Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
File: hcNSXWi2ERZWThbh3U5WywNcnIU.mft (raw, json)
Hash identifier: 5lw7wuEzWOOs3Lsn+PXkvS5dzvC0F9wn63NNW+4cB1g=
Subject key identifier: 8E:C4:9E:3F:61:1C:53:EC:6D:20:F9:D2:90:12:09:95:43:6F:AA:2A
Authority key identifier: 85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
Certificate issuer: /CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Certificate serial: 0194BD8564A9211394C536DBEB7EC287CE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 18:00:23 +0000
Manifest this update: Fri 31 Jan 2025 18:00:23 +0000
Manifest next update: Sat 01 Feb 2025 18:00:23 +0000
Files and hashes: 1: hEPXQgU_4RM48GU6YHvdaeu2Uew.roa (hash: Y8wvnBW02yBGPfnw7ReZF8CB9IAoGOhz+Y/sJITIMzc=)
2: hcNSXWi2ERZWThbh3U5WywNcnIU.crl (hash: Esn/c0dEZd4UvapepNzV60w1zTYUlTok7bX2WMmhh1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:64:a9:21:13:94:c5:36:db:eb:7e:c2:87:ce:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Validity
Not Before: Jan 31 18:00:23 2025 GMT
Not After : Feb 1 18:00:23 2025 GMT
Subject: CN=8ec49e3f611c53ec6d20f9d290120995436faa2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:96:a3:5d:66:a1:f0:59:41:b5:ca:a9:22:
c5:38:36:53:ab:4d:e8:84:03:4c:e4:7e:82:4e:2c:
e3:18:56:b0:a7:6c:5e:d9:85:55:9e:3f:0a:f4:de:
bc:ab:23:30:47:25:f3:80:86:04:2d:58:9e:f6:41:
ff:12:02:5b:44:c4:32:02:0a:48:72:1a:82:65:cd:
78:27:c8:af:d6:29:b7:fd:9a:24:04:9a:42:5a:18:
3a:c0:81:14:da:df:cf:6b:d2:26:79:13:e6:b6:58:
f1:52:c6:3a:bf:d7:32:f7:f3:43:ab:ce:ae:96:a7:
41:3d:a9:66:cd:89:53:d6:45:cc:86:e9:42:dd:26:
37:24:1f:bb:64:a9:3c:98:31:65:73:06:a6:24:4f:
15:d0:5e:d1:f1:d6:3f:93:72:25:e5:15:64:59:67:
2b:51:8d:31:71:43:1a:ca:46:00:41:24:89:3a:db:
90:a8:9d:f1:a8:5d:0c:3a:10:be:71:e9:b2:37:b0:
c2:50:c5:ac:d2:12:f3:33:0f:30:4c:23:bf:e8:e9:
21:f8:b1:1b:fc:00:39:33:e9:cc:f3:8a:33:4b:d3:
f3:18:a1:cb:45:bf:46:f9:0d:88:85:61:f5:de:9b:
44:d2:1a:42:2c:96:b0:98:c2:ff:1c:b9:df:99:65:
cd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C4:9E:3F:61:1C:53:EC:6D:20:F9:D2:90:12:09:95:43:6F:AA:2A
X509v3 Authority Key Identifier:
keyid:85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f2:05:7f:ca:82:ce:c1:a2:d2:3a:30:49:81:b9:c3:a6:d8:
65:b9:cf:7f:34:d9:7d:2b:d1:6b:d4:22:1a:82:59:cb:00:71:
e4:e1:a1:fb:c5:08:7b:96:e0:2e:96:b0:f6:9b:4b:09:58:6f:
8a:41:a0:59:5d:1c:e7:59:3f:bd:63:8f:77:64:56:8f:7b:31:
74:13:7d:30:d3:e3:eb:65:40:e3:9f:f0:d1:a7:a3:19:af:e8:
28:9f:ea:3a:c9:7d:80:d6:3d:58:d6:d7:b1:c7:70:b1:bd:6f:
ae:10:42:15:cb:af:c2:d3:87:ca:de:08:92:85:b3:8c:77:d8:
8b:dc:fc:c0:83:81:bf:5a:a8:1c:d9:9b:46:75:24:21:6d:5b:
cb:3f:28:b1:c7:ff:13:30:e2:2f:19:72:48:80:5d:d7:58:d8:
e3:ca:5a:7c:9d:8f:1c:20:3a:4b:99:fc:0a:8e:8f:8d:13:c0:
d7:9d:13:13:de:6c:6c:ea:65:aa:21:54:4c:ef:35:f9:06:17:
22:d4:24:26:26:c6:ab:f4:95:e3:c2:4f:11:c7:02:6a:5d:d5:
c7:90:bb:d3:83:8a:c2:61:3c:85:ab:46:26:38:6f:12:8a:24:
f7:e8:8a:57:c3:89:a8:08:61:7f:6f:e5:6e:31:f9:9c:d6:40:
f7:a6:0f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:18:43 2025 by rpki-client