Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
File: hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft (raw, json)
Hash identifier: VzzGQ1+/I459GeNbW3MIuPhnw3/8vKOccVJRJFh6zuo=
Subject key identifier: D8:A9:48:73:25:BF:B8:65:DF:A6:5D:00:D1:5A:90:B4:5C:66:AD:7B
Authority key identifier: 86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
Certificate issuer: /CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Certificate serial: 0194BCAA22E6E4B0DB300FB540A5FBD2F02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
Manifest number: 100D
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: F1oKspcJIA5CxkgGbXIBC4yC3wU.roa (hash: AKm+230ZJqvJyVXgtMkmTb/sN72RWRXH+8ONP+ImAwA=)
2: hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl (hash: ZHvxn7Cmk1qI3+yFQ9Ethl+5wTP/jF1Ws7CvhnBDhrg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:22:e6:e4:b0:db:30:0f:b5:40:a5:fb:d2:f0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=d8a9487325bfb865dfa65d00d15a90b45c66ad7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:2d:dc:d8:05:0a:e6:33:80:ea:fb:bc:45:
7b:3d:9e:82:34:34:61:73:96:6f:c4:28:3f:db:89:
c9:01:6e:ce:a8:04:61:12:60:c6:20:2a:0c:76:62:
7c:09:89:59:5f:32:cb:7f:ad:99:51:c8:98:66:2a:
22:a4:dd:f2:94:99:d6:b1:00:a3:bf:b9:d7:36:85:
e5:fd:7b:18:16:be:be:ca:bd:47:01:31:0f:b8:f0:
f1:be:8b:87:3d:cb:5e:f2:bb:54:d7:fe:4a:58:6a:
3f:1f:79:c3:cd:d9:0b:f6:3c:d1:8b:9e:2a:8a:6f:
ea:e9:79:2e:d7:ee:70:61:cd:c0:76:bf:63:df:c9:
b8:d8:c7:6a:4b:bd:ce:e3:fa:59:98:e4:c9:2f:39:
75:4c:f1:aa:11:02:43:6f:d5:38:4f:c5:2f:3f:bf:
68:62:4e:56:3b:3b:cc:1f:7c:3f:bb:ee:b4:3d:5f:
08:43:98:29:13:d7:ea:39:de:fc:0c:43:cb:0b:96:
a9:63:ee:bb:fa:15:0c:9d:85:a6:b5:bd:6e:e6:d0:
e9:09:22:09:93:5d:c6:11:ad:c8:c8:3c:70:a9:3a:
fb:1f:be:f5:37:f1:07:a6:01:e5:28:ee:c2:36:6a:
61:a1:27:e1:e1:9f:9f:38:b9:6a:06:52:90:d4:62:
bc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A9:48:73:25:BF:B8:65:DF:A6:5D:00:D1:5A:90:B4:5C:66:AD:7B
X509v3 Authority Key Identifier:
keyid:86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:75:5e:e0:20:c1:e6:20:0f:7a:f6:8e:d1:f4:02:e7:4c:a4:
75:8c:b6:99:6d:98:64:00:c5:f0:00:d2:8d:f4:ea:f7:2e:10:
69:3c:2b:cb:c0:2b:63:33:50:38:63:0b:d5:6f:ae:c1:17:dc:
4d:3b:87:02:1e:8f:84:cf:8a:3d:33:99:cb:b2:e8:ef:dd:9e:
5d:e1:ae:f9:b8:23:e5:e7:fa:e7:77:b3:ea:b8:63:28:cf:fa:
36:ba:7b:9c:1e:80:ed:9f:4e:21:0c:bf:2d:4d:c5:05:5f:b2:
b6:99:49:c0:a7:6a:b9:7c:76:df:ed:3c:1d:48:c5:f9:30:89:
86:49:80:cc:0d:f6:78:a9:f5:d6:0c:db:52:6d:30:d6:cc:d6:
30:d6:fe:f7:f6:31:7d:7c:55:f7:bd:50:47:c3:66:03:98:6f:
0c:61:08:b3:34:c1:a3:eb:1d:ae:ae:e9:7e:fb:9b:83:6c:d0:
8e:21:52:bd:69:2f:bb:33:93:1c:a4:d9:4b:0d:a7:24:d4:3f:
ad:62:77:49:a4:3d:ec:fc:e7:d0:45:16:b1:12:98:f8:bc:79:
dd:92:42:fc:91:94:84:4d:0c:c3:ea:d8:2e:0f:d0:63:2d:23:
08:b6:d4:dc:91:ac:35:93:e2:ec:34:5b:90:ae:9d:9a:19:a2:
a1:e0:45:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:53 2025 by rpki-client