Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
File: h6Tl13JcWGiqvqAluDjcwjPG_8k.mft (raw, json)
Hash identifier: MNQQGZMAhzy5q3noxbuj68Wd0+z9h02YH+IVP0636Ds=
Subject key identifier: 8F:70:8B:67:EE:79:7D:52:2E:3E:74:AF:2A:FA:58:A6:95:9F:37:4F
Authority key identifier: 87:A4:E5:D7:72:5C:58:68:AA:BE:A0:25:B8:38:DC:C2:33:C6:FF:C9
Certificate issuer: /CN=87a4e5d7725c5868aabea025b838dcc233c6ffc9
Certificate serial: 0194BD4E477C250BC9D4FBF29D6B6B1F4E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
Manifest number: 1161
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: 326zxIS7flVicYpYeyjZhIJPEQc.roa (hash: 7OXoJx4K7+k1nQ/ABjRnbXIbMj5YXCBVmfp1DpVjQws=)
2: h6Tl13JcWGiqvqAluDjcwjPG_8k.crl (hash: 640zw6+cpY3ookaK9jHK3X6mGkU8qEaZ9G8AbDAEOvg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:47:7c:25:0b:c9:d4:fb:f2:9d:6b:6b:1f:4e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a4e5d7725c5868aabea025b838dcc233c6ffc9
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=8f708b67ee797d522e3e74af2afa58a6959f374f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:e7:00:c5:04:78:a5:6a:a0:f1:93:8a:c7:
d2:ef:ae:bd:5d:a3:18:1d:02:e5:a5:9d:a1:c1:52:
3f:77:ae:90:db:c7:c6:c5:25:0e:b3:14:4d:47:86:
8f:b4:1f:82:9c:dd:a4:11:b3:99:92:3d:3e:47:c0:
55:23:b8:e0:92:d0:d2:b8:3a:12:eb:16:cb:75:6a:
20:0d:c8:e2:91:9e:69:c0:4c:69:92:c4:86:f6:d5:
4a:f4:59:60:41:00:3d:cd:4d:b0:64:54:24:3a:c4:
d2:1b:14:7b:d7:06:2c:38:17:c3:67:94:4b:c3:ef:
75:c4:87:cd:23:6c:0f:45:fd:ad:2f:7b:bd:7b:b5:
c6:48:db:5a:a9:15:95:17:2e:b6:ad:e2:4a:27:06:
6a:3f:b3:3d:71:f9:63:b7:22:72:2e:ca:d2:26:91:
8e:14:f6:55:14:1e:c5:50:03:44:fd:89:6e:a6:38:
6d:a4:a2:07:e6:bb:2b:ef:07:76:44:7f:da:c7:5e:
7a:52:0f:bb:f0:eb:cd:e3:f2:32:b5:f7:c2:5e:00:
0e:58:f0:33:e8:4a:2e:0a:2d:c7:90:b8:4d:55:6f:
a8:33:7d:c7:97:b6:e1:58:da:b3:eb:dd:04:36:60:
87:a3:a1:d5:e1:20:a0:5d:70:49:58:88:56:9c:ba:
37:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:70:8B:67:EE:79:7D:52:2E:3E:74:AF:2A:FA:58:A6:95:9F:37:4F
X509v3 Authority Key Identifier:
keyid:87:A4:E5:D7:72:5C:58:68:AA:BE:A0:25:B8:38:DC:C2:33:C6:FF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5b:a0:1e:57:cd:3b:f0:92:8d:29:70:26:18:1d:f1:90:66:
9f:87:d4:df:73:8d:e2:53:8a:18:ff:01:3a:cc:ce:7d:5d:2b:
5d:d2:a9:96:c8:b5:c6:28:ed:00:41:f3:c0:ed:4c:33:d4:2e:
fa:9f:10:a8:79:fb:40:fe:88:fc:79:af:70:6b:c6:8d:4c:51:
7d:7c:59:de:37:83:94:ab:f2:ad:98:9c:77:b5:be:a9:1c:2a:
4a:e6:de:63:44:18:47:06:84:de:47:15:04:92:cf:ca:43:72:
71:fe:de:d4:88:48:fe:0f:f0:f4:01:c1:bb:f4:c0:65:27:b2:
17:0a:4e:4e:66:2b:0c:29:3b:f2:a6:e7:54:dd:07:1a:8f:ad:
bd:ca:a4:41:02:f8:cc:a4:88:f1:b8:b8:a3:cd:18:d7:8e:10:
f7:2c:cb:7a:1d:33:3b:a1:39:11:74:64:74:35:ba:77:33:a6:
98:ff:fb:6a:2e:64:93:eb:a4:6d:33:e7:2f:fb:15:f6:19:e5:
44:0a:fa:7b:08:a5:90:ac:9c:08:c7:fa:b5:90:28:e0:d6:47:
e0:4d:ec:d2:29:4a:da:bc:ef:17:bc:42:23:0c:72:1c:f6:7e:
a1:f9:1b:ed:73:58:5b:91:09:7f:bf:5c:e1:a2:a2:30:29:43:
bf:a1:24:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:09 2025 by rpki-client