4f:58:
88:11:05:06:83:45:31:56:52:96:f6:7c:87:c0:ab:9b:8b:be:
1d:5c:fe:9d:f4:04:a4:d1:20:2b:01:90:92:d7:16:a5:11:dd:
4c:03:ed:d9:fe:23:34:89:64:4c:a7:b1:fa:71:be:c9:d0:80:
ef:2f:a1:7a:91:59:e1:1f:79:f6:76:83:b9:48:0f:8e:9e:08:
19:c2:1b:4a:39:63:d3:c1:4a:5c:ba:9d:28:9a:13:3f:cc:f0:
95:75:04:c5:ec:82:03:78:1b:91:e5:04:62:b5:fa:f1:14:de:
73:e3:63:65:61:cf:59:35:21:64:1f:fe:ad:52:95:c1:e4:67:
dc:49:79:f5:3a:d1:a2:04:10:24:05:07:8a:6d:24:07:04:49:
f6:a5:73:37:20:c3:8e:8e:36:06:0a:1b:e6:c3:f5:e9:a6:10:
17:d6:ae:90:a1:0c:80:1c:dc:2a:f4:6e:66:70:de:68:3b:30:
9e:d8:b2:94:e1:1e:aa:57:99:a8:dc:62:9b:32:b6:91:3d:30:
71:0d:c9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:51 2025 by rpki-client