Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
File: hJICE8sjC_5REhzl-03s4oAYvtA.mft (raw, json)
Hash identifier: BpHD5Udzfhvninsy1z7fPHnQaWoHUadXePgfjZecDJA=
Subject key identifier: DC:24:1E:E5:EC:A0:F6:8A:AC:8E:CF:D8:16:E3:22:83:42:46:8F:6C
Authority key identifier: 84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
Certificate issuer: /CN=84920213cb230bfe51121ce5fb4dece28018bed0
Certificate serial: 0194BC72E1CF0105D90B70F33DB41210FFA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: hJICE8sjC_5REhzl-03s4oAYvtA.crl (hash: caqFmtoRN7/wOAl7prvb3rprNNQJbPiqQw1cK58B468=)
2: zYnN-i8U1PX-vVy0Kko-kLxeBsU.roa (hash: SDcPgjrr8y9zPr3/XTNgtJ+0oZH17N4IYV4VzMId4hs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e1:cf:01:05:d9:0b:70:f3:3d:b4:12:10:ff:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84920213cb230bfe51121ce5fb4dece28018bed0
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=dc241ee5eca0f68aac8ecfd816e3228342468f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:a2:55:ad:78:d2:30:f0:28:95:8f:bb:87:
6f:18:f6:35:bf:bb:8a:a7:42:f4:82:a6:60:c0:b4:
23:c2:fa:62:e4:cc:18:97:5a:c9:b3:77:5d:7a:26:
fc:00:82:c7:77:64:fd:a8:67:14:20:49:36:86:fb:
e2:81:c7:7d:36:72:c1:82:d8:9a:70:52:ac:75:e4:
f3:73:5e:b3:f5:08:e1:35:7e:de:40:6b:8c:cf:06:
31:83:8d:1d:c8:84:59:3e:48:bd:ff:5c:18:ab:69:
fd:c9:d8:2b:a1:0a:d8:76:85:6a:6c:f3:bb:d6:71:
21:9b:41:ab:4a:79:b1:63:84:9c:8d:df:07:6d:1a:
ed:4f:ab:0f:5b:c6:08:8d:e7:97:8a:90:bd:ab:84:
33:55:74:ec:e9:b6:32:ce:62:12:4b:17:db:30:d8:
30:a4:25:a2:4d:cc:59:31:a8:87:7c:75:39:b7:86:
0f:9e:1c:4a:dd:90:10:15:cf:9b:7c:d8:48:d9:66:
de:2b:f4:c9:96:cb:11:c4:82:c1:fd:12:a8:1d:3e:
d9:6a:90:09:3d:2c:14:67:b7:5f:af:b1:af:4c:23:
aa:9d:c3:fe:38:52:8b:1d:5f:d5:39:86:bf:5d:46:
58:5c:4e:30:91:60:5c:f1:4c:3f:34:90:99:43:77:
81:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:24:1E:E5:EC:A0:F6:8A:AC:8E:CF:D8:16:E3:22:83:42:46:8F:6C
X509v3 Authority Key Identifier:
keyid:84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:7c:27:10:7b:33:a6:e0:60:4d:46:dd:45:ec:21:7d:2b:d0:
76:6a:3c:8a:3f:3c:79:60:d8:df:1c:94:9b:fa:61:d6:39:55:
13:ae:1e:1b:d1:6e:be:e2:52:b5:9c:73:f5:06:37:d6:04:ce:
ce:5b:d5:b2:34:57:fb:2f:c3:ce:a6:e8:e8:fc:ee:40:57:e0:
ce:39:62:6a:d3:ca:f7:78:5d:6f:37:47:5e:3f:ea:c2:04:e1:
8d:41:ed:65:30:3a:52:c1:28:07:a1:94:b4:e6:ac:20:cc:6a:
55:76:1d:a2:ed:4e:f6:5d:2a:93:dc:5d:80:61:9b:0d:04:10:
a7:74:87:5e:2e:57:49:85:a7:e3:eb:38:c0:dc:20:28:af:ef:
3c:aa:08:79:be:71:d7:ea:e5:f5:25:ed:cc:ca:98:16:60:dd:
d2:ed:c4:46:bc:20:ad:9d:c4:54:e6:dc:90:85:82:8f:00:7d:
bd:03:29:a7:0a:fd:83:b3:21:cb:ed:33:16:4d:d9:2b:97:c6:
71:16:78:72:c7:5c:6e:b0:1d:09:14:70:b5:50:e1:e2:c7:b1:
d2:f8:5d:56:36:08:2c:9b:a8:f2:ac:fd:a5:7f:50:80:e7:99:
07:4e:58:41:fc:37:5b:82:f4:c1:28:c9:31:ab:01:4e:dd:61:
08:04:1b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:10 2025 by rpki-client