Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier: D9mBjg1j4rdSex9iU8VT6/AsJt+7lBUxUSMqtSDsTd4=
Subject key identifier: 66:F9:3F:B3:28:A9:EF:45:42:F5:69:EC:D0:FE:AB:F5:1B:DD:ED:CC
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 0194BCAA2109A2E6CCFBB6600FAAF6545554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number: 09A1
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: KNngLPUEeJfGeGvW_sjNLwrjlmo.roa (hash: VdgpRYVhUpsamPtzdnV+HbncE6iEYGQS6JyumMp2yn8=)
2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: tPaRJlPHktrHivV0dvsOvXcU1FhueyLTf+qJZqV+3NE=)
3: XrZ7_VYsTjVO1Hdr6lTXBYRHdDM.roa (hash: /HTMnGOuDTUdEjSKAx29mQcK6o1vmtlFHqUYC092xGg=)
4: aJuKlK4Eyd-5-SWqzCamWBjJAOA.roa (hash: JqxrD9CIJNSFvb9h8lx5ybgaqxfxBBfuz3mHyoez/iE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:21:09:a2:e6:cc:fb:b6:60:0f:aa:f6:54:55:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=66f93fb328a9ef4542f569ecd0feabf51bddedcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:42:42:e5:17:9b:14:0c:f6:de:1b:99:b3:
99:d4:82:90:97:49:9c:01:a7:57:96:e0:59:e6:78:
13:7a:81:72:bc:cd:3d:56:d1:74:24:56:65:a5:17:
9c:29:00:95:47:05:e3:6e:d2:4b:63:8a:4f:58:2c:
7a:0a:d7:70:10:38:d8:49:12:0d:ae:42:4c:24:17:
1a:33:a2:6c:55:5f:7c:45:ad:28:bf:33:64:80:1a:
b4:93:5f:e6:f3:0f:d6:cc:a7:64:86:1d:06:ce:34:
5e:96:52:93:ef:73:bb:b0:9f:8e:65:ff:71:af:77:
1b:4b:d7:3a:27:07:87:69:81:1d:c3:3e:eb:bb:c2:
86:de:02:39:ee:36:66:48:e7:cc:e0:77:69:51:74:
08:07:0f:3a:4a:0d:37:e4:06:c2:88:bc:c2:a5:8b:
34:98:ee:f4:1b:58:f7:65:cd:c6:3b:24:f2:b5:48:
6f:5a:f6:a8:c0:96:97:11:3b:8a:71:a7:f0:c9:dc:
5e:6b:81:8c:e9:56:56:04:75:86:6e:98:94:4e:1e:
2d:2e:d8:dc:d1:cc:67:7d:35:da:67:97:8b:e2:3c:
cd:22:9c:68:12:15:8b:02:95:74:01:46:16:07:d5:
b1:45:ec:41:f4:d1:81:be:c9:c6:cc:5a:17:2b:5a:
df:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F9:3F:B3:28:A9:EF:45:42:F5:69:EC:D0:FE:AB:F5:1B:DD:ED:CC
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:dd:f6:79:18:c8:d5:96:0e:73:2e:f3:dd:64:c9:c1:72:79:
53:98:9a:66:3c:16:07:f7:68:93:19:fa:b6:14:95:b4:31:0e:
8e:78:05:a5:bf:35:5b:37:e7:55:66:9e:cc:c9:84:46:47:6c:
d8:df:6e:66:b3:c4:d9:ea:b6:34:10:db:60:a8:33:01:80:2b:
bd:72:1d:29:cf:6b:f4:fa:a6:64:91:d6:e7:62:4f:0a:d9:c9:
4f:bc:0b:62:f7:32:81:7d:57:2d:7f:a6:82:7a:cc:68:3d:ca:
7c:f7:37:58:09:35:dc:51:cf:73:e5:eb:f1:b9:d5:52:4c:a6:
a9:64:7c:da:5f:16:22:3f:29:d1:d7:7b:0f:03:cb:d8:b5:ba:
cf:d4:40:ea:54:21:83:ad:9c:10:59:4a:f1:98:05:7f:60:9b:
ec:d0:53:4e:8e:2f:09:d2:16:b2:01:58:87:03:23:ee:57:f1:
51:37:8f:a8:82:ba:17:10:0b:b7:4b:d1:3d:c6:fe:8b:e2:82:
37:e9:c1:df:31:3f:16:d3:91:00:8f:47:ec:0a:ec:8a:0b:af:
7f:48:be:94:33:fb:14:82:d5:e6:de:da:fd:97:69:f8:e8:5b:
3a:37:f4:86:83:ce:d2:f4:66:f0:d7:7d:58:f0:34:cd:d3:be:
29:a9:c8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:09 2025 by rpki-client