Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
File: hEWs0xvMvTRflkrZB8p3g9UEAm0.mft (raw, json)
Hash identifier: Y3UvMQ0pO5LzKbAaTnCsf0KruiYEskbrFVwAFJ/9XAo=
Subject key identifier: B0:A0:E0:B8:23:93:3B:2E:8B:68:C5:BE:9A:FA:11:A5:59:DF:DF:7A
Authority key identifier: 84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
Certificate issuer: /CN=8445acd31bccbd345f964ad907ca7783d504026d
Certificate serial: 0194BC3BC528EF745F72696793CB528AA8CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
Manifest number: 0159
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: MIsHJfMxCSM1WvbxV6mjQ2268Dg.roa (hash: 7IHu7bEPJwg7z9jyxbfl0xePWRPgEqdEgg/sFRD/jOU=)
2: hEWs0xvMvTRflkrZB8p3g9UEAm0.crl (hash: /mq87K1252tajNolfVtulhzu0xQPECToYPccwzktZmI=)
3: tXUyhf07-eQaf37r4yK9NmJ5yPE.roa (hash: GWIxTVoGfPA2NfNvC8esjl5GZCoj69LgeTwNbdVaqCA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c5:28:ef:74:5f:72:69:67:93:cb:52:8a:a8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8445acd31bccbd345f964ad907ca7783d504026d
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=b0a0e0b823933b2e8b68c5be9afa11a559dfdf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:bf:66:2a:bf:28:5f:93:1c:d5:a9:9d:df:
37:c7:61:ed:46:4d:27:24:10:47:f6:b3:74:5e:15:
a6:e1:49:6c:2c:7f:69:8e:e4:c5:4a:a3:d7:6e:23:
37:b7:ce:58:95:59:4e:d1:22:df:39:a3:cd:f5:81:
16:d5:6d:b2:4b:57:b8:7f:24:b7:ce:4a:6d:0b:5c:
1f:c1:4d:b4:d7:76:2a:e9:89:e9:24:d4:24:75:2d:
9f:16:47:60:4e:79:71:40:ee:99:4f:18:ac:02:54:
1c:2d:0c:8d:35:f4:20:1c:af:4d:ad:36:99:a6:c9:
63:f9:ee:b1:a8:f6:1b:f3:bf:af:8f:b4:62:94:4e:
64:1f:1e:ac:05:21:84:d0:98:c9:84:c4:67:57:d3:
58:8e:d3:27:8d:a4:3e:2c:cf:d1:75:7e:63:7c:f1:
a9:80:c4:26:a9:67:85:34:e0:bd:45:f5:c6:1f:3d:
3b:ed:d4:be:fc:b0:cb:06:c2:a7:0f:16:c3:c6:71:
58:56:ea:7b:55:c0:16:b3:23:33:17:79:09:e4:d3:
e6:94:7e:5c:bb:ff:e3:55:7b:94:f0:e2:7a:80:3a:
20:68:d7:11:d0:53:e5:f8:bb:01:04:35:a4:2a:70:
27:b4:4b:aa:64:af:95:66:5c:3d:58:a2:f3:75:8b:
cb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A0:E0:B8:23:93:3B:2E:8B:68:C5:BE:9A:FA:11:A5:59:DF:DF:7A
X509v3 Authority Key Identifier:
keyid:84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e5:89:30:ae:de:43:ee:19:48:56:ea:d9:dc:c0:35:4d:7f:
45:e5:90:68:ff:da:25:df:3f:60:7c:05:d0:23:50:9e:f9:16:
5a:69:28:87:43:61:47:02:42:f9:6b:6e:22:6e:8b:a3:63:4b:
ef:0e:e6:27:83:29:0e:5e:73:10:97:48:ac:27:9b:81:3e:71:
6d:5b:e5:41:ab:f4:c1:01:0f:bd:77:11:a8:60:d5:8b:1f:98:
af:ed:02:f5:74:75:70:a3:7a:49:45:9a:b2:e2:90:55:1b:ba:
1c:fc:36:6e:2d:60:4d:7e:51:04:1f:db:e7:dd:96:52:22:be:
69:cd:19:38:e0:6f:4b:61:0d:91:7a:5f:67:21:12:75:5d:c7:
6a:e9:62:03:2c:bb:dd:ca:79:88:09:2c:4c:d2:45:46:50:91:
84:81:73:32:2c:f5:5e:21:a1:e0:38:63:85:fe:92:5d:f7:87:
1f:7c:be:49:af:e6:53:18:c3:94:71:5e:9c:35:84:51:5d:d7:
7f:38:bb:9b:d6:90:eb:53:1b:0b:3a:3b:40:71:e8:00:f8:2a:
c6:db:da:65:8f:33:2d:a1:8c:d9:5a:44:35:43:04:9f:b3:f9:
78:6b:ab:2a:9f:6e:6a:88:f1:f3:8a:38:b5:4f:85:4e:43:7d:
9d:c5:4e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:44 2025 by rpki-client