Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.mft
File: hIkfjbCMEQ2bW160xalXnkEzyBY.mft (raw, json)
Hash identifier: CPzsjmjakXLyLuphLKC/n4JzmPQ4niWEOSw0dCBaXSY=
Subject key identifier: 0F:8E:D4:70:91:06:F3:70:C6:06:0B:18:E7:66:B1:CC:0D:17:BD:73
Authority key identifier: 84:89:1F:8D:B0:8C:11:0D:9B:5B:5E:B4:C5:A9:57:9E:41:33:C8:16
Certificate issuer: /CN=84891f8db08c110d9b5b5eb4c5a9579e4133c816
Certificate serial: 0194BD4E58210BDAF4F7168BC4BA87DAFD00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIkfjbCMEQ2bW160xalXnkEzyBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.mft
Manifest number: 03D4
Signing time: Fri 31 Jan 2025 17:00:15 +0000
Manifest this update: Fri 31 Jan 2025 17:00:15 +0000
Manifest next update: Sat 01 Feb 2025 17:00:15 +0000
Files and hashes: 1: VhR6-WTquHS_2jnfD6TSdxmLio8.roa (hash: W0QV+vJybHz/CWW9vsyk2vI5OGmRUVH5JOXqdf8uQIU=)
2: hIkfjbCMEQ2bW160xalXnkEzyBY.crl (hash: Yw+R+aot5dUTn0DHBlGcybRzDSfJOJ6ywjkgXnklk+0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:58:21:0b:da:f4:f7:16:8b:c4:ba:87:da:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84891f8db08c110d9b5b5eb4c5a9579e4133c816
Validity
Not Before: Jan 31 17:00:15 2025 GMT
Not After : Feb 1 17:00:15 2025 GMT
Subject: CN=0f8ed4709106f370c6060b18e766b1cc0d17bd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:b1:17:f2:57:f3:7a:2e:28:6c:b4:21:af:
76:2d:53:8d:86:85:dd:e4:51:4f:01:a0:ca:c3:9a:
d7:b8:d1:f0:44:91:06:9c:92:37:de:6a:9a:01:27:
b9:d4:ff:31:23:c1:08:93:45:b9:29:cd:8c:fe:ca:
14:cf:f0:5d:aa:aa:6b:0a:48:b4:82:70:b0:dc:00:
8f:06:3e:32:4d:17:d4:fe:80:ee:94:9c:fe:4d:e8:
f0:17:6b:1f:70:88:b0:9e:02:9a:41:2b:3c:be:66:
18:07:87:e2:96:28:4e:9c:ec:66:7b:a1:1c:80:5a:
d4:b2:d8:90:65:fb:a1:4c:1c:d4:a1:9a:d8:ef:5b:
99:b9:5f:a3:0d:02:ce:32:c2:78:49:52:24:7f:c3:
56:98:45:f2:9d:6d:20:ff:a5:ec:ba:b7:dc:64:fc:
0c:d4:d7:71:eb:1f:9c:cb:02:04:b1:4a:08:51:0c:
11:c4:ae:51:ee:92:71:5a:c3:0a:5e:81:18:4c:79:
44:9e:30:0e:0b:7e:08:97:39:37:d8:ef:39:57:3d:
97:53:37:61:e4:6e:aa:e2:46:e8:a3:b9:9e:d7:1b:
1a:2b:e0:4a:22:b0:d6:e6:eb:32:db:4a:25:76:1e:
a3:5e:77:66:c2:de:9f:6f:ea:7f:2d:c8:0e:f3:85:
17:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8E:D4:70:91:06:F3:70:C6:06:0B:18:E7:66:B1:CC:0D:17:BD:73
X509v3 Authority Key Identifier:
keyid:84:89:1F:8D:B0:8C:11:0D:9B:5B:5E:B4:C5:A9:57:9E:41:33:C8:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIkfjbCMEQ2bW160xalXnkEzyBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2d:9c:b7:a8:45:c4:9e:3e:d2:a8:67:31:97:41:c9:21:39:
3f:60:95:54:35:82:19:51:45:22:60:83:9a:83:c0:2a:b2:f8:
c0:c5:73:7b:65:db:4c:dd:54:a3:ba:81:fc:8e:e5:b2:60:2c:
1f:03:c8:d1:06:29:74:53:49:fe:1c:5e:cf:5b:31:8b:62:e1:
b5:6a:54:12:8a:6c:6d:1a:d3:ce:ba:8e:19:8a:21:1f:02:60:
70:b9:3e:4e:de:2b:49:e5:23:28:8a:6a:88:8d:43:ae:88:81:
da:00:c3:88:c8:e5:d1:90:03:20:c0:c3:84:d9:47:98:9d:dc:
40:9a:26:4b:96:9d:9e:f4:45:8b:41:46:b5:ec:e4:a1:d2:86:
b5:40:10:25:f8:3e:27:35:f0:4d:31:8f:90:06:cc:4a:c4:e3:
2f:e6:42:5a:e6:56:ea:fd:5f:21:f1:c8:43:84:ba:f6:ef:91:
31:41:a0:c5:d7:91:d6:97:70:aa:9f:12:ec:e3:4c:91:9f:84:
2b:df:9f:88:80:4a:f0:1e:e1:cf:6b:46:44:23:a9:0f:1d:c7:
48:29:0f:91:36:e2:09:3a:eb:f1:88:e2:bc:7f:9f:50:5c:cf:
ff:dc:3f:63:ec:f8:b5:4d:49:79:c0:98:fa:f5:50:fe:3a:9a:
09:56:94:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:23 2025 by rpki-client