Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft
File: hDz1u4drdyt63kMpBctpbxNMqjk.mft (raw, json)
Hash identifier: P3c0hXpN/3C9c9ZcR5dUGcnZUQYhv8qaqW0OuOYtFLA=
Subject key identifier: 28:A0:DF:C7:6F:23:72:DE:95:6A:6C:CF:BD:A9:E5:00:B7:2A:38:AF
Authority key identifier: 84:3C:F5:BB:87:6B:77:2B:7A:DE:43:29:05:CB:69:6F:13:4C:AA:39
Certificate issuer: /CN=843cf5bb876b772b7ade432905cb696f134caa39
Certificate serial: 0194BC3BF6409A0F0D28641B283395C47C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: 8SOVzbdZRi1TiXuPdQBPQag2b1I.roa (hash: 4UxgH1Bm5rLISlPUt1abtwizcDNcCBaAAK4mH1Wxzxk=)
2: hDz1u4drdyt63kMpBctpbxNMqjk.crl (hash: dMaq3qUYPFd3LTvy0Q33xIKaYwcNZiPjoLRrXUDUqcU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f6:40:9a:0f:0d:28:64:1b:28:33:95:c4:7c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843cf5bb876b772b7ade432905cb696f134caa39
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=28a0dfc76f2372de956a6ccfbda9e500b72a38af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e0:3e:01:4a:93:ed:77:7d:b8:fc:02:08:cf:
23:fa:41:7f:b9:9c:c4:90:5f:b3:18:a6:e7:f0:57:
36:8b:e8:69:4b:73:25:91:d5:c4:88:3a:c1:d1:67:
a2:de:ae:a1:09:b4:50:72:eb:7b:53:2f:40:50:38:
2f:69:dd:68:d5:46:0c:a0:a7:8c:22:50:dd:2c:10:
91:51:2c:58:25:8d:7f:81:44:26:d1:bc:82:d8:76:
50:3f:4c:42:72:29:e8:47:89:f3:d0:be:eb:0e:ea:
c8:cd:e8:22:84:6c:6e:bf:ae:a6:2f:f8:0f:4e:d6:
09:aa:7a:de:3d:f7:e5:e2:f8:0e:f5:51:1f:29:db:
7d:29:e8:14:67:c9:a5:98:3d:a0:4c:49:9e:93:cf:
3b:dc:dc:d3:32:f5:37:33:ad:29:ab:0d:37:dc:1a:
06:9b:b1:54:43:63:84:00:21:80:ff:e3:48:da:b0:
97:1e:b4:24:70:08:12:74:dd:ae:4d:16:ac:d6:58:
d2:de:ce:2a:bb:0c:cf:d4:00:e7:5c:70:e5:01:d9:
05:58:a2:b8:08:ee:b4:d4:10:71:fc:4e:d1:49:ea:
f4:32:02:04:61:11:93:37:d3:e6:c8:68:f1:a9:90:
dd:8c:1f:45:95:a3:f3:78:b3:98:fa:ca:c2:a1:98:
d8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A0:DF:C7:6F:23:72:DE:95:6A:6C:CF:BD:A9:E5:00:B7:2A:38:AF
X509v3 Authority Key Identifier:
keyid:84:3C:F5:BB:87:6B:77:2B:7A:DE:43:29:05:CB:69:6F:13:4C:AA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e1:30:e7:98:3b:0e:25:0f:05:db:33:58:4b:7d:48:0c:8e:
cc:5b:bc:50:f6:ce:2f:79:e2:58:a6:c6:32:af:09:84:d6:08:
81:c2:91:1e:15:b2:a8:e0:56:c4:b5:64:35:4a:e0:28:3d:d0:
7f:92:17:48:02:34:5c:f3:3f:96:e0:a8:f6:9e:87:62:2e:15:
0a:c0:d5:91:3e:bf:be:db:a8:da:a6:8c:38:98:74:78:83:b4:
e9:19:9f:29:27:37:b4:02:3f:d6:7d:9b:1a:76:6e:51:a5:cc:
d7:3b:3d:fa:0a:1c:e2:dc:32:f2:90:4f:41:b3:bf:df:c8:ee:
0e:c2:e4:e7:fc:6d:0d:36:07:68:6b:3e:a9:68:8a:8c:d8:7d:
1a:96:31:11:72:db:85:79:69:0c:65:f5:03:f5:bf:ed:c8:5e:
ef:3b:12:f2:6d:ea:0c:66:34:ef:b0:21:8f:8c:04:b1:63:53:
b4:55:96:a2:74:9a:0d:c9:a4:1b:33:19:99:f4:53:96:20:87:
64:97:6b:43:5d:7b:36:1d:52:a9:e1:15:6c:c1:dd:5e:5f:47:
2a:5c:17:cd:6a:bb:8f:a1:52:ef:66:dc:60:4f:d8:df:5f:e7:
7f:41:32:36:5a:f7:64:fc:7f:9d:a4:f4:d0:1e:29:63:e8:c0:
79:23:65:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:27 2025 by rpki-client