Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.mft
File: h9OLoS9GKcITH8YOiVDWwwO-fSI.mft (raw, json)
Hash identifier: wfXJY2iblzRt8leMPXKDUchNffbPugf6jdGcoNeRyNE=
Subject key identifier: D6:2C:EC:47:93:89:F4:E3:F9:76:09:13:62:40:41:CA:4D:4D:ED:CC
Authority key identifier: 87:D3:8B:A1:2F:46:29:C2:13:1F:C6:0E:89:50:D6:C3:03:BE:7D:22
Certificate issuer: /CN=87d38ba12f4629c2131fc60e8950d6c303be7d22
Certificate serial: 0194BC04D071A57A0ADDA8A9FF3B460CF7B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9OLoS9GKcITH8YOiVDWwwO-fSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.mft
Manifest number: 058C
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: NPXq7VLWTvwMe_H1BOcCF7vP8QQ.roa (hash: UBan9KbEcKtiRn9epXoesYMRtYi5lW0QY6/c4yNUKv8=)
2: h9OLoS9GKcITH8YOiVDWwwO-fSI.crl (hash: X/3HoYA7n4HAs00dWwnBD3QvDru09BZKSpNMZIYzqdE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d0:71:a5:7a:0a:dd:a8:a9:ff:3b:46:0c:f7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d38ba12f4629c2131fc60e8950d6c303be7d22
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=d62cec479389f4e3f9760913624041ca4d4dedcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:20:5a:fb:6d:6b:26:97:00:a9:8f:62:36:
0e:44:57:1b:69:2e:82:17:f1:1b:91:81:26:42:ce:
7b:87:af:79:70:46:84:ab:1a:93:9c:67:4b:ce:5f:
a0:3e:e4:39:9a:75:f4:cc:42:7a:74:c8:d6:c1:ac:
42:d3:2b:e8:6d:76:cb:f8:21:5b:14:2a:16:3b:42:
a6:58:fc:a6:bb:83:8d:d9:29:6a:5c:c8:99:a8:65:
6e:45:94:10:60:c5:5e:2e:8d:83:b6:38:ea:f5:ee:
03:94:a4:cb:60:0e:b0:05:c4:1f:96:c0:ee:75:13:
35:ac:32:49:cc:15:de:a6:94:86:15:35:ab:e4:de:
d6:6c:be:59:18:27:77:96:08:09:a8:1a:11:30:f7:
36:51:9c:3d:79:9a:e9:74:93:af:b6:a0:e7:c5:61:
35:66:30:ca:44:85:bc:93:69:47:d0:03:bc:a9:ac:
7e:d4:4f:a4:bf:55:79:c7:9a:5b:1f:f0:b7:4a:a6:
de:0a:b3:10:ea:70:8a:01:e5:fc:12:3c:11:4f:1d:
b5:78:10:34:49:45:25:2d:11:da:ce:26:f8:96:6d:
05:93:29:2c:c3:32:58:80:74:bd:58:2e:96:4a:15:
e3:15:da:a1:6b:8b:9b:18:58:47:6a:1b:53:df:59:
9e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2C:EC:47:93:89:F4:E3:F9:76:09:13:62:40:41:CA:4D:4D:ED:CC
X509v3 Authority Key Identifier:
keyid:87:D3:8B:A1:2F:46:29:C2:13:1F:C6:0E:89:50:D6:C3:03:BE:7D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9OLoS9GKcITH8YOiVDWwwO-fSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1b:ec:a5:5c:51:43:9b:fd:8c:dd:93:9f:57:8b:34:b2:d8:
8b:39:85:f4:fa:30:8b:12:1f:21:87:05:af:21:59:46:fd:84:
2d:ad:f5:1c:fa:fe:17:26:5e:ec:84:a4:20:06:eb:a6:5d:65:
33:64:09:9b:13:79:2e:ff:ea:87:45:55:4c:a0:74:13:95:b7:
d0:84:b9:2d:88:49:3c:53:d4:31:ae:23:d7:de:ca:7a:d1:ec:
57:29:58:cd:0d:96:95:8d:a4:89:ae:77:b2:87:69:c4:05:d7:
42:82:42:e5:c6:ca:56:4a:56:3e:a6:1a:0b:fd:a4:ed:0f:61:
1e:d1:ad:66:f8:3d:39:1e:a0:89:ea:bc:ad:72:5d:b7:28:17:
75:56:38:8f:07:58:f5:a8:54:01:be:55:1a:a6:2b:75:26:fe:
3a:8f:a7:f8:d1:88:b5:3b:b6:ef:83:67:62:23:c4:08:73:e4:
fd:98:01:ff:9f:55:9d:ff:67:77:30:41:0a:3f:83:f0:0d:69:
95:62:49:27:a0:81:b4:af:77:9e:83:d5:d6:b3:6a:cf:e6:20:
0a:3d:6f:3f:c0:06:f0:2e:a3:82:c6:48:6a:5f:f4:7d:4a:1f:
c3:12:bb:dc:44:28:63:c1:49:09:7e:d6:5a:23:72:8c:2c:b4:
ae:ae:e0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:13 2025 by rpki-client