Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
File: hAVuIt0SPINMCkqnRRbV-zzHfdE.mft (raw, json)
Hash identifier: y5EC0GXmI/x90C6Ih9fpvxGosEchjzG3mmJ/IPmRv98=
Subject key identifier: 5B:38:B6:80:A6:DA:EB:9B:83:B8:6C:D8:49:3D:64:00:D4:6E:E5:D1
Authority key identifier: 84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
Certificate issuer: /CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Certificate serial: 0194BCA9F84E56FD76013204A47B91550ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
Manifest number: 02A6
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: egLJr-eSZpk4sDdrCGxUJjm8wVU.roa (hash: NBKYZF7j3MH2zl3XNbkXJFKVIPixuj4t75EEGhwneCE=)
2: hAVuIt0SPINMCkqnRRbV-zzHfdE.crl (hash: pS+LfwWlDQQ8E1vVVZQwneGh4+MHagr2iB63oe4yc8A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f8:4e:56:fd:76:01:32:04:a4:7b:91:55:0a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=5b38b680a6daeb9b83b86cd8493d6400d46ee5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:98:b4:98:be:b5:a0:8b:0c:1b:7d:31:89:
11:9a:14:01:48:14:d4:46:31:2f:73:84:bf:26:03:
6b:48:a1:3d:0a:99:52:50:2c:a0:e0:3d:a1:8d:83:
c3:25:4c:31:ad:c0:34:9f:79:be:9c:37:f8:c3:c9:
b9:f1:9f:38:8b:be:83:ec:d9:1d:0d:75:52:0d:7b:
1f:5a:55:97:5d:44:49:bf:c9:53:f9:81:58:24:81:
81:1c:d3:1e:fc:af:c0:cc:1d:71:29:8d:8f:59:da:
23:6e:9d:87:7d:0a:52:3d:18:52:b7:16:a3:44:78:
f0:22:3b:a9:82:14:a6:ec:e3:51:29:df:e9:14:b9:
01:ed:0b:29:a4:16:b6:a7:05:a5:7d:8c:f7:06:16:
af:53:1d:20:fd:48:66:f9:af:51:84:69:7a:d6:8c:
6b:42:4d:70:97:7e:46:37:37:5e:da:49:d3:03:94:
51:82:e3:8a:48:d1:b1:93:d8:d4:9b:72:c2:96:04:
67:57:42:c4:5c:66:96:73:2a:5f:c6:69:a3:f8:98:
1d:7d:28:42:da:cb:68:45:75:0f:c3:99:3b:1d:2d:
97:eb:09:12:b8:37:27:92:b8:da:ce:20:90:f3:7f:
34:d0:97:2c:81:a0:40:4b:64:f1:fc:b7:d3:8e:d6:
a4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:38:B6:80:A6:DA:EB:9B:83:B8:6C:D8:49:3D:64:00:D4:6E:E5:D1
X509v3 Authority Key Identifier:
keyid:84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5b:fc:e4:59:e9:fa:12:cc:5b:47:31:b8:6e:f7:a0:ef:77:
e1:67:ef:79:15:20:9a:ee:0b:ca:88:ab:3c:03:09:f0:ae:6a:
13:f8:42:11:c1:f9:13:72:4e:db:16:c5:18:0e:78:0f:95:87:
0e:6d:86:1b:85:02:90:c8:72:be:fb:5a:e1:22:e4:d6:89:c6:
34:ae:9c:ef:41:3a:c1:f8:c4:4f:39:0b:41:ea:a0:89:27:21:
0f:5f:86:dd:45:06:3a:1c:7e:e3:59:73:45:b4:78:c4:00:19:
13:6c:ee:65:c8:b4:6e:ec:6c:c0:9a:a6:f2:ea:0f:27:7c:5d:
91:ae:89:26:89:0f:b9:d7:18:7a:b0:f6:6b:77:0e:78:20:99:
4f:d4:d3:b7:e5:21:a4:a3:74:56:1d:11:13:30:09:2f:6f:31:
4c:d0:7c:0f:a2:2f:02:74:6a:82:20:15:4c:b2:86:85:f4:2e:
97:5f:ee:73:89:4d:33:c1:86:02:cb:ad:05:b9:33:8e:64:f9:
39:c8:27:29:62:90:b9:5b:65:dd:8c:61:70:82:7a:40:b5:60:
cb:6d:4d:8a:9a:18:68:75:cc:25:69:46:5d:fe:68:a9:00:48:
ad:a6:79:e1:82:d9:6e:1e:a4:fc:dc:98:ed:ef:43:01:b1:ae:
d0:60:74:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:43:30 2025 by rpki-client