Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft
File: hGhM2vJd5AvvwejkIoWo1ew4kEc.mft (raw, json)
Hash identifier: ngYwJCXe8hH/73sJT666Lti+WddGaJj/qU/Ltv49Gfs=
Subject key identifier: 58:3F:33:5B:A5:48:FE:EB:0B:F3:EC:38:D2:EC:00:16:EA:EC:D6:53
Authority key identifier: 84:68:4C:DA:F2:5D:E4:0B:EF:C1:E8:E4:22:85:A8:D5:EC:38:90:47
Certificate issuer: /CN=84684cdaf25de40befc1e8e42285a8d5ec389047
Certificate serial: 0194BC72C3A928366FC241ACFB40DAFFF6CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGhM2vJd5AvvwejkIoWo1ew4kEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft
Manifest number: 0248
Signing time: Fri 31 Jan 2025 13:00:25 +0000
Manifest this update: Fri 31 Jan 2025 13:00:25 +0000
Manifest next update: Sat 01 Feb 2025 13:00:25 +0000
Files and hashes: 1: hGhM2vJd5AvvwejkIoWo1ew4kEc.crl (hash: h+7jCZh82yjD/CPhTOqccgEv2XagQC4zojH5iETSJTM=)
2: oidwYZW8G2o74OS_a_nCcJCpjCg.roa (hash: ogxgsB9YER6I/w+iNtW/Wqu1gf3XIhY2x4sxgGoaIJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c3:a9:28:36:6f:c2:41:ac:fb:40:da:ff:f6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84684cdaf25de40befc1e8e42285a8d5ec389047
Validity
Not Before: Jan 31 13:00:25 2025 GMT
Not After : Feb 1 13:00:25 2025 GMT
Subject: CN=583f335ba548feeb0bf3ec38d2ec0016eaecd653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f5:fb:9e:79:bf:52:61:08:bc:a0:0c:f6:ec:
3d:95:1b:b7:52:0e:38:23:31:23:ca:7b:42:3b:d4:
d6:d6:c0:3c:db:1f:94:79:5b:49:96:6d:e9:2f:aa:
37:f5:f4:06:c0:22:15:43:b7:ef:9d:f9:d6:af:ae:
49:8e:03:58:84:68:04:53:ca:9d:37:48:24:b4:8d:
d8:9d:1c:65:58:a3:db:20:0d:22:e9:b7:23:a8:76:
b7:66:f5:1e:29:80:26:ff:bf:64:10:dc:3c:91:3a:
b9:5c:ce:7a:fa:8a:b4:6e:e6:de:8e:b0:7c:1a:b8:
2a:8a:0b:20:5f:c9:b0:45:aa:81:43:c8:8c:ec:4b:
80:ae:b5:9a:83:e0:34:e3:51:65:58:1a:47:fc:f1:
ed:56:dc:17:63:2d:93:54:b2:66:01:78:e3:93:0d:
e7:ab:b9:e6:eb:01:9e:f9:43:92:da:86:92:7f:08:
13:48:fe:fc:7b:57:7a:dc:8f:da:e5:b9:b5:07:d0:
08:18:f5:61:90:7a:a9:3d:d1:bf:e6:33:08:ab:ee:
36:24:fe:16:57:fd:d2:f6:59:66:a8:f3:a3:fe:92:
76:28:40:d8:84:2d:e6:bd:cd:5d:3a:16:d6:65:6a:
d9:02:4d:e0:9f:a5:94:9d:73:b5:27:66:cc:34:e6:
da:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3F:33:5B:A5:48:FE:EB:0B:F3:EC:38:D2:EC:00:16:EA:EC:D6:53
X509v3 Authority Key Identifier:
keyid:84:68:4C:DA:F2:5D:E4:0B:EF:C1:E8:E4:22:85:A8:D5:EC:38:90:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGhM2vJd5AvvwejkIoWo1ew4kEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:93:6a:23:3f:15:28:60:d8:e9:d6:9f:46:75:83:58:ab:be:
e9:f3:ff:99:6d:24:06:d2:b9:55:04:83:93:6c:45:71:57:f0:
50:10:27:a3:33:33:cd:72:83:85:ea:56:36:bd:6f:d7:5a:0c:
ee:75:60:4e:29:f0:b4:b2:ab:75:1c:0b:b2:3e:50:5c:6d:1a:
f2:a5:88:88:0a:e0:c1:eb:58:0e:10:80:d9:56:31:35:b8:fd:
f7:b0:7d:dd:f1:55:7b:7d:b5:51:ae:61:eb:a8:aa:4e:5b:0e:
8e:27:1f:12:5b:ff:a1:69:cd:68:2d:be:04:af:b3:75:37:cb:
17:5f:59:06:6d:dc:f7:fd:12:8c:c6:28:c2:9f:45:27:04:68:
3b:a3:51:11:73:72:b5:38:e6:7e:d3:49:ed:7d:45:af:6f:16:
df:54:5e:3d:39:08:a3:41:c2:e0:1b:28:5c:53:74:f0:2f:30:
7d:74:cc:fe:de:cb:13:64:87:06:11:47:ba:10:f2:77:d3:cc:
d3:a5:7b:85:5b:c5:eb:22:1c:05:10:26:96:c1:3a:2a:88:cc:
4c:15:17:f4:c2:6e:41:40:d1:ca:c0:a1:c3:2c:85:5c:4c:e9:
ae:ae:52:2c:0c:6e:35:e9:96:92:74:6b:12:05:93:c1:03:b7:
fc:5b:eb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:45:50 2025 by rpki-client