Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
File: hbfVzNrwMwl0l0V2QgCnJydkcwo.mft (raw, json)
Hash identifier: ywKPYTyWRCpM9IbkPG5icz/HXDL0slbJadjIB8ErNBA=
Subject key identifier: EF:8D:F6:C9:02:13:19:D8:78:CD:EB:AC:AA:87:29:A2:65:1C:FD:4D
Authority key identifier: 85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A
Certificate issuer: /CN=85b7d5ccdaf03309749745764200a7272764730a
Certificate serial: 0194BC3BFFAF1E36D65FD5D5EA6650C1C61A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: bo9Zt5WveGJLmto-uiWetgZCX7Q.roa (hash: zzs00ivzGHR02cC1o3Qz5YlQGqmECC+fSU4iyTugi54=)
2: hbfVzNrwMwl0l0V2QgCnJydkcwo.crl (hash: Rnc9gzsYeJGQtU5WFsU7o2haj+q/AC8Qqi9VC7r/IjI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ff:af:1e:36:d6:5f:d5:d5:ea:66:50:c1:c6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b7d5ccdaf03309749745764200a7272764730a
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=ef8df6c9021319d878cdebacaa8729a2651cfd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:9d:43:6c:38:cb:ba:8f:23:68:ef:1b:3a:
ac:0f:de:73:cd:f6:c4:c5:51:68:af:3c:3a:86:bd:
27:fe:73:47:8a:d8:f7:4c:cf:70:06:b2:5f:77:7a:
b1:7d:a6:76:c1:c9:16:04:ac:47:31:f8:d0:b3:66:
ca:a0:6e:e5:45:1f:98:3c:84:b3:56:88:72:74:fb:
2e:76:93:07:0d:73:02:a5:e5:d1:d5:72:0c:28:82:
29:e7:df:23:31:aa:b6:47:e5:45:55:50:3b:03:6c:
d4:dd:f5:45:22:e6:5d:75:41:64:e0:5d:8e:8b:6a:
a6:0e:cb:f4:b6:b2:35:32:f8:70:a7:db:77:3c:7f:
2f:0a:b3:d5:1c:8d:3d:04:70:e0:cd:b1:03:11:2f:
bd:34:80:fb:1b:92:a0:93:8d:3f:1d:1c:56:80:3a:
5d:3d:35:15:2b:c1:96:b9:b1:43:59:92:5e:5d:39:
2b:03:46:2f:72:4e:1b:ee:93:6c:85:18:73:c9:81:
d8:3f:3f:f0:f6:51:d9:80:a3:be:27:4c:a3:3d:8b:
05:46:9d:d7:fe:40:9c:ae:56:25:dd:c8:8a:82:73:
cd:ad:e2:15:ae:f5:68:60:50:72:b9:76:de:f5:0e:
57:ad:c1:5f:5b:24:46:aa:0e:29:a4:e6:98:d2:be:
05:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8D:F6:C9:02:13:19:D8:78:CD:EB:AC:AA:87:29:A2:65:1C:FD:4D
X509v3 Authority Key Identifier:
keyid:85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:55:42:07:14:fe:63:45:0e:f9:81:e8:27:82:31:86:35:27:
29:68:d2:a9:78:3f:bc:ba:4c:9b:e5:7b:43:25:db:54:e5:cc:
31:b5:78:e6:f5:7f:c3:7c:fd:82:e3:86:14:16:5d:39:63:e3:
d5:b7:b2:d4:4a:d1:3c:1f:7d:fd:f8:66:5c:06:3d:aa:5c:de:
9b:70:44:2c:cd:aa:d4:7a:25:4b:78:78:52:55:d4:95:76:e9:
2c:75:f0:b2:56:b6:dc:e9:ab:d5:a2:7f:28:c4:18:7a:e7:9d:
a2:26:b9:28:8a:13:0b:d4:7e:1d:77:32:ae:04:fd:b4:11:98:
a6:74:d3:17:fe:93:e1:3d:e5:4f:ab:a9:39:4a:e3:7b:39:e3:
c2:f8:9b:1b:55:bd:30:d5:a7:a3:b4:52:f2:30:ac:68:66:58:
53:fe:bc:5b:32:4b:e8:05:b2:25:32:1d:0c:53:e3:14:ea:8f:
fd:43:00:15:8b:c4:bf:ce:0c:8a:de:11:a0:5f:97:74:c7:3d:
61:89:d6:47:2b:0d:02:8a:43:f9:c4:f9:18:02:fc:84:41:14:
3a:57:7a:29:cd:ab:94:44:12:b1:8a:c0:a7:46:a2:61:6c:d6:
98:0f:45:b5:f0:c4:5a:2e:1a:a2:88:29:87:2c:1d:6c:72:bd:
7f:49:6a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:38 2025 by rpki-client