Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
File: 89hcR9C31txd3aCFcrZFTBBZUSw.mft (raw, json)
Hash identifier: z5qBlQShyEYQ3sntY+IRSIt6EM+nlM5eoxmyq0gyXAA=
Subject key identifier: 43:07:13:BB:95:E6:E4:4E:D3:00:22:75:BB:26:B2:DD:18:39:04:25
Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
Certificate issuer: /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Certificate serial: 0194BD85B4A8B2D8243EA344BD956BC44453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
Manifest number: 0997
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: 89hcR9C31txd3aCFcrZFTBBZUSw.crl (hash: /AJINIdJ8kKYDSadVh4Ud0MxhV1Kh2BlfLKyhpQO5Hw=)
2: Wi2RTxfTTcg3jIA6VNCxJhuXtSc.roa (hash: PN/Hitc4mDcgZ6vgsBJIh+lNS02EoNv2xNjb7IleUCM=)
3: iI96ltGCU8Eh-fXmAqschYb7j1E.roa (hash: Z5PSdW/OzuN6TE7LbGMzYDGBpKQ5aABS0hIggAHbUHg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b4:a8:b2:d8:24:3e:a3:44:bd:95:6b:c4:44:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=430713bb95e6e44ed3002275bb26b2dd18390425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b7:37:f7:19:d9:72:21:3b:8f:23:b6:65:83:
2f:2c:00:14:2b:28:3c:c7:c0:63:6b:27:f6:f3:e0:
c0:95:89:0f:02:67:c6:cf:59:56:a3:4e:d8:83:a0:
b1:d1:6b:96:8a:e5:91:53:f7:3d:09:aa:d6:25:54:
fa:b3:14:46:59:a2:56:2b:7d:d5:f9:63:60:b8:11:
93:8d:11:90:fc:f9:e7:bb:92:d5:f4:a9:ef:49:d9:
4a:e2:b0:7e:e6:fc:22:00:ef:e9:b0:7d:bd:81:f9:
45:93:f2:1d:6d:16:b1:00:20:68:5b:d8:4e:93:4c:
46:34:65:66:e7:06:26:20:b7:cf:17:78:28:e6:1b:
76:6d:cb:a8:c0:d5:2f:c6:c5:af:cd:41:9d:8b:49:
32:80:0f:99:12:2a:9a:46:bd:49:5f:43:c5:39:6f:
fb:b4:4c:29:4f:ee:f7:48:f0:af:c8:ed:c0:d1:36:
a7:08:c3:37:24:95:a2:23:71:c5:95:f7:7c:bd:c3:
b3:d5:f1:b2:cd:fc:2c:04:ad:7a:d5:27:23:66:0c:
e9:d4:13:76:f9:e1:10:0f:41:66:d6:ae:83:9a:2c:
33:0d:ad:03:92:13:81:fd:44:3b:d1:b4:f9:de:3a:
7b:6a:b4:e2:23:b5:d9:d8:c3:4d:a6:cd:61:75:14:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:07:13:BB:95:E6:E4:4E:D3:00:22:75:BB:26:B2:DD:18:39:04:25
X509v3 Authority Key Identifier:
keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a4:d4:5b:46:e5:e5:c7:79:27:4b:0a:f1:17:9e:d0:58:1a:
b3:95:49:b1:fd:68:a5:6f:68:32:c8:4a:bc:42:25:d1:8f:cd:
01:77:2c:7e:1f:35:6e:79:92:d2:43:3f:8c:b8:46:e2:44:78:
f6:f9:44:aa:73:18:35:ce:a8:b7:72:3e:20:7f:ed:bc:4d:8d:
a5:59:b5:da:f0:d0:cc:2a:4f:6e:ad:98:ee:6b:01:fd:9b:bd:
3f:7f:47:8d:d7:d5:5b:1f:8b:e3:3a:e6:12:57:31:c2:9f:b7:
b8:ea:45:b1:38:bc:41:32:ec:68:57:2f:68:df:4b:0a:d2:52:
1e:85:3b:78:9d:44:d6:28:1f:14:f1:f9:3d:bb:a0:94:7c:49:
92:05:bd:83:90:f3:ec:ea:d7:90:38:1b:09:22:78:e2:93:8c:
fe:12:b9:80:d3:84:87:fa:15:9a:49:79:86:bb:3e:3e:09:a7:
94:9d:39:9d:95:c7:15:21:b1:16:94:ad:cc:eb:dd:a8:a1:ae:
da:6c:2d:2f:5d:41:c1:bf:68:bf:d2:d2:71:cc:75:41:b8:bf:
e0:e5:1c:a4:af:e8:1c:c2:ce:fe:68:29:0b:13:59:54:0e:df:
8a:07:4f:fc:0c:5a:a3:2e:c9:9c:80:84:c7:bb:c1:5e:44:38:
93:2a:f1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:11:25 2025 by rpki-client