Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json)
Hash identifier: MAOfKm9vy5/YMQbhrOPVgekYLm5VxfpgiZk1yQo6aGw=
Subject key identifier: 85:FE:84:7D:80:77:91:04:B5:EA:1A:EF:2E:3C:EA:D2:9A:3D:99:53
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial: 0194BD85834D3CD10DAB751A279CA4B1743D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
Manifest number: 116C
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: QzLE+0oBmhUrgWKMOJpX5+v/fp4GcvykKraWy4L8Rc0=)
2: _TB_DSwnuCOKtWool6QsRH-BI2c.roa (hash: IfCRqnm3tSTnJ1oqOSYusfB1IFZQtEWpYBfMbK20Izo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:83:4d:3c:d1:0d:ab:75:1a:27:9c:a4:b1:74:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=85fe847d80779104b5ea1aef2e3cead29a3d9953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:38:90:03:0e:82:2f:07:70:49:07:80:c8:
d1:e0:9a:b1:5a:cc:92:78:a5:8d:87:81:66:b5:46:
ad:6a:0d:a6:1f:90:e5:2f:ed:44:f3:73:dd:1d:9d:
08:0b:8f:2c:e1:9b:4d:44:a1:07:d7:b6:0f:e3:3a:
8a:29:6e:9b:88:bc:24:8f:50:73:96:79:95:de:a5:
8a:e5:ef:59:8b:9b:56:9c:f0:92:cc:fa:a0:ba:0d:
c2:2c:81:13:3e:15:ef:42:bc:47:57:69:64:62:71:
5b:a3:e8:93:d3:35:6e:29:91:16:eb:9c:e3:9e:91:
84:29:03:bb:4f:12:22:54:79:a1:5d:04:04:f2:4c:
3b:43:97:04:76:f3:1a:88:64:dc:85:21:4f:74:a2:
31:a8:f7:e3:7f:26:af:35:c8:64:42:23:22:c0:6b:
46:01:7d:66:24:cf:87:68:e2:50:7a:90:e7:fb:07:
d6:52:91:19:74:80:ad:fd:a1:ba:46:c6:71:56:da:
9d:ab:45:f7:f1:d3:7a:eb:c5:16:7a:18:99:38:53:
6d:3a:44:e7:47:17:48:34:32:a1:77:3a:23:21:a8:
89:a9:0a:90:c0:32:0a:45:b3:37:5b:1a:91:26:19:
2a:36:c1:73:07:76:f9:df:88:30:d9:7b:da:7b:fd:
88:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FE:84:7D:80:77:91:04:B5:EA:1A:EF:2E:3C:EA:D2:9A:3D:99:53
X509v3 Authority Key Identifier:
keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:75:52:34:8d:2c:a2:2a:88:c9:f8:ac:34:a5:c9:7c:3e:35:
ce:03:44:90:23:b3:a5:87:8b:28:c3:92:e5:a8:95:3d:f1:69:
7a:77:33:0a:d7:80:5e:97:c4:0b:bc:3d:25:2e:2f:03:d0:53:
29:a4:1c:9b:e6:1d:a1:1a:81:87:5a:93:60:2a:14:dd:99:03:
6f:00:43:f3:0f:f1:e9:54:4e:83:57:2f:ee:ce:6d:1b:ae:03:
90:cc:34:13:22:2e:f5:f9:c1:d8:cf:e0:09:30:3b:d8:c6:cb:
50:48:75:d6:02:6b:37:18:7f:e5:db:ea:83:a0:34:fd:3f:b0:
d6:64:ad:f7:d6:2c:01:e8:4f:e4:2b:b8:f0:ed:e5:35:87:a9:
88:08:d4:9b:a3:5b:4e:cd:5b:79:5f:f3:d8:21:69:fe:cf:58:
d8:f9:73:f5:69:7a:13:db:c7:be:03:e0:71:05:48:45:25:f9:
d7:61:a8:f7:f3:c9:a1:1b:80:91:7f:73:ee:c9:f7:a5:4e:e1:
cb:a9:36:85:f5:f2:dd:c9:ee:b5:10:0f:ba:da:f2:13:cc:c7:
c4:77:08:0b:7c:07:03:97:e9:b8:35:93:b2:fe:ec:0e:50:5f:
c2:38:5f:4c:90:66:9a:0f:4d:d8:7a:05:ab:d1:f8:77:28:f0:
75:86:9d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:42 2025 by rpki-client