Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
File: hVxdD-JZNayRq1qtpkUmAOWNJaU.mft (raw, json)
Hash identifier: mv8rC+qrc58siAtMs+PB82lp6mu2MmTrNZjnXNC4DkI=
Subject key identifier: 9D:8E:34:93:83:65:70:0D:40:60:2F:E0:A7:17:82:12:E8:23:24:7D
Authority key identifier: 85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
Certificate issuer: /CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Certificate serial: 0194BCE06E32C475E483EAB6B35D75776584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: G0GNUJP7OR8YupD74ZDHt57bEcw.roa (hash: H4bYVhJJbIf3r2c4VUmIGnEkOT0psTbbUXpiYyljGec=)
2: Y2TFuYLjHOh19Nsn9IXR0BXi0GA.roa (hash: EGQLXveu0rNxAJdauUxs2BGnjI8o9tZmq21wSdM7BEk=)
3: hVxdD-JZNayRq1qtpkUmAOWNJaU.crl (hash: zkC9pkNWH6eAF0im0FGdQ7PVyb5tZJaAPgWIsKiTfYo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6e:32:c4:75:e4:83:ea:b6:b3:5d:75:77:65:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=9d8e34938365700d40602fe0a7178212e823247d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:db:d8:5c:4d:e5:74:6f:f6:55:b8:0a:4c:84:
c4:ac:ef:b0:3b:1a:2b:b6:d3:a6:e3:0d:00:b3:69:
1e:3d:41:df:f1:af:d2:b7:0a:07:ff:b3:e9:93:65:
fa:3c:6a:3b:de:c2:9b:fe:ba:28:f1:b3:fe:3a:6c:
5b:10:33:29:65:53:18:aa:5d:f3:04:a5:1e:e8:f8:
63:ea:0b:a3:7e:ff:99:1c:5c:ca:e2:4e:21:8c:a7:
72:69:67:dd:74:33:0b:10:91:92:81:1e:98:55:70:
96:2b:20:5f:fd:f1:9c:15:a0:25:f6:87:20:f4:b3:
22:79:6c:33:08:4b:de:1f:94:e6:ad:30:bf:14:2b:
6d:16:ec:fc:07:c6:16:86:97:05:35:2a:1c:21:7c:
aa:94:c5:b6:e1:c2:79:a6:d1:84:6d:82:c6:ba:0b:
8b:a4:42:5c:d9:5a:a0:56:28:45:6d:b1:c5:1a:9a:
9f:60:4b:80:f3:68:8f:a5:92:e8:71:98:1a:25:9e:
4c:ad:f4:f9:c4:84:8d:00:a5:48:53:2f:f9:19:b5:
e7:4a:1f:e1:b2:de:b2:9f:02:18:71:34:92:47:50:
43:4c:c8:25:c3:75:de:14:80:29:8b:f5:ae:51:80:
04:50:a2:bb:a5:5d:19:03:bb:49:83:2e:71:20:32:
41:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8E:34:93:83:65:70:0D:40:60:2F:E0:A7:17:82:12:E8:23:24:7D
X509v3 Authority Key Identifier:
keyid:85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6d:ad:89:bb:cc:af:05:a4:99:6b:35:a7:5a:d8:68:bb:2d:
da:97:4b:da:59:d1:37:62:87:07:71:a5:b2:b0:4e:ae:96:c5:
73:b5:96:26:0a:1f:3a:e4:ab:a1:bb:74:3a:fb:47:58:6c:75:
0c:28:1d:e1:1d:1f:8b:b2:35:dc:9e:4a:f0:47:9b:3c:9e:d9:
ca:bd:11:b6:0d:6f:9f:5b:db:15:be:46:24:85:55:5a:33:8d:
a4:6e:53:95:08:bf:56:be:5d:f9:05:0d:80:1a:7e:0b:86:14:
4f:c8:f3:c3:20:cf:ad:4d:e9:95:43:d1:96:5b:27:cf:0e:2e:
f9:13:4f:5b:93:ab:b9:f0:28:a6:76:93:60:e3:d2:ca:9a:ed:
0d:10:34:be:a2:8f:bb:37:7f:07:f3:0d:eb:16:be:43:24:ec:
86:37:1c:30:56:32:41:24:6d:5d:83:18:4d:95:b4:2f:65:e7:
c5:c0:99:f5:34:25:07:1e:b0:e3:31:b4:c7:8f:36:f7:a2:5e:
71:e5:5a:02:9a:49:09:90:01:46:03:43:b0:6d:8d:d2:00:a9:
6a:77:83:be:06:f1:58:92:ca:5c:03:b4:8c:e7:c5:53:0c:4b:
6c:76:f3:11:a2:f4:57:03:da:b3:3f:a6:95:c7:09:0c:04:14:
88:d1:1e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:36:57 2025 by rpki-client