Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
File: hrIjA95LCocPz-e2VWwCT3XHajQ.mft (raw, json)
Hash identifier: L6WqoGYumxeg6QCwkp4R3BE3LNGvQyWCQsso2uu2A94=
Subject key identifier: A2:FF:03:B3:8E:E9:69:87:02:DB:BC:11:A3:3F:E5:68:2C:F2:D4:FA
Authority key identifier: 86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
Certificate issuer: /CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Certificate serial: 0194BCE08321415A26CA408982EE371F0678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
Manifest number: 0F2B
Signing time: Fri 31 Jan 2025 15:00:17 +0000
Manifest this update: Fri 31 Jan 2025 15:00:17 +0000
Manifest next update: Sat 01 Feb 2025 15:00:17 +0000
Files and hashes: 1: ZjB1G19DDx_6Q5oScLG5jMaC8XA.roa (hash: 7/c0oLP47xBtzbpIYR3dJCRfL58YizRnGJk+IU5Vsgc=)
2: bckQXnbwfKXBuJ2fgXGJ6V-6Qfk.roa (hash: v7e6EIu7w13jemXrMUjQBx6+ZKi093MMCQO7o8uB3rY=)
3: hrIjA95LCocPz-e2VWwCT3XHajQ.crl (hash: +Fg1CPOdVy4H907qucn2GRKppYmocxB0XI0M5FD4XPQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:83:21:41:5a:26:ca:40:89:82:ee:37:1f:06:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Validity
Not Before: Jan 31 15:00:17 2025 GMT
Not After : Feb 1 15:00:17 2025 GMT
Subject: CN=a2ff03b38ee9698702dbbc11a33fe5682cf2d4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c7:b0:a9:21:bb:e2:66:16:22:62:2b:96:03:
56:69:b8:87:a2:c3:66:d0:9f:d8:ea:9d:5d:1e:2c:
66:37:d9:fc:3f:b8:2d:a7:f8:69:ea:99:b2:38:cd:
bf:f4:15:83:b9:88:d6:d6:b5:a0:8e:dd:41:3f:34:
f7:63:73:f4:1b:bf:70:5f:be:e1:df:0a:07:c9:c3:
82:20:33:3f:48:00:ae:2a:6b:46:e1:b9:92:2a:4c:
30:b3:f1:43:91:36:8c:5d:34:68:e7:a6:81:f3:d6:
16:b3:02:6d:ee:b2:cd:6e:48:8f:66:7c:60:07:dd:
70:84:b0:38:af:df:bc:ee:32:5d:18:e1:0a:d2:aa:
1b:eb:93:08:b2:bb:d3:c8:ea:a9:eb:3c:ef:9c:b8:
c3:ef:60:01:a6:0d:bf:c4:ce:1e:55:eb:c0:70:7e:
47:e2:e9:4e:dd:9d:5b:61:d2:cc:c7:93:92:d9:0a:
61:9a:f4:d0:7a:2f:e2:bd:46:b7:46:9c:e4:14:be:
b7:1b:e4:fe:0e:4f:1c:e5:74:6a:42:ec:9f:54:fe:
bc:cd:55:27:2a:c5:a1:85:fc:ec:55:54:0b:e0:28:
17:36:50:6a:5e:6a:e0:49:65:6e:0e:a4:ad:a5:4b:
a3:12:df:0a:97:0f:c8:22:c1:86:5c:e2:d2:4e:52:
92:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FF:03:B3:8E:E9:69:87:02:DB:BC:11:A3:3F:E5:68:2C:F2:D4:FA
X509v3 Authority Key Identifier:
keyid:86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3c:8b:65:bc:1c:07:de:4d:66:57:91:0f:54:06:0b:cb:57:
38:1f:98:53:b3:11:88:10:a9:fa:ce:90:f5:f0:ad:70:49:de:
b7:3c:51:c7:93:88:0f:21:bc:79:ef:3e:e5:4a:cb:e4:ad:47:
db:b5:89:c8:f0:6c:c8:de:40:02:eb:c6:00:1b:0c:f3:00:06:
c4:4b:48:b6:65:d4:1a:79:37:00:a0:00:fc:c2:1f:cf:96:92:
63:28:97:8d:7e:03:78:22:7f:a7:8a:50:56:eb:a7:a3:2d:38:
19:ed:ba:4d:a2:28:97:48:db:59:e7:05:fc:4b:e3:5d:57:ac:
c4:1c:75:d6:7b:a8:58:ff:b8:4b:27:ac:fc:7d:80:2b:b4:e5:
ac:09:c7:e2:83:27:bf:09:82:da:68:6f:ac:d0:d3:12:a7:ea:
bd:bb:3f:21:11:cf:9c:0a:3c:25:90:1f:3f:b5:b6:12:54:11:
32:f8:23:90:de:7d:c9:a4:5e:fe:9e:35:ea:43:ad:1a:49:43:
2e:11:53:b9:85:3f:cf:84:e7:d1:45:b4:37:0f:8f:eb:15:6b:
60:55:ce:e5:af:7e:01:ec:23:7d:f5:a5:40:df:fb:a4:12:7f:
ca:26:7a:3f:28:22:e6:8b:23:a9:a3:96:99:51:81:31:13:c6:
38:85:41:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:05:09 2025 by rpki-client