Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
File: hESS25y7Cg62v2nCXIaWH0kYPJs.mft (raw, json)
Hash identifier: WdGgrrMMgwN5kb5fgokazvkJEs+ZGqbn5IBYGDwns/U=
Subject key identifier: 8A:36:15:1F:AD:8D:72:F2:A6:F5:AF:93:A7:32:E8:AD:69:E2:69:80
Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
Certificate issuer: /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Certificate serial: 0194BD4E82A38048F4EC7234FBE3FA7F8FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
Manifest number: 04AB
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: TYiDdMg7jFYESVHenYkZA0H7wJM.roa (hash: nVrivhjrdRI0cWTmcIVa/wHRsP8sZBjo+02UhnnNCZw=)
2: bAtdqWOn7XIMZb40RJnvw-dOPu0.roa (hash: ajLP5I+MW9lN2Pm4hOADp3bTpGVbkghpKs5apJzZVDw=)
3: hESS25y7Cg62v2nCXIaWH0kYPJs.crl (hash: SYwiidnAPAw/nPYqDfCHPmzn/7r+FeI5qfxrZCSxdMQ=)
4: raKsGhTlSRWQMWRm6Wn27tm3Cb4.roa (hash: I4OBFbZZGC0w5I2m/kl44FUeB7dXwpuLeB9e6Z5z4ZA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:82:a3:80:48:f4:ec:72:34:fb:e3:fa:7f:8f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=8a36151fad8d72f2a6f5af93a732e8ad69e26980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:63:33:a5:a8:bf:82:c7:3d:70:87:62:30:
e0:69:b3:20:9e:63:49:dd:c4:71:3e:21:1a:d8:69:
12:35:d4:ee:e1:68:fb:de:69:7c:54:c3:1b:ac:65:
c8:63:68:84:31:73:08:75:c3:4a:a1:b9:ec:c3:8d:
5c:c8:69:5e:c7:8d:4f:b7:ba:92:fd:73:ab:cf:18:
3c:70:57:6c:9f:a1:5a:f9:35:87:5b:5c:3d:c0:39:
3d:18:e5:d0:f1:53:8e:8d:82:2f:ce:f5:27:8a:58:
37:02:4d:dd:ec:04:1f:5f:92:29:5a:3e:99:2d:ff:
34:bf:cb:4e:d0:3a:e1:72:c1:d1:e4:7b:35:4e:d7:
64:2e:82:2e:4b:db:c4:ed:af:22:80:b0:70:64:77:
38:07:63:ec:7d:10:61:1b:95:09:b3:c6:20:e1:2b:
db:dc:cf:ec:2f:3c:9f:ac:c1:48:61:71:75:cd:77:
7d:73:74:86:ce:33:77:34:18:f2:68:53:86:66:6a:
5c:3c:8a:1a:ac:c6:87:ae:e4:3f:0c:68:73:3b:a8:
4b:8d:ff:e6:45:6f:fc:6f:6c:ec:70:04:50:b9:ad:
ec:fb:00:5c:bc:5a:c4:c9:34:8f:d7:26:d5:ae:34:
4a:a1:60:07:35:57:83:c7:51:be:8d:14:7d:58:70:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:36:15:1F:AD:8D:72:F2:A6:F5:AF:93:A7:32:E8:AD:69:E2:69:80
X509v3 Authority Key Identifier:
keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c1:b8:62:cd:d1:c5:55:4d:9c:9f:d5:32:da:8f:95:8a:d7:
58:25:3b:73:00:de:9e:59:15:e5:c6:9a:54:b9:fa:d2:15:47:
a4:f5:d9:b6:8a:c5:fb:6d:cb:e3:61:73:51:d3:c2:92:6f:db:
fe:e7:57:b4:57:69:0c:ba:3b:4e:a6:2d:8d:c9:d0:3f:46:1c:
7d:6d:3d:35:46:e1:ff:79:a6:81:e4:92:26:36:ae:c5:63:a9:
a7:5a:92:b6:15:51:98:c2:22:50:26:98:8e:22:3a:ef:0d:ce:
a5:30:f7:95:c2:8f:5c:60:87:38:f0:36:ad:96:0c:0b:24:4f:
a3:5e:18:62:6a:75:69:99:a8:40:0e:22:b1:65:6c:f2:51:6e:
da:5a:24:c4:25:26:ab:35:2e:95:4b:b4:c3:dc:ab:e9:96:9a:
0d:36:35:6d:fd:43:3c:eb:ac:03:26:dc:64:a7:bf:86:ff:4f:
ba:a1:d3:94:d8:0c:89:83:46:23:d0:e2:b4:e3:d3:7f:3f:74:
d1:3b:1e:8a:f6:6d:aa:10:e7:28:cd:3a:5d:f4:34:c0:07:5a:
09:37:c5:78:60:b8:da:ca:a7:69:99:5e:78:e3:47:2b:dd:98:
4f:18:3e:6c:e2:43:6e:d0:2c:f5:7a:c1:c8:26:01:4f:b0:55:
ee:7c:97:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:49 2025 by rpki-client