Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
File: hoJWrjTlRSbFslqsK51fX6h9Bh4.mft (raw, json)
Hash identifier: GALUNR0GZyw5e3vM3mbJluxO+d92cwKdJ58KULKYt1w=
Subject key identifier: DA:30:2F:CB:8D:9A:68:AC:2E:99:29:14:6C:96:AA:55:BD:0E:C5:E9
Authority key identifier: 86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
Certificate issuer: /CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Certificate serial: 0194BD177AC91367882A0E757FCE7D73F53C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
Manifest number: 0AE1
Signing time: Fri 31 Jan 2025 16:00:19 +0000
Manifest this update: Fri 31 Jan 2025 16:00:19 +0000
Manifest next update: Sat 01 Feb 2025 16:00:19 +0000
Files and hashes: 1: ggyXYBYJYDyjENMrTDEoM9cmQuY.roa (hash: nvujf7S88P1Vb2Lev6oUVClTcezEWcGUqDcy1w7ylUY=)
2: hoJWrjTlRSbFslqsK51fX6h9Bh4.crl (hash: YtWB7oalMV09o47oLqVAkv2AIz8kBooMbaE1h7QNqoM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7a:c9:13:67:88:2a:0e:75:7f:ce:7d:73:f5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Validity
Not Before: Jan 31 16:00:19 2025 GMT
Not After : Feb 1 16:00:19 2025 GMT
Subject: CN=da302fcb8d9a68ac2e9929146c96aa55bd0ec5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:49:1b:0d:50:aa:1f:9a:94:f5:d7:6e:28:
22:f3:44:dd:6d:75:d8:81:dc:ff:22:91:36:dd:b6:
f4:6e:e9:8e:37:8f:ae:10:e4:8f:c1:61:f2:03:ad:
2c:c1:3d:c8:47:c8:70:97:79:bb:85:32:ce:4c:1a:
ba:38:0e:d1:75:d0:54:c7:a4:ba:b8:a6:0a:11:26:
e9:6c:49:40:4d:32:94:4b:7a:9d:cd:ff:28:2e:2a:
9e:f6:6f:a1:36:3e:95:bc:e6:9c:27:85:28:6d:08:
76:ad:92:73:18:6e:26:ac:61:84:d6:7e:39:5c:1d:
e4:fc:fd:12:47:fa:08:ed:9f:bd:ea:e0:18:18:43:
26:f5:6a:ab:a5:e4:07:ff:dc:77:c8:12:74:3d:b6:
cc:5c:24:8a:9d:3b:87:7f:0d:d7:a2:03:a3:26:81:
9d:75:37:88:07:9b:71:9d:d6:fd:45:ad:9d:32:a5:
90:59:b6:e7:d9:3e:1e:7e:ca:53:07:43:62:68:58:
50:56:29:15:ae:0c:15:77:5c:93:9a:21:47:63:28:
55:21:b7:c3:78:66:7a:6a:54:d5:c8:66:10:4d:72:
43:8d:96:55:4d:03:f4:19:ae:aa:f8:b2:a0:ab:2d:
9b:d9:21:e4:e1:5c:1f:ab:99:53:a3:e6:79:f5:48:
ef:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:30:2F:CB:8D:9A:68:AC:2E:99:29:14:6C:96:AA:55:BD:0E:C5:E9
X509v3 Authority Key Identifier:
keyid:86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ae:f9:8f:a3:77:a3:51:54:1b:38:70:78:f2:c7:cc:7c:03:
d4:ee:49:fa:a5:6b:7d:c5:6f:7b:76:71:e5:50:32:a9:b6:db:
85:78:85:47:ec:04:b1:ba:ca:2d:fe:df:23:c9:ea:5c:5b:0b:
63:8d:83:ca:7d:ec:a1:59:26:ad:cd:c0:bd:8a:4d:ee:94:ba:
9f:79:1f:e2:aa:0a:b9:ae:48:89:52:0a:3e:68:c7:8f:a8:61:
87:f9:9e:aa:87:dd:47:3f:af:f1:82:c3:96:a3:e1:a9:5c:d9:
26:64:5e:1b:09:e0:08:64:e7:8e:90:6c:ff:6f:61:a2:d4:33:
74:15:f3:fd:d2:54:a8:72:91:c1:89:1e:4c:96:be:f1:43:8c:
20:f7:5d:ef:10:e9:48:d4:4e:8f:e5:d5:3e:e8:ba:23:ee:b7:
f3:c5:cd:82:a1:f4:57:0a:44:fd:83:9d:e7:f2:3d:80:f4:38:
d4:f6:1d:d6:47:52:a1:9a:fa:b2:cd:07:30:25:d6:38:ea:90:
ca:b3:fe:34:14:36:e8:80:9f:ab:04:39:b3:5d:d2:02:af:75:
bb:a3:e8:c8:ff:29:dd:5f:15:22:31:3f:22:a7:a7:ec:96:da:
02:25:d4:c0:1b:b6:92:30:ff:b8:aa:e7:5f:b1:3a:fe:0e:d6:
99:cd:be:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:52 2025 by rpki-client