Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
File: hyj0ANg9Saqm6TIMosv6k9pb55s.mft (raw, json)
Hash identifier: IV0rw9q/WYM5Zli+2YWeSItDOBISyENUzpeGHufV47w=
Subject key identifier: 00:C6:E6:6B:89:67:99:7D:85:D5:0F:06:B0:DC:92:E8:7B:E6:DB:76
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 0194BBCE60E6DCDFE3CFDB67237FCDF87FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
Manifest number: 02F5
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: hyj0ANg9Saqm6TIMosv6k9pb55s.crl (hash: /xEjSmqjWYpH1wfHaSVjgORbu4NrGIN+oU4UdxHxC/I=)
2: iTyIEEO2sljhZiJnAx_Ko0duy2M.roa (hash: T+291sx+aTIxs6928rSAPXeV/0gq52PnDMgh9u7+DTg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:60:e6:dc:df:e3:cf:db:67:23:7f:cd:f8:7f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=00c6e66b8967997d85d50f06b0dc92e87be6db76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1c:f1:4f:c6:78:07:5a:aa:2a:c7:fc:1a:ba:
ec:e4:1d:9e:9a:92:d0:6e:e1:e5:46:c9:99:a1:de:
37:a4:78:6b:03:f4:33:8a:d7:78:6e:7e:9e:6f:8e:
06:34:d9:a6:72:fa:e2:fe:01:02:cb:04:53:6e:3c:
b3:42:d2:8b:c5:3d:53:dc:1d:94:60:7c:59:3e:62:
6c:1d:bd:83:89:b0:97:2b:70:74:b5:3b:64:9a:73:
48:02:ff:36:73:dc:1c:35:12:99:d8:2d:84:74:ae:
71:3e:bf:81:77:05:3a:4d:82:72:11:99:e4:69:15:
40:70:b5:31:e6:41:ba:9a:52:2a:16:fc:b3:17:ec:
b5:b3:5a:e5:5d:55:11:a8:70:a9:d0:bd:bd:29:24:
99:1a:88:78:d4:2f:6e:4c:4e:c8:83:fc:f4:95:4f:
7b:d6:bf:2b:8a:89:9e:97:64:e9:cf:5e:3e:00:b7:
34:fd:9f:d0:01:77:05:bb:25:c5:b2:1b:34:aa:2a:
61:ab:9b:dc:1a:2c:f9:d6:40:fa:a4:3a:28:c5:35:
ea:d4:86:3c:6f:d2:c3:e8:ee:76:ca:54:b4:f9:db:
c8:05:06:ee:22:f2:ac:68:ec:bd:e9:d7:c0:30:03:
bc:ce:7c:18:20:47:6a:10:bd:70:3d:8b:c7:71:22:
db:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C6:E6:6B:89:67:99:7D:85:D5:0F:06:B0:DC:92:E8:7B:E6:DB:76
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7d:fc:2b:3e:6e:3f:ae:82:23:1d:ca:fe:a9:2c:fb:e4:d6:
b4:65:5d:05:30:74:ca:e3:bc:de:96:b3:47:53:64:0f:20:1f:
23:74:1c:44:69:b5:95:94:29:48:c1:66:0b:f5:77:ca:2c:51:
90:9f:8a:b2:67:7e:fe:d3:a2:e8:23:27:e8:87:03:4b:ee:2d:
22:51:53:f4:b7:b5:73:7b:0e:ae:a5:30:67:02:59:4d:92:85:
5e:c8:48:35:cd:05:f4:04:3c:ea:d0:44:b5:2c:a6:7b:ae:fe:
12:a9:27:a7:63:b7:08:70:67:ef:9a:29:d8:89:7e:44:8d:ad:
ef:f3:7e:c9:e9:9f:8a:4e:7e:44:c8:41:e7:b9:02:bb:88:fb:
51:d5:8f:b0:5a:ae:3a:f2:8a:79:fe:cb:78:eb:e0:44:68:f0:
0b:5e:c1:3c:b8:d0:04:45:e7:55:f3:8a:01:9d:2e:2b:92:bd:
d1:48:60:f3:60:69:1e:be:fa:ad:d4:b8:f3:2c:12:43:0d:f6:
68:af:fa:69:f5:25:34:fa:98:a2:3d:0f:2f:c7:f7:ed:3b:b0:
f5:07:ad:6b:51:ff:25:75:eb:ee:27:84:8f:33:42:fa:19:f7:
55:97:b4:7b:31:88:3a:ce:ba:31:6f:9f:e9:5b:29:6c:a6:19:
02:5e:e6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:24 2025 by rpki-client