Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
File: hSC3fQNbkS_6QG393ynjopY-aQQ.mft (raw, json)
Hash identifier: ndquhzj5+p9h/NTx0OCXh5IZFED89ZTtqCYQiQVkoH8=
Subject key identifier: A6:FF:06:94:53:A5:4D:9C:45:1D:69:ED:E0:4E:5E:FF:E6:1B:53:02
Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
Certificate issuer: /CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Certificate serial: 0194BD4E7D95E8E7EE97A9976811627950D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
Manifest number: 063E
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: GrVfgYYa0s5gLsRQp5P5vAQeHlE.roa (hash: Twu1XyErZ1bzBOtE8/HK3XbggJvMpOYaRXT376BODWE=)
2: XUIGCJfhGsoP5FdVAQmT9lUNYuc.roa (hash: hjmwDLHRKf4c787nov0R6bRVLxtqmM1uwueYf+NK6fU=)
3: hSC3fQNbkS_6QG393ynjopY-aQQ.crl (hash: aF35GHtoo6vXCMj8+lptXV7HON1iokgJNoysYXGJ8sE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7d:95:e8:e7:ee:97:a9:97:68:11:62:79:50:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=a6ff069453a54d9c451d69ede04e5effe61b5302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:22:51:e8:70:27:eb:6e:15:f4:f2:bb:37:c7:
67:e1:76:f8:08:04:2f:88:f1:bb:ab:14:d2:3c:eb:
86:62:f7:78:f4:36:0e:fd:9c:f0:4d:18:20:80:f2:
80:6b:59:8f:f0:af:65:8e:76:cb:5a:33:9f:c7:6d:
26:76:fc:7b:52:f0:b5:4c:27:dd:90:c3:ed:df:72:
fc:a2:42:93:f5:f4:74:80:6e:84:d6:0c:17:2e:05:
1a:7f:f6:11:3f:35:3d:3d:d6:3e:cd:12:b3:49:4b:
97:82:1f:4b:e3:bf:03:03:80:6b:b4:51:36:2b:f3:
a1:28:65:41:7e:e5:5d:45:43:38:eb:94:9a:d1:6a:
f2:73:55:72:54:79:19:64:1e:40:0a:d6:77:38:b0:
ba:0c:25:31:23:69:ad:64:d7:a5:46:f5:e3:19:3a:
5b:33:5b:0b:7a:29:8b:e0:99:57:9f:d4:eb:21:5b:
71:86:b7:18:7a:c1:92:70:81:9d:6e:56:53:cd:8d:
1d:36:0b:2e:52:0c:f8:c8:df:32:5c:6e:be:24:dc:
e5:25:73:47:12:11:a7:a8:c0:02:91:a8:07:08:31:
da:3a:f8:c8:ae:4c:5f:6a:8f:40:a5:70:d0:f6:1e:
05:ba:63:f2:e9:43:9f:23:7c:49:b7:fc:7b:41:b9:
3b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FF:06:94:53:A5:4D:9C:45:1D:69:ED:E0:4E:5E:FF:E6:1B:53:02
X509v3 Authority Key Identifier:
keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1c:42:dd:2c:7e:cc:94:55:e1:cb:40:13:26:53:a9:0a:78:
f7:fb:4c:72:7c:bf:6d:f6:b6:6b:e7:ba:06:08:58:1b:77:eb:
50:cc:96:8e:22:10:8e:6e:06:c1:02:b1:cf:ca:d9:bb:ca:42:
64:c0:9c:85:1e:73:17:2b:78:5a:d2:b1:99:b3:bd:14:00:5d:
bb:f9:7e:a1:26:e4:a9:d7:ed:a5:54:78:38:dd:0e:6d:b3:08:
80:44:76:f4:84:29:e3:73:e7:43:9e:da:73:59:fc:33:f4:cc:
2e:ff:23:1a:51:5a:33:e9:f2:16:10:f2:0a:84:10:e0:25:8b:
11:4e:0e:ad:41:fa:b1:33:90:e2:9c:8d:51:7b:ef:98:44:99:
78:87:2b:09:43:5a:b4:35:db:05:3b:bc:76:0b:8b:ff:eb:44:
4b:7f:63:9a:d0:ed:78:cc:73:29:5b:30:a9:e3:1c:c0:cb:53:
f3:e5:ae:88:0d:05:d8:9a:e4:90:ee:d3:86:fa:a5:b1:f8:dd:
a4:66:a0:66:9f:ed:a7:0f:d3:a2:09:a2:31:9d:96:8d:bd:2b:
4d:2f:32:30:7f:2c:d7:74:f4:f0:8b:96:16:72:e1:6a:75:85:
c3:f1:96:00:0f:93:31:f9:61:f8:d6:35:ee:20:9d:de:3e:0b:
4b:25:a6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:44:55 2025 by rpki-client