Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
File: hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft (raw, json)
Hash identifier: 9+lty1B21NM+GTQDCyyr3L1pn4PMjUaxlMNRYPf783Q=
Subject key identifier: 82:F7:9A:18:4F:14:BB:05:0A:3E:EB:8E:EF:F2:61:FE:12:ED:E3:D5
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial: 0194BCA98E7A15A069B65BAA054BEC0CD53B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: 0mePZR1kaf-hX2Yp4hjxtaHCXOY.roa (hash: Iz51+DSbV7Tr3oZnznfPb0ztDkoHj3CGvdnh39JEVfU=)
2: Dh6Kyc_0YRpUkQaciLKNTFpj2yY.roa (hash: XwxfewChyQGnh/6DJxz8pIZg+xrexkVvjsVCqgpoH3U=)
3: ZovzMlbHa6h-Fl7gDQG_Zq7WfR4.roa (hash: H/iI+5AR6wdmCN1X+mmy0vutxGeF8cVAtih493U1ycg=)
4: hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl (hash: cYTcjNuzNeH+M7qKjJL90iBGWjv087BrZ2su+Gqlbxw=)
5: l73B-rq6PzNDiKoxaYkXjLCugtw.roa (hash: 3VSqbyAVKfkVsGJFnzfZhKO8PUH5YDBnP4CFYJUZ7hk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8e:7a:15:a0:69:b6:5b:aa:05:4b:ec:0c:d5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=82f79a184f14bb050a3eeb8eeff261fe12ede3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:47:c5:96:a0:26:68:f9:54:6e:de:62:73:
62:29:b5:3d:06:a4:64:3c:8b:6b:0d:f3:4c:f1:4c:
bf:ed:9d:c2:fd:a0:a1:8b:03:09:b6:cd:e0:02:fe:
ea:b7:1a:6f:cd:95:47:c0:4f:37:24:f3:1b:f3:77:
8a:b3:fe:b5:a8:4b:5b:37:69:45:3f:17:fb:28:c0:
02:77:b7:ed:a9:90:8e:c6:37:0a:53:18:75:c4:2d:
1d:0e:c5:bb:6d:00:15:09:50:65:46:95:d6:66:42:
c8:ea:2d:41:f9:de:ec:fc:31:72:fb:7c:dd:11:68:
77:80:ed:7a:e7:12:cb:c7:d2:ab:59:5c:ec:92:a2:
2b:b3:b6:9f:78:5f:76:10:ad:78:46:f3:8e:a3:5a:
06:52:4e:7b:7e:3e:13:6c:ac:a7:ed:fe:c4:37:2a:
47:57:83:75:2d:39:84:d2:2d:33:c6:54:9a:90:f1:
96:9b:26:88:58:9b:79:2e:2f:7a:85:b0:0c:45:06:
03:0e:35:c0:3c:ef:77:d6:b8:d6:5a:a9:ca:e9:cb:
4a:07:3a:b1:de:39:8f:09:cb:23:20:01:95:29:d1:
e2:2b:59:10:f5:cb:3a:e3:02:f1:15:23:62:86:db:
73:05:65:68:1f:73:4e:90:5d:e3:d2:f2:a2:4c:ca:
26:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F7:9A:18:4F:14:BB:05:0A:3E:EB:8E:EF:F2:61:FE:12:ED:E3:D5
X509v3 Authority Key Identifier:
keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1c:71:0b:bd:95:16:31:49:49:31:7e:d5:a2:53:51:e3:a1:
e8:25:fa:13:f3:48:ae:5f:42:1b:a5:0b:99:4a:29:5a:96:b4:
6e:5a:ab:a2:af:83:e8:33:1e:b2:a8:0a:39:67:4e:a8:4c:9c:
54:12:5c:95:23:a0:13:50:e3:f0:a7:96:7e:0e:e1:2a:50:62:
1a:df:fd:08:3d:ea:56:a0:ed:a7:7a:f8:11:13:d6:a5:82:32:
1e:f9:e7:7c:38:a4:15:cb:b7:c3:9b:94:f1:97:67:96:0c:f1:
43:fe:67:d3:18:37:e7:5f:d2:c7:34:35:41:3f:e5:a3:8c:1e:
5e:32:92:a9:d6:ed:b0:8b:47:25:b6:14:33:5e:bc:83:9f:77:
d4:90:87:e8:0a:c3:02:38:aa:c7:a2:3b:2c:23:c4:35:13:76:
bf:9a:ad:bb:71:42:fb:4d:a6:7a:2f:ba:49:2b:53:d8:15:2d:
79:4f:02:0c:9d:5d:33:dd:9c:8f:4d:69:27:3e:c9:59:50:a9:
3b:8e:e7:5d:e6:e6:29:88:31:7f:b9:72:56:9d:34:26:be:45:
b2:73:6b:3e:f4:13:b2:70:02:76:af:96:a7:f4:7b:72:f9:0b:
41:d6:05:fd:41:60:56:21:d0:83:0d:02:b8:3f:cf:ed:5c:59:
73:ef:62:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:54 2025 by rpki-client