Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
File: hE9-ZplcmUow0IaHEQv9apoFYTQ.mft (raw, json)
Hash identifier: Ru2YUpGEvlPnYPp8qDpmbD/63wOuK1+YF3S1tVOVbBs=
Subject key identifier: 32:F5:C0:2A:16:A4:97:C7:90:8F:78:F0:EB:CA:41:88:B3:75:D6:20
Authority key identifier: 84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
Certificate issuer: /CN=844f7e66995c994a30d08687110bfd6a9a056134
Certificate serial: 0194BBCE3CD56EF2BE36628EF2A3680B9304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
Manifest number: 050E
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: VVQWLUW0daB7T4jiaSXgxXCl4ZE.roa (hash: RAYdTMRTLrvbEHCokIXafnM5optXUCpT7i2/x7+Zbyk=)
2: hE9-ZplcmUow0IaHEQv9apoFYTQ.crl (hash: MAgcHSJ4TzXCIf1daDbxVMBOjR17WXVvltSua/2Wq+g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3c:d5:6e:f2:be:36:62:8e:f2:a3:68:0b:93:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844f7e66995c994a30d08687110bfd6a9a056134
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=32f5c02a16a497c7908f78f0ebca4188b375d620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:30:fd:f5:2a:52:53:a8:ec:51:fa:7d:f4:
ba:f6:2c:bc:40:47:d1:a7:9a:56:db:08:ba:e2:05:
2a:30:33:70:b9:69:bc:00:49:b3:40:a5:57:5d:ed:
fe:24:b3:8a:18:e7:77:11:4f:ac:e0:4e:55:89:28:
1a:57:dc:2f:68:1e:97:4e:e7:41:89:9c:d9:73:ac:
fc:54:49:31:c8:6f:db:2c:b3:cc:3e:46:16:54:75:
2d:49:e1:84:f9:2f:b9:87:f4:03:2e:f6:56:71:d2:
1d:67:1e:68:d1:53:78:6d:85:57:25:20:40:a7:5f:
ae:e3:17:82:aa:a8:29:a4:b2:97:08:42:95:21:de:
de:6f:7c:77:6b:a1:cc:82:eb:00:9b:8d:7d:95:7f:
61:c9:86:a9:3b:c4:b1:47:f2:13:37:d7:9b:0a:f5:
b4:cb:5e:62:99:24:8b:1f:08:f4:cc:14:ad:97:63:
0a:a1:5d:4c:4f:f7:b7:45:23:8b:3e:a0:db:e5:e4:
97:15:47:04:da:be:59:87:42:02:6d:b8:1b:58:7f:
cd:d0:bd:18:1a:fb:01:b5:cb:60:55:7e:de:b7:8e:
99:84:18:75:0a:98:76:5f:65:77:5c:aa:7b:0d:ea:
72:91:5d:b3:0d:9f:c3:4a:07:52:e9:f8:90:fb:c3:
7f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F5:C0:2A:16:A4:97:C7:90:8F:78:F0:EB:CA:41:88:B3:75:D6:20
X509v3 Authority Key Identifier:
keyid:84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:27:07:c4:6f:3c:3b:db:8d:72:7a:5e:2d:17:b2:bc:98:32:
3c:34:1a:e2:64:31:31:84:ce:8f:a3:4c:be:85:df:f5:b1:e3:
59:d2:d8:56:9f:d8:4b:51:0b:cc:eb:06:21:a5:d2:5f:50:b5:
cf:ed:c9:02:7e:50:3b:b9:da:a7:03:ed:b3:4a:48:30:87:56:
07:dd:55:f7:05:80:16:c0:e4:8e:62:69:ee:41:c0:ba:d0:7e:
89:02:04:dc:71:56:a4:42:93:ab:fe:16:76:10:2d:f6:3c:ce:
ad:c0:32:4c:a5:cc:2d:67:93:44:01:96:43:16:41:10:07:65:
75:ee:67:e1:1a:af:6a:9e:d5:cb:d3:ed:9c:3a:ad:3a:78:d1:
13:1f:1c:03:46:ed:c6:38:dd:d4:1f:65:02:04:2d:57:f8:0b:
9e:9f:08:a6:54:a4:f0:ec:a1:db:7c:45:f0:9f:22:a4:46:3d:
71:3c:d2:6e:cc:13:34:09:fd:b7:6a:78:7f:af:94:f2:7c:55:
67:14:c3:84:9e:1f:b5:1b:8c:68:ec:e3:5f:06:a3:8b:30:fb:
6e:34:cb:d4:42:f2:f7:01:f4:07:fb:c0:22:f9:16:0c:32:f0:
88:bb:27:b1:f0:0f:fb:bf:1e:e1:81:67:3f:49:30:97:45:9f:
7c:8f:bc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:34 2025 by rpki-client