Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
File: hRwoH1drQ6HKuVPJIEHOlZknDHg.mft (raw, json)
Hash identifier: Yhk5aro+U7aKWZWec70gQMQf8OkOQdMh2D1AXV3Xc4U=
Subject key identifier: 83:09:CB:97:44:9E:E7:A7:49:F7:6F:72:66:11:69:73:A5:73:6C:E2
Authority key identifier: 85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
Certificate issuer: /CN=851c281f576b43a1cab953c92041ce9599270c78
Certificate serial: 0194BCE0A04A158F9A703757013BE9AA7E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
Manifest number: 12B1
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: XhZd4AXcprYaSWJWAkCvII9n7bo.roa (hash: +WoaFZAXvgLhbONkinxfr9JdPcFsQuGimoN13TlQ0XQ=)
2: hRwoH1drQ6HKuVPJIEHOlZknDHg.crl (hash: XdeEncKGO+p2bxC+M6XTQtgQYow67zTfwqv/K2OvWeM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a0:4a:15:8f:9a:70:37:57:01:3b:e9:aa:7e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851c281f576b43a1cab953c92041ce9599270c78
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=8309cb97449ee7a749f76f7266116973a5736ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5c:96:db:8e:55:eb:b6:c7:08:13:87:d7:ec:
ce:81:70:97:7d:da:14:bb:ee:1f:f1:2f:94:22:73:
81:4d:61:4f:4b:2c:62:b9:cb:07:36:71:18:09:04:
da:34:fd:f4:4b:10:08:b3:1b:c0:58:6f:2c:e1:62:
9a:0f:a9:54:50:2d:67:68:6b:6f:cf:84:aa:1a:8c:
86:d9:05:c5:09:ce:db:02:38:69:32:18:29:be:20:
3f:ec:cd:36:d4:24:3c:a6:34:12:67:f6:79:1e:24:
fa:1e:af:bb:65:18:4c:14:9e:f0:88:33:56:90:18:
f4:4c:dc:b5:9b:03:e0:90:b1:d9:11:67:bd:b6:f3:
87:a2:a4:a6:f3:96:24:18:24:45:f5:76:84:36:88:
75:7e:08:db:e5:0e:f1:4b:77:9a:33:eb:82:fc:3c:
e5:99:54:d9:4f:d4:35:9e:79:77:ac:65:0b:6e:ea:
92:cd:91:a6:e6:1e:4a:3b:4b:33:f0:d6:d0:eb:91:
74:e8:ab:cb:f6:45:b9:6b:51:5e:b0:c9:ae:7b:4b:
1b:90:dd:7d:7f:ea:a7:3f:39:fb:77:8b:88:4a:57:
92:da:00:ea:d8:b9:61:26:eb:28:37:2c:e0:37:cc:
01:0f:34:cd:87:dc:ce:f3:9c:74:21:df:96:02:83:
d7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:09:CB:97:44:9E:E7:A7:49:F7:6F:72:66:11:69:73:A5:73:6C:E2
X509v3 Authority Key Identifier:
keyid:85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d2:dc:60:db:f5:fd:a2:58:a8:66:10:90:68:76:78:4d:04:
c0:e8:4e:dc:e1:90:dc:c1:65:ec:51:8e:ed:96:77:b1:29:fb:
bf:c6:f3:30:cc:e6:55:28:89:3f:ad:86:f5:75:a6:5f:72:ca:
d5:f4:d1:f0:45:df:2e:9e:73:bb:c1:fd:73:4f:36:24:94:89:
d3:03:a6:ad:db:8b:9d:5a:ba:8e:a9:8a:93:10:0c:c9:c9:e7:
59:f6:f3:9a:a2:65:aa:e0:85:ab:fe:fa:73:ff:e0:32:d0:cd:
96:67:73:51:2b:20:26:ca:7d:eb:d2:75:db:56:81:4f:f5:02:
ed:bf:bc:cb:fe:59:74:d0:1c:b2:cf:cd:a6:c4:7d:62:e1:67:
ba:11:84:bb:83:6e:82:01:43:bd:7c:71:8b:e2:8f:c7:0a:0b:
30:74:ec:d7:c5:77:5b:79:ef:8a:28:0d:3c:62:87:5d:30:29:
77:d3:01:50:48:03:0e:1a:4c:42:43:f6:60:09:e6:70:99:17:
a7:f0:4a:53:fb:db:e3:54:08:37:ad:c8:1f:04:f8:48:b2:43:
a3:df:80:1d:39:b8:42:44:30:65:d2:40:0f:0c:df:b0:8e:b9:
9e:38:6f:96:ac:55:42:2f:d4:8a:3d:b0:ab:f5:dd:d5:f5:46:
f6:2d:2e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:50 2025 by rpki-client