Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
File: hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft (raw, json)
Hash identifier: f3NTOV4uePHc3NcI0bKUcbwXmJKeozqwj3vwEBhNLXY=
Subject key identifier: AA:6A:CE:2A:A6:E1:B1:4C:F0:91:8E:8E:72:C4:7E:4F:D5:87:16:61
Authority key identifier: 84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
Certificate issuer: /CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Certificate serial: 0194BC72D2CC978F9546B97EBDF31211709F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl (hash: 0CMnxC33J8TD2OkWA+yCP4/4DdWouA6EhiLmtwshayo=)
2: qzdc_fwaLRJwIIHpIg8vA5h4lo0.roa (hash: V/FGmYc5ZjOuTnWlxFYXLE8AFUo6wdD1TCze3ez9KOM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d2:cc:97:8f:95:46:b9:7e:bd:f3:12:11:70:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=aa6ace2aa6e1b14cf0918e8e72c47e4fd5871661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:20:19:e9:a5:55:79:3e:06:b0:29:3f:ba:82:
a8:41:8d:6c:62:39:95:37:e2:f5:3e:29:8f:fb:af:
57:95:bb:fc:c1:f0:84:76:83:ff:20:e4:49:e9:98:
bf:b6:ed:7e:3d:96:70:8c:79:fd:c5:fa:9c:ea:39:
90:a3:83:02:cb:89:21:3a:8b:2a:36:94:ba:e5:db:
5d:ae:d0:8e:47:46:b8:bf:16:f6:2c:db:df:cc:28:
c3:38:65:a9:66:6f:f5:9a:59:50:1d:31:04:81:92:
47:c7:66:73:5b:db:4f:88:e2:bf:38:9a:6d:d6:d1:
dc:fc:76:a6:2e:c1:e0:64:54:2b:5f:27:ac:22:95:
ca:3b:39:81:1e:16:c4:e4:81:03:7c:f0:e6:8b:24:
0f:90:c2:d8:13:10:f8:9b:9e:1e:06:52:a4:11:09:
c1:c8:f3:eb:3a:f5:49:de:8d:bb:60:a5:25:05:b8:
d5:81:03:8e:cb:c0:9a:17:76:82:2e:46:1d:41:a7:
ff:6c:8f:51:68:1c:43:30:43:0c:85:6a:7d:48:80:
d4:2f:04:1d:57:2e:c5:44:fc:8c:9f:d6:c8:9d:ec:
de:e2:30:97:f5:7d:03:04:c3:48:9f:9c:72:df:e5:
21:0a:6b:8b:28:93:c6:0f:6b:77:9d:a3:68:ce:3d:
7f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6A:CE:2A:A6:E1:B1:4C:F0:91:8E:8E:72:C4:7E:4F:D5:87:16:61
X509v3 Authority Key Identifier:
keyid:84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:95:00:e7:e7:6b:05:ca:a6:f6:3d:b8:da:08:b0:ac:a7:b6:
59:29:d0:66:ae:b8:c9:5b:75:3f:f5:13:eb:0b:b2:8c:01:2a:
20:a3:9a:f9:c0:ff:01:5e:4f:b3:17:0a:7b:a7:ae:d6:96:8b:
c4:13:26:d5:6c:7c:ad:06:02:24:cb:b4:83:4c:bc:d9:4a:98:
44:2d:31:12:bc:71:a8:2e:9f:e9:3d:7f:d2:9e:eb:c3:75:d8:
4b:70:ef:3b:ac:30:09:f4:a4:2c:59:fa:2a:33:68:95:0d:68:
50:25:72:1c:4d:02:1d:13:5f:f8:62:d6:aa:4b:73:55:b6:0c:
a0:4e:0e:c7:95:12:67:89:3a:98:fe:02:96:b4:7f:83:0b:f0:
3d:7b:81:e5:11:a9:5b:3f:38:d1:e5:08:87:46:6c:89:f9:13:
fd:d3:29:86:f0:03:c5:06:76:be:ec:19:15:3b:43:dd:77:45:
c2:15:8b:02:df:29:77:a0:43:e8:b9:4a:98:cd:43:a6:d1:ab:
86:e9:01:a9:c6:ad:b4:95:93:e4:15:e4:62:64:af:55:2c:f2:
2b:5d:36:1d:e0:d4:2d:97:57:48:4e:27:f1:fc:fe:de:a3:f8:
9d:c0:a5:cd:28:45:83:de:8f:cd:98:03:06:8d:da:37:97:9b:
bd:3c:90:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:44 2025 by rpki-client