Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
File: hIJ9422jg4AexCqAQ8eHJTd2A34.mft (raw, json)
Hash identifier: 6rA+zoDRBreMXDeJjfJPEn82q/EhuvyaNNwaeOmpp/4=
Subject key identifier: 57:98:3F:66:23:A3:4F:EB:4E:2A:F7:E0:5E:A4:91:FC:86:8A:52:A9
Authority key identifier: 84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
Certificate issuer: /CN=84827de36da383801ec42a8043c787253776037e
Certificate serial: 0194BC05261AA39902879F9F3FD267C520CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
Manifest number: 086C
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: d4QzmUrPPbJQxMw96G7I8wKAY_8.roa (hash: kCIIAo6mIinxOh21iDNSoj9jRYqWTcCgtvPqYHHPUqY=)
2: hIJ9422jg4AexCqAQ8eHJTd2A34.crl (hash: WTwUrqU4tLc+uiZeHFaxgzvdQLXILnVH0epMqgW/hLI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:26:1a:a3:99:02:87:9f:9f:3f:d2:67:c5:20:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84827de36da383801ec42a8043c787253776037e
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=57983f6623a34feb4e2af7e05ea491fc868a52a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:c1:1c:4b:36:cf:33:46:b6:7d:39:f5:2f:
84:32:75:4c:f6:a6:ff:fc:f8:66:05:bb:54:92:57:
43:66:14:4f:59:7a:38:02:ab:12:51:bf:19:c6:93:
68:41:22:44:75:d9:5c:09:15:83:0b:47:d8:a5:07:
80:ca:de:da:aa:49:9b:91:d9:06:c6:4e:94:e6:88:
2f:5a:73:77:b9:2e:2c:78:d9:fe:65:59:15:3d:82:
d9:b5:9d:be:bd:f9:38:41:18:2c:9b:b3:f7:38:a8:
0d:4b:87:72:59:7c:83:35:29:d4:00:a1:9f:1a:90:
4a:46:60:84:1d:58:a3:74:3e:b7:0a:15:fd:25:c7:
4d:f8:1d:91:71:56:24:de:7d:87:61:77:ff:7e:c0:
ef:22:24:58:d2:3d:ad:4f:fd:bc:a2:e8:44:db:f3:
9a:72:8c:74:d4:cf:17:c0:5d:6d:5d:07:48:b8:eb:
da:c8:d1:72:67:f1:e0:36:db:6b:7d:b6:41:8a:9a:
13:d0:5e:2d:e5:bc:97:9a:1f:30:36:ef:80:c5:ba:
88:26:83:d5:b6:5c:d7:ba:23:33:d3:75:3d:af:28:
97:2d:9a:70:5e:9a:28:fa:71:0d:cd:45:bb:e4:55:
a3:b5:47:76:a1:15:26:5c:15:da:03:a7:c4:61:27:
e7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:98:3F:66:23:A3:4F:EB:4E:2A:F7:E0:5E:A4:91:FC:86:8A:52:A9
X509v3 Authority Key Identifier:
keyid:84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d2:18:73:b3:60:be:65:c9:17:d8:07:2d:64:50:1a:26:ec:
ee:94:dc:2b:37:aa:3b:28:9d:ef:9f:2d:45:39:ee:dc:57:ae:
48:80:0e:ca:10:83:2f:c1:fd:28:6e:53:36:fe:06:75:95:f1:
7c:b6:31:0b:f1:23:f2:4e:ce:ff:42:49:67:d0:4f:e6:32:66:
d0:3e:37:06:cf:8f:58:e2:03:48:85:d5:7a:f7:a4:8d:3b:7a:
c2:3f:26:37:b5:32:e2:fd:c9:6f:ce:94:e1:92:ae:0c:1d:c4:
44:53:7f:a9:6a:b3:a8:61:82:d0:22:ad:61:3e:43:d0:12:3b:
07:aa:0d:ab:54:27:7f:1c:37:6b:c0:56:cc:34:d0:3d:9b:7c:
3c:39:22:3f:e4:13:cc:53:55:e2:80:43:50:9c:b3:58:d9:75:
ac:38:43:43:36:06:d5:23:f8:1c:a3:87:79:0d:e0:df:17:8b:
28:b7:3a:f2:9f:7d:fa:53:b6:69:f3:13:d7:76:43:1a:38:4b:
c7:8d:84:a4:66:1f:22:3d:e0:ab:04:6a:95:c4:00:aa:d8:f3:
8c:2a:5a:f8:81:bf:15:b8:3c:98:d4:0c:5e:9d:b8:1e:84:1a:
b8:c5:b4:66:f8:4a:97:58:ae:28:0a:d1:5f:b4:51:d3:68:ff:
b9:1d:3d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:00 2025 by rpki-client