Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
File: hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft (raw, json)
Hash identifier: +DWgR0RKenyl1kKXm8b7KRDk6Fp/ww3CZcuCefucjak=
Subject key identifier: 68:F1:90:3A:4B:52:79:DC:F1:5C:C7:78:82:76:95:E6:70:90:8C:E2
Authority key identifier: 86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
Certificate issuer: /CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Certificate serial: 0194BCE0BA097081BC7610AA28C10351BFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
Manifest number: 04F2
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: EKLQu7iYylRaZbkh51ntRdvQ1sc.roa (hash: RK+Kru3PnFxl9Ll91ljugGNNYfjxqJD6II7naH011aw=)
2: hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl (hash: 8BrDaRh9FAC7PAtnSOgPlbXOjxA++xhmrhoJQcJflcM=)
3: lO9lnjMKShKR1lmHSBZdeXnPEkY.roa (hash: c7CjjG3dW9IskX6aNGKT3OeAaVeTmT4gSZizwrVUurs=)
4: maJ8CmpVji7iExXaEzUUxHgibH8.roa (hash: JObe+le+P4uoJGOeOZ+4H+wfXfvsZKVWkXVTp6TQq5U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ba:09:70:81:bc:76:10:aa:28:c1:03:51:bf:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=68f1903a4b5279dcf15cc778827695e670908ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:7f:1b:67:f0:9e:34:37:ad:9d:70:8c:1d:
37:f4:bd:aa:77:76:8e:5b:24:df:fa:ab:a6:8c:0d:
03:40:0f:8b:66:0b:df:aa:2a:0e:e2:e2:c9:ee:79:
0d:6a:79:db:72:c8:bc:6b:bd:61:5f:38:91:a4:7e:
07:2a:8f:5d:fe:13:20:f0:04:2e:26:1e:4e:cf:46:
c5:d5:e2:fc:33:17:fb:0b:c3:f6:ef:a7:c4:a7:7b:
8a:53:53:b7:36:df:fb:44:df:d3:4d:49:c6:71:cf:
f4:e1:85:66:60:7b:fa:3f:9f:06:48:f5:9b:56:0e:
67:77:67:4a:18:aa:1c:5d:0d:48:c9:dd:f8:e9:95:
6b:4c:d4:81:c8:94:c7:76:c5:90:00:67:04:c4:e0:
45:91:e5:02:28:ac:4d:1e:8b:24:88:9a:86:8f:80:
9f:b6:42:6c:14:0c:42:77:ac:86:e1:4b:af:c5:95:
36:d1:c2:64:40:f4:07:0d:c0:7f:4b:5b:28:37:13:
ba:c1:08:50:ba:01:1e:e1:ea:d8:e2:bd:a2:4c:cc:
a4:77:50:6f:82:41:67:89:00:ac:bb:e8:71:49:fd:
6e:fd:23:a9:80:ba:fa:7a:65:86:40:4d:16:fe:b2:
76:bb:21:91:74:36:fc:ea:63:32:60:fa:cd:04:4c:
21:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F1:90:3A:4B:52:79:DC:F1:5C:C7:78:82:76:95:E6:70:90:8C:E2
X509v3 Authority Key Identifier:
keyid:86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:76:33:f5:3e:27:36:ab:ea:b3:e6:a4:68:31:a5:41:9e:c3:
e0:1d:99:8b:8c:37:80:23:a5:6a:8c:f4:dc:f0:4d:fa:f0:0d:
31:9f:4d:cf:f2:06:c1:8e:b9:77:c1:ab:14:64:47:a6:8e:76:
bc:77:14:1f:cb:b1:cb:06:82:27:11:7d:44:00:ce:7c:b8:56:
4c:78:b6:75:02:d2:29:c3:64:73:98:c8:b0:4e:9e:51:39:80:
3a:4e:c3:82:b3:47:1d:df:b7:93:95:56:3f:45:6a:90:13:35:
80:49:3f:ed:54:62:b6:ca:c1:8a:b0:35:a5:72:ea:79:d2:66:
0a:c6:5e:e5:e5:ab:16:2d:aa:24:35:1c:e2:94:20:ba:99:35:
c8:37:bb:50:b9:e9:cb:bc:6b:27:cd:12:12:77:69:dc:1d:e2:
de:4d:8b:6f:c3:42:49:1d:01:1c:0c:ac:44:3a:b5:e8:bd:e7:
3d:eb:16:25:56:6d:32:02:bc:97:9a:30:df:b5:e3:b7:b3:5d:
f7:3c:91:25:f8:d2:ec:1b:9c:72:1e:fd:f1:cd:06:35:08:76:
ec:5d:93:d2:66:ab:29:0a:61:8f:85:1c:fc:39:d7:12:ef:57:
74:90:f1:49:f4:c5:48:15:f6:fa:a1:fc:9b:6f:bc:b7:e7:a4:
86:95:14:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:29 2025 by rpki-client