Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
File: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft (raw, json)
Hash identifier: WwvN3FhEch5B1y+6HW2dAkVFSXBnkFaXGd+qo3msSv0=
Subject key identifier: 42:91:99:F8:9D:2D:6E:00:D8:C9:AD:B2:B2:77:EF:91:27:76:78:38
Authority key identifier: 84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
Certificate issuer: /CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Certificate serial: 0194BBCDC9995202F43F9309C41E32256C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: UAQm7jU6nDSVucMAlC1X0pfHRUs.roa (hash: qJmBvsfQcgPtn4g45ZRr7HOE4GEEsPooJ0gWKQfqnik=)
2: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl (hash: 7x4AxJZE3NPV8SKqIZTCOe7gPqUlOzzYRiF4vnofDN8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c9:99:52:02:f4:3f:93:09:c4:1e:32:25:6c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=429199f89d2d6e00d8c9adb2b277ef9127767838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4a:8b:40:b7:78:d5:2b:87:1c:16:61:de:2e:
ae:b8:05:1e:ee:58:32:f3:c8:ce:96:6d:98:36:59:
29:b3:04:45:b4:01:e7:61:18:ac:b9:38:d9:c8:15:
34:71:16:94:5a:b8:1c:1b:78:35:b9:17:ca:e5:b5:
c8:9d:f8:ee:aa:3d:97:8f:85:ca:0e:b8:f3:4d:e1:
08:79:55:0a:8a:5b:71:3e:7d:89:d2:ff:b8:9b:b9:
d6:ca:fd:12:ed:03:0e:a7:89:27:97:44:e7:b8:ff:
9f:c4:cd:ae:5c:9c:88:56:32:8d:4a:fe:d9:7e:11:
88:6c:56:fe:a8:56:f4:2b:ca:89:f7:77:a4:bb:19:
eb:f3:4c:a8:ab:58:8b:0e:8b:1d:82:d6:13:fc:d0:
34:5d:8f:51:0e:22:d6:d8:74:39:0c:96:a6:6c:7c:
6a:85:c7:d8:48:27:e0:74:bf:bf:e0:97:17:81:f3:
f7:2e:dd:37:5a:a0:02:df:66:f3:b2:11:99:b9:27:
87:02:30:37:a2:f9:24:71:69:57:d3:c3:ed:e1:cc:
42:03:1f:1f:19:55:f1:8c:03:62:22:41:a7:03:1d:
65:46:67:be:e7:11:66:9d:1e:6f:94:fa:a0:96:3a:
cc:c5:1b:4c:df:0e:d8:29:91:5e:73:6f:b6:43:97:
ba:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:91:99:F8:9D:2D:6E:00:D8:C9:AD:B2:B2:77:EF:91:27:76:78:38
X509v3 Authority Key Identifier:
keyid:84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7c:0b:7c:4d:08:42:58:8e:b6:55:26:d8:89:72:3e:9c:f7:
c4:6c:2f:8b:1b:b8:ec:06:86:68:18:72:6e:fc:7c:52:95:b7:
03:38:90:61:31:a9:2f:9b:39:b6:62:34:68:bb:ce:ea:e6:33:
b8:f6:bd:e5:26:a3:bc:ee:b2:d6:7e:61:c0:75:a6:77:ac:42:
d9:e5:af:5d:7e:af:30:c9:dc:0d:b8:5f:28:60:70:b2:f9:4d:
5f:23:36:03:6f:d1:64:08:9e:ce:c6:ab:ee:81:91:a3:d2:5e:
75:17:98:76:3f:a9:80:af:34:fc:90:2b:0d:9d:8c:b5:06:af:
f2:de:2c:cd:7a:86:04:5b:2e:8e:d3:ee:f8:8f:fa:f9:31:f1:
a4:00:3f:15:cc:aa:b5:ab:bc:6f:8e:84:47:c4:10:69:4d:b1:
e0:e5:c7:34:17:69:c1:45:61:0a:3d:ac:d5:f5:cd:75:4b:b7:
15:69:8c:0b:88:80:92:41:78:46:6f:c3:62:25:63:ce:b4:d9:
63:35:8f:ec:a4:a9:7d:ce:ad:2e:29:08:d3:36:99:72:21:b9:
67:46:8c:88:10:54:4e:c7:52:70:19:d7:a2:aa:89:9e:6d:09:
0b:f7:3b:d8:8b:be:d1:f8:eb:79:99:59:18:61:de:94:aa:02:
ba:44:42:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:42 2025 by rpki-client