Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
File: hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft (raw, json)
Hash identifier: ZQZ+5CyP/bqKmzGQr1HNrxTjfbspZ4iz1W6Htaz0SeY=
Subject key identifier: 8E:E3:0D:1C:02:37:F6:25:48:1F:B9:84:10:C5:2F:A0:EE:57:A6:8D
Authority key identifier: 86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
Certificate issuer: /CN=86842274b3788b80b2fed916db3880fe08c37528
Certificate serial: 0194BC72B12CC18FA931D2FF7FD89C84467C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: 9YAK0xIjvZ0jkU9GYhz1bySm8ao.roa (hash: YSdN3my3ymjfDNRBd0aA0z7OnehzvCW8RCNSPlN8quQ=)
2: hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl (hash: +ezUl9bSBeacjOqYadsTmQmddr1VX8x3fnfkW9O6+zk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b1:2c:c1:8f:a9:31:d2:ff:7f:d8:9c:84:46:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86842274b3788b80b2fed916db3880fe08c37528
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=8ee30d1c0237f625481fb98410c52fa0ee57a68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:5b:69:1c:0a:aa:73:3e:34:9c:e1:db:6f:
fb:0b:71:b9:82:bf:b6:10:4f:a7:a1:40:a0:4d:08:
fc:a3:f2:e5:f5:24:ad:87:ef:1c:39:1f:17:2a:f2:
18:16:2e:41:c2:95:b2:d8:ae:6e:0d:76:6b:2c:08:
95:82:e5:31:5e:e0:8f:9c:7f:6d:7b:5e:20:35:55:
4e:46:d1:f8:f4:91:96:9a:e1:2d:79:ae:64:7a:fb:
d5:f0:3c:31:f3:33:47:21:c1:e1:44:78:a6:4b:17:
7b:8d:46:9a:d6:58:2a:c1:54:28:69:31:a7:24:2b:
99:99:89:ab:e1:2f:09:23:6d:64:a4:15:65:c8:1b:
27:aa:78:ac:e5:6c:a6:7b:c3:6d:14:f6:68:00:f5:
fb:0f:84:be:2d:08:8b:66:1a:b9:e1:aa:25:f4:6b:
29:51:62:b4:4a:44:ab:79:14:9b:09:ee:82:e9:79:
92:5d:9d:84:7a:10:1d:ae:1b:a7:60:2c:63:32:c3:
45:13:c0:3f:56:5d:6c:51:29:a0:39:84:15:c9:7d:
3f:95:b4:79:aa:73:85:be:8e:d6:f5:c8:ad:c9:d6:
34:b8:f5:10:1c:a6:81:c0:a6:af:ca:c9:66:c2:a7:
9e:9d:50:d5:43:7f:84:66:36:3b:1d:7b:47:38:b7:
c4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E3:0D:1C:02:37:F6:25:48:1F:B9:84:10:C5:2F:A0:EE:57:A6:8D
X509v3 Authority Key Identifier:
keyid:86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:64:f3:50:06:6b:bd:b9:18:5b:a9:8a:c6:50:53:3b:64:8e:
e3:73:68:a9:1d:4a:10:02:24:bd:ae:d3:c4:67:77:0a:a5:77:
3b:ef:50:f6:1e:48:d7:d9:a5:9b:49:2e:61:17:92:af:fc:a7:
26:e8:15:45:d5:d3:84:da:aa:61:f9:5b:37:43:40:72:a1:e4:
34:76:82:b7:2e:12:69:ef:46:7d:93:bb:ac:d5:45:f7:c0:3c:
fa:3e:d4:fa:30:a0:f0:3d:2b:01:d3:78:f1:cf:cd:97:ff:14:
f9:eb:c2:86:38:a9:0d:38:c5:60:72:ed:50:56:4e:53:ff:d5:
9e:53:67:5b:62:2b:52:23:39:ce:18:a7:81:82:f3:06:44:7d:
d0:40:5f:9a:78:04:b6:78:1a:2b:50:cf:92:c0:a5:43:e6:f0:
38:72:ac:c1:60:ae:9c:67:e9:89:c2:88:cc:7e:bb:d7:44:4b:
9b:c2:76:cb:6c:7d:d2:49:f1:b5:e4:49:20:eb:8d:22:1c:8f:
8e:43:8c:c9:4b:dd:22:39:0d:55:f5:1d:14:e8:8e:ef:33:4d:
da:a0:e3:1c:00:e5:e7:3e:e5:b4:98:2e:71:44:e3:1c:3d:63:
eb:f7:8e:0a:8b:42:a1:56:ab:d5:05:d1:06:2a:70:ad:de:be:
47:ab:a8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:07 2025 by rpki-client