Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier: 9txzdYDl0pDc+v9oY2BaaIPeuE+aZ/6mIlCSNGq1OLE=
Subject key identifier: 70:67:63:4D:D2:49:DB:A6:E7:4A:E1:86:34:C0:27:A7:28:9D:5C:52
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial: 0194BBCE57E544E0AC790E5869F34BD94ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number: 0742
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: DnzHmF6TCnpjP7TWEjJ_rCXnvIY.roa (hash: 8RXEuua3+kjX3w/tgAeEmHPIo5ag+CZK8+TQCcaqfCg=)
2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: ezDM+GXeNm5vbwMjjmOirSU63GNcK2iCjGWQfkln1ro=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:57:e5:44:e0:ac:79:0e:58:69:f3:4b:d9:4a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=7067634dd249dba6e74ae18634c027a7289d5c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:ad:d8:b4:63:a9:42:61:2b:f0:dc:7f:b2:
05:17:ff:9b:78:e7:53:d5:fa:6f:f6:14:51:e6:73:
54:e5:9b:c2:9f:f9:65:20:01:98:5e:8f:6d:4f:ea:
3a:2e:ab:9c:5d:ec:c5:9c:97:4b:56:97:a7:e3:cb:
9b:64:4b:b0:a3:f6:ca:8d:ef:77:c7:25:4a:02:b9:
16:99:69:8e:62:4b:ff:5d:b2:b3:89:4d:fa:1c:39:
a2:56:ab:c3:69:cf:50:0f:c5:08:da:11:82:76:9e:
88:99:7b:5e:98:49:c2:ed:e1:7c:ab:f9:a5:8c:c5:
5e:2c:db:93:11:a6:94:d4:7a:cf:29:54:cf:2d:a6:
84:4b:bb:73:ba:b3:95:93:1c:d5:dc:a2:88:25:51:
e7:f2:36:23:6a:17:3a:f0:2e:cf:e1:01:73:cc:97:
f7:5b:c0:07:9c:5b:7a:06:66:06:7a:5b:cc:dd:11:
be:06:c6:02:34:bc:ec:8e:84:70:df:b9:52:ec:26:
46:93:c4:37:06:7d:0c:ce:49:e5:e4:3a:e5:f6:04:
3f:49:78:c7:6c:73:9a:33:00:8c:71:45:2b:83:5b:
24:35:6b:c2:7f:2c:c3:a6:1a:5f:96:aa:92:32:3b:
b3:20:71:c7:4f:cc:3a:0d:56:c6:a2:ff:81:23:e4:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:67:63:4D:D2:49:DB:A6:E7:4A:E1:86:34:C0:27:A7:28:9D:5C:52
X509v3 Authority Key Identifier:
keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:8d:89:fc:2d:0c:78:6d:a5:64:f2:cd:8a:1a:43:42:50:35:
55:82:52:a2:28:f5:b3:f8:e9:bd:a9:75:de:0b:ae:41:8a:fd:
d9:9a:18:f4:6a:6d:bc:ca:b3:40:68:51:55:f2:7e:d7:9d:55:
87:1c:4b:1b:08:fc:00:0f:42:c1:33:5d:d9:a9:5a:94:17:1c:
6f:cc:0a:28:a4:f3:54:f0:6a:ce:58:4c:60:fe:4f:5d:0f:21:
2c:d8:53:c9:74:c7:71:f7:9d:e9:89:a9:2a:c8:a0:f6:7b:26:
75:26:7f:db:09:6f:af:e2:2c:fd:a5:f9:5e:47:85:5f:77:26:
9a:c9:43:05:b6:e6:94:29:33:5a:7d:65:0d:f4:fa:3c:27:80:
7a:42:52:b0:f8:bb:58:96:8d:f6:f9:3a:b3:96:2e:51:7f:ce:
2a:f9:c5:ea:0b:dc:eb:35:7b:32:57:65:e3:74:cc:f0:1a:54:
b2:ee:4f:ee:7d:30:46:5f:81:eb:ce:e5:e1:71:da:dc:58:ee:
f2:ee:ac:0d:74:64:71:e9:27:bb:71:2f:10:d5:49:18:1a:eb:
50:d9:50:90:5f:fe:41:8e:4b:75:ed:92:e6:3a:1b:59:6b:e9:
80:52:be:45:84:c6:4d:5b:11:05:b3:31:47:e2:39:d3:63:71:
b1:f8:75:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:54:23 2025 by rpki-client