Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
File: hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft (raw, json)
Hash identifier: qyAxCNdAgrsn+8o1VbOccaWShN1oeru+S+rH4jOQTuU=
Subject key identifier: 4E:EA:0C:55:C5:2C:3C:97:0D:83:1F:1E:F3:09:AC:42:FF:EE:E1:A1
Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
Certificate issuer: /CN=8405c07192a8106fedb0760b8945032ca1d3054b
Certificate serial: 0194BD85AE21799F3BC72D349EAD22AAF15C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
Manifest number: 0FED
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl (hash: /Ati3pgq+BTDYSKpMeO5fMR67uxb+Ftn0fAGHR4hha0=)
2: nUJoZVEyJ7Ch6Htt7Gy_l4EGdUs.roa (hash: DEXI+dom+CuVEOOs+wIFSM6Zic3MADgfCsnWrZCTC3o=)
3: obW6OP_TwhwF5onkjJQKoKfjNUI.roa (hash: l/D/ppG7tJiDZNB6ndliGGQdEPYg23vbQP0qpyOUO3E=)
4: zTErCzfeAqe_qlccgZ6Xz2BpNCc.roa (hash: 9mx99kal+/jXSa14TzN46OzBllqi4wkCOsaAScYXF7g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ae:21:79:9f:3b:c7:2d:34:9e:ad:22:aa:f1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=4eea0c55c52c3c970d831f1ef309ac42ffeee1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:94:c9:5e:7b:f1:ec:89:70:ed:a8:b4:0d:
c1:d6:26:09:0b:63:1e:ce:4d:39:4a:95:8c:8f:de:
7d:b2:12:8b:26:1e:37:89:ff:d5:de:60:5e:7c:26:
2d:6b:04:5c:85:23:e3:da:e3:24:4a:3c:13:36:ef:
1c:bc:eb:b5:7b:e7:e7:95:45:35:3d:a2:56:78:b5:
91:04:32:5a:09:50:1a:5f:2d:09:d9:b4:a9:cc:5a:
89:9a:57:49:75:08:fe:4d:0a:d4:7d:42:7f:a1:05:
3c:7d:3a:c6:5b:f2:e0:96:32:6c:06:4f:26:7b:fd:
89:ad:5a:3b:36:57:08:bd:7a:5a:ab:46:77:25:52:
45:92:47:21:6d:6c:ce:41:c9:49:b4:1b:bb:22:f3:
7b:ad:e5:88:5c:dd:e7:0a:74:39:56:b4:d1:6d:13:
8c:7f:07:93:16:6e:0e:6d:03:77:5b:c5:8a:0b:37:
db:7e:3b:a2:bf:da:c3:56:8d:59:30:23:fb:a0:ec:
89:c1:f1:17:f7:30:a8:33:4f:af:d4:a8:f7:f9:89:
62:ce:11:b5:09:fc:60:7a:3a:ef:d7:0a:28:8d:f7:
1b:69:ea:a1:02:67:35:3b:2a:c9:3d:36:92:17:e5:
02:2c:27:eb:40:90:40:61:0d:19:d7:5e:69:45:38:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EA:0C:55:C5:2C:3C:97:0D:83:1F:1E:F3:09:AC:42:FF:EE:E1:A1
X509v3 Authority Key Identifier:
keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e5:8a:f1:65:c0:37:cf:42:64:27:6e:a3:59:21:65:c8:af:
56:e6:53:60:01:9b:eb:b5:cd:97:6a:52:59:88:8b:41:ab:ac:
92:25:b6:56:7b:88:06:3c:e1:42:a1:91:48:62:b9:95:e3:b0:
d0:2e:b0:94:da:fc:f2:7b:f5:8f:0c:c8:4d:bc:49:77:d9:0f:
2c:74:19:0c:42:0e:c2:ec:18:ec:84:7c:e5:f6:b6:35:e1:e2:
fd:17:16:2f:c7:1a:bb:78:bc:e6:94:f1:e8:5e:88:fd:10:fd:
4a:b2:6a:24:5a:24:ef:44:0f:1f:77:7e:5a:ef:40:67:61:95:
f2:d7:f6:c7:4e:c1:db:34:79:de:a9:df:e0:40:55:28:c0:6a:
75:8d:c5:e4:79:c7:7f:3d:8f:34:6c:e9:c0:ea:4b:0d:d4:29:
48:86:3f:79:85:d5:e2:2e:20:c1:7d:69:07:41:1b:a6:97:c9:
05:a9:3e:3f:84:d4:6a:c8:6d:8e:e1:ee:4a:c0:84:5d:a2:8c:
5e:fc:40:23:86:74:50:f9:a8:26:83:d2:21:06:c9:f4:21:80:
a2:6a:71:9a:9b:ca:62:32:b5:ae:9e:24:ef:a5:a2:93:26:80:
6e:11:34:91:8a:51:bf:dd:85:2a:e9:0f:a9:e5:06:18:db:e5:
44:a2:6f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:32 2025 by rpki-client