Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.mft
File: hWyvHy8CkUARBe9osllX3FVVENI.mft (raw, json)
Hash identifier: NeDzHj79h4SDbW33Y3MhvbVBaoVO16EN3ODmb99SRws=
Subject key identifier: 0B:D0:81:48:C2:44:6E:66:68:74:C7:15:40:D8:E0:9E:0E:AF:59:C0
Authority key identifier: 85:6C:AF:1F:2F:02:91:40:11:05:EF:68:B2:59:57:DC:55:55:10:D2
Certificate issuer: /CN=856caf1f2f0291401105ef68b25957dc555510d2
Certificate serial: 0194BBCDB4E1F126547EE3F71FCFCA8FB1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWyvHy8CkUARBe9osllX3FVVENI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.mft
Manifest number: 0F95
Signing time: Fri 31 Jan 2025 10:00:08 +0000
Manifest this update: Fri 31 Jan 2025 10:00:08 +0000
Manifest next update: Sat 01 Feb 2025 10:00:08 +0000
Files and hashes: 1: GpIZ4jE-9ieq_ECexQxa_m3ORPw.roa (hash: IjDJZYXavRzEltys5gXrAE3D7K9MgVcCUjh6DyqqaSM=)
2: hWyvHy8CkUARBe9osllX3FVVENI.crl (hash: 99rpfr00onjK0RhoVzPvQODvsNJsQGkSbgc0msRAhvg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b4:e1:f1:26:54:7e:e3:f7:1f:cf:ca:8f:b1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856caf1f2f0291401105ef68b25957dc555510d2
Validity
Not Before: Jan 31 10:00:08 2025 GMT
Not After : Feb 1 10:00:08 2025 GMT
Subject: CN=0bd08148c2446e666874c71540d8e09e0eaf59c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:73:3b:95:de:13:4a:01:7c:4c:1e:00:98:6b:
7b:67:ca:c5:d8:d5:b0:af:30:44:f2:36:59:71:c4:
4b:68:25:52:69:fe:41:0c:d6:2e:25:e2:43:88:cf:
aa:35:9d:a0:80:88:02:e8:4a:39:8e:87:21:95:97:
9a:d0:05:92:eb:2f:7a:0b:07:c0:79:76:ca:90:bf:
3a:3f:28:bf:96:e6:d0:80:ad:a9:d8:55:9c:ba:7a:
40:d6:f9:42:12:05:c4:06:02:d0:ad:84:cf:00:be:
b9:34:2f:94:3b:27:8e:a6:04:a3:43:21:57:57:e7:
c1:83:dd:a6:69:52:6f:ef:02:dc:1f:a3:aa:4c:99:
1f:ed:aa:47:57:f3:97:ff:1d:e8:50:a0:01:ff:d6:
d0:14:21:43:fc:4e:90:c4:96:81:74:98:5d:49:d0:
86:5a:f3:42:74:61:58:81:ef:8f:ea:cd:c8:66:9a:
f7:97:8b:18:83:f0:f5:7d:94:7e:40:f3:e1:cc:84:
bf:10:da:c1:d4:a4:4e:e8:2e:8f:24:04:20:53:71:
76:c3:37:44:f7:2b:de:20:f4:33:21:7f:6f:47:d6:
5e:7a:ad:9c:85:c4:4a:7a:71:4a:bd:dd:e4:63:8a:
bd:25:8a:31:54:df:08:42:98:9e:aa:54:a0:65:cf:
8a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D0:81:48:C2:44:6E:66:68:74:C7:15:40:D8:E0:9E:0E:AF:59:C0
X509v3 Authority Key Identifier:
keyid:85:6C:AF:1F:2F:02:91:40:11:05:EF:68:B2:59:57:DC:55:55:10:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWyvHy8CkUARBe9osllX3FVVENI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:87:53:ed:5f:c0:4c:c1:01:e3:97:e9:e4:ca:26:77:6f:61:
74:22:63:69:00:05:1b:34:be:09:f4:73:4a:91:29:20:cb:29:
f5:4f:da:7c:05:74:eb:78:e0:47:66:71:f7:c9:24:23:7e:de:
e8:0f:6e:7f:32:a4:8b:f2:67:47:61:24:ee:d0:1e:f7:26:30:
94:e6:b0:6a:1c:de:66:28:2b:4c:ed:e0:5f:10:29:d6:7d:19:
6a:1f:9c:ed:12:af:d1:f7:dd:63:af:ca:3a:d6:60:70:3d:28:
40:33:54:82:e8:55:19:e1:56:f0:94:60:14:2d:db:c3:ee:3c:
2e:4c:2a:b2:eb:39:dd:4c:8a:f0:cb:1f:9e:6c:2d:ae:ee:32:
62:d7:9a:43:51:c6:24:ab:e6:f9:8e:5f:97:27:d9:c0:fd:18:
4b:42:6c:b3:51:24:75:1c:53:f0:d9:b3:a1:b3:3b:6a:17:f8:
63:6d:a3:dd:2c:c5:e9:21:3d:1a:ad:92:f8:31:3d:e4:63:5f:
e6:45:ae:bb:2a:8b:8e:36:0c:42:52:ad:a5:96:b8:5f:6b:bf:
86:71:c0:71:1a:26:ae:eb:8b:95:ad:06:a6:7b:cb:55:41:1e:
6d:df:b2:40:58:56:66:70:be:d3:97:f1:ac:7f:dc:3b:b8:65:
1d:c0:f7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:51 2025 by rpki-client