Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft
File: hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft (raw, json)
Hash identifier: TNhFjEYwk78Wfh/XS6+ghjDFjU/MgjYuJjEjoPYYyq4=
Subject key identifier: 7B:FC:F4:2C:B6:4C:6E:99:F9:AE:9A:47:1C:90:55:C6:A6:59:EC:CC
Authority key identifier: 84:28:4D:67:C9:AB:AF:6F:A8:FE:A6:14:2A:5B:25:58:C9:CB:CF:74
Certificate issuer: /CN=84284d67c9abaf6fa8fea6142a5b2558c9cbcf74
Certificate serial: 0194BBCDE89E88D23F8316325BB536CC008E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hChNZ8mrr2-o_qYUKlslWMnLz3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft
Manifest number: 0E66
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: hChNZ8mrr2-o_qYUKlslWMnLz3Q.crl (hash: PWdl9GNMZ8IgGMi9NNjy/6LvL0BaXbRRThCy3q5kQMs=)
2: lJmvvXMVP9NKaYHWsyd-BJftiCc.roa (hash: eBBiq38eKi7tQKUMPizst8SumCc0cZEMghR739L+M0A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e8:9e:88:d2:3f:83:16:32:5b:b5:36:cc:00:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84284d67c9abaf6fa8fea6142a5b2558c9cbcf74
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=7bfcf42cb64c6e99f9ae9a471c9055c6a659eccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fb:69:70:35:1b:a2:2d:1f:e8:19:ea:10:c4:
46:3a:b0:48:e9:4b:4b:b3:8f:5f:d4:13:fc:6d:c8:
1d:a1:b7:1f:a1:24:63:41:86:8d:e5:11:c5:a1:0a:
82:57:a7:e4:27:48:2e:e0:ea:76:68:3c:6f:f1:d6:
e4:1e:26:ac:02:88:66:0a:1e:a3:89:5e:63:15:8c:
54:da:bd:36:53:ae:4e:1c:29:84:8b:28:78:1c:ea:
e0:5b:ab:bb:68:76:2c:1e:dc:d8:27:6a:7d:d5:b0:
db:5d:bd:52:53:f6:7b:e6:f5:9d:92:37:0e:83:9d:
f1:c2:45:c4:ce:94:4f:47:01:bb:96:d3:dc:4e:12:
01:47:fd:ea:9c:5b:64:2e:58:01:0c:4a:3f:3a:a0:
93:f4:62:79:91:b4:62:ed:38:c1:dc:1c:83:96:30:
74:d0:86:9f:61:64:e4:92:c4:12:b9:55:d3:9f:35:
83:82:70:21:54:1c:2f:4c:c2:09:e6:d3:e3:09:1d:
b8:2c:e0:f0:ca:77:f3:70:b8:21:ec:b2:45:b5:67:
70:38:09:72:9e:a6:36:f0:48:b4:53:b6:f2:4a:94:
2d:92:93:35:62:aa:21:cb:00:ad:8f:73:65:5f:0b:
8c:1a:d0:94:a0:3a:86:6c:6c:29:34:e4:84:6f:5d:
98:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FC:F4:2C:B6:4C:6E:99:F9:AE:9A:47:1C:90:55:C6:A6:59:EC:CC
X509v3 Authority Key Identifier:
keyid:84:28:4D:67:C9:AB:AF:6F:A8:FE:A6:14:2A:5B:25:58:C9:CB:CF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hChNZ8mrr2-o_qYUKlslWMnLz3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:72:4f:ea:84:97:72:de:45:8b:40:71:27:75:59:61:4b:d3:
21:02:c6:5c:4e:09:20:41:c1:5c:94:80:47:c5:e5:f0:51:22:
ba:ab:df:5a:84:08:2b:8b:ce:b9:72:9f:3d:26:93:1a:20:b9:
45:86:10:35:2d:79:a6:89:19:f5:77:5e:20:17:be:27:19:1f:
0b:a5:3f:a3:c9:0b:72:fc:2f:61:f9:6a:3e:3a:cc:52:c4:26:
ac:a0:9c:93:d9:28:bc:62:cc:45:8a:d5:cd:c6:61:b6:c9:84:
c2:57:d1:94:b7:b5:74:1c:a2:91:b7:b3:60:3e:e2:2c:34:34:
99:78:98:cd:49:05:bb:ed:18:66:42:b9:75:09:26:18:ca:a0:
e8:4e:ab:d8:2d:7e:c6:b6:8c:5a:a7:0d:a9:51:ca:29:fe:ee:
d1:04:74:b7:f4:11:22:f0:b4:bb:fc:35:a9:25:77:7a:76:47:
67:7d:af:d5:1c:33:c1:65:d2:3f:e5:2c:98:ce:a8:55:a7:02:
dc:e9:10:0e:69:2c:0e:07:c1:64:24:8c:c3:e8:6b:a9:37:ad:
a7:af:cf:c5:2e:0f:d6:a8:b0:c7:aa:0b:0c:e9:b5:3b:32:33:
fe:a7:7a:4c:58:4f:93:83:b7:bf:4b:e7:2d:38:c7:be:3f:b6:
d2:40:51:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:04 2025 by rpki-client