Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
File: ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json)
Hash identifier: TgPYxCeCaD7SLkQolvuCB+bnkr5MF8wTaLrTlyqqMsU=
Subject key identifier: 05:32:3B:D5:9D:82:D5:1B:EC:B1:FD:3F:DB:23:14:8F:68:56:B3:74
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Certificate issuer: /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial: 0194BC050B07996F861676040859281EE0CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: 3MgCqcOdxHnqcDJSuK41pljKfTY1cGHeNViXWcugYug=)
2: rfewBBlrs58wJgdGtzFYKvwGFI8.roa (hash: 12fD5K/uMK4YG5nY9pYsgAuOVyylAM893HbTm9LpUXM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0b:07:99:6f:86:16:76:04:08:59:28:1e:e0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=05323bd59d82d51becb1fd3fdb23148f6856b374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7a:27:cd:e9:80:86:67:a7:47:ce:71:4e:5e:
cb:30:05:0f:a8:56:86:e8:c6:79:ae:7e:6e:d9:59:
b9:23:7b:2c:4b:99:fb:ba:a6:5b:8b:4f:78:9c:47:
b4:8b:be:d4:46:ff:da:26:60:9b:7c:c9:63:ee:d8:
98:61:cf:5c:0e:ee:c8:60:33:65:c4:39:ff:1d:72:
23:cd:05:99:73:d7:73:9d:a8:27:3d:44:6c:3c:8b:
14:6e:74:dd:b7:6c:a7:2d:bb:b2:c4:04:8b:db:a3:
44:97:37:dd:67:38:9d:6e:78:81:d5:83:ce:b9:7c:
8b:a1:3c:53:27:e3:0c:c8:6f:c6:6a:c0:b8:bd:ef:
67:f1:50:f5:bf:5e:9b:52:89:c0:56:e6:e3:a6:9a:
9d:c7:e9:66:1b:1c:dd:61:89:5e:75:ab:26:7a:6a:
a5:fb:99:26:db:c8:cf:7b:28:dd:44:29:91:3f:61:
63:93:a0:f3:e3:08:4d:a4:47:d3:5f:07:53:50:eb:
4c:db:a1:ea:35:14:bc:7b:cb:75:e2:69:a2:f5:14:
9f:c0:91:4e:8c:bc:6e:0f:f8:82:f8:22:cc:90:4f:
ab:19:11:9e:3f:9d:6a:a0:39:a7:7c:b6:08:09:48:
bb:9b:9f:2b:00:e6:cb:e5:f6:75:f1:db:0c:ac:56:
c6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:32:3B:D5:9D:82:D5:1B:EC:B1:FD:3F:DB:23:14:8F:68:56:B3:74
X509v3 Authority Key Identifier:
keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:28:89:dc:99:72:9a:f4:1c:c1:1c:88:32:ab:31:7f:a7:76:
8f:c0:7e:06:5e:69:b3:aa:c7:ee:14:c5:3c:73:e5:bb:15:7e:
89:17:ee:af:fb:00:df:e2:33:84:5a:b8:3f:10:0c:ec:e9:a1:
38:7d:2d:f3:98:a0:7f:a4:09:ae:4b:02:41:82:dc:a9:9f:1c:
ca:96:e3:30:ec:a2:2c:7b:c4:5d:7c:07:11:1b:9a:83:9d:d0:
ff:aa:86:e8:c9:63:83:66:86:43:6f:be:7e:c2:4e:bd:98:8c:
c6:11:5f:d1:c8:20:53:e7:52:d9:20:f5:da:3d:40:de:a9:e8:
f6:db:5b:63:43:c1:c9:d6:4b:df:7e:cb:9f:e8:ca:b1:f6:f1:
7f:0d:01:26:47:3d:29:e6:f9:50:4b:0a:b9:59:8a:7a:61:a6:
60:d4:0e:f1:7e:57:3e:1c:16:43:35:4b:9a:4c:e7:5c:b7:07:
6c:2c:3a:49:8a:62:e6:7d:da:75:a1:c4:32:80:55:68:69:5f:
ef:c8:1b:ba:ce:91:f2:9d:b6:c8:da:1f:fd:bd:05:7f:30:24:
d4:92:18:52:8e:a2:2e:87:01:3e:81:ea:ac:f6:01:15:9d:ca:
9d:60:a7:39:11:27:68:35:21:63:68:e8:00:2e:3b:fe:b1:e6:
25:36:85:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:46:59 2025 by rpki-client