Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
File: hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft (raw, json)
Hash identifier: JX0p9oOw4ZgmGfGjwMwHySmMELBZSSROS7VJRi/JmA4=
Subject key identifier: F0:13:16:E0:CC:60:6C:B9:6D:BF:B7:A2:BF:85:D1:5F:61:0D:7D:DE
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Certificate issuer: /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial: 0194BD1746268CFB8A15FD8F3783886DD5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
Manifest number: 13C8
Signing time: Fri 31 Jan 2025 16:00:06 +0000
Manifest this update: Fri 31 Jan 2025 16:00:06 +0000
Manifest next update: Sat 01 Feb 2025 16:00:06 +0000
Files and hashes: 1: 9lF4Wddkx_RwPlb5HR8sz7VHAqw.roa (hash: Hn4j3J9eHkRE5z1tLuZOLQRVHX7ZllrYe5IpQOpZT5Q=)
2: KX-LT3dz707Vp7hkt51mW7kN47w.roa (hash: B+a9FfO6NerOzeUWDsk9OJMmWDCrppwYJ3/nJz/k+A8=)
3: VcGuKeLRRHKHiUo1p3J8wR7hlS4.roa (hash: +w/UxWBt5Z4UXYZ4yW2TIYsp5hWJ/kYYtNU8YXQGHVc=)
4: bMsxLLS-6mN3d3TVBhNMqgnz5AQ.roa (hash: FBjUOC9XwfJYZbTFVZbjXTw1auYANpnx/KFKsqWsZiU=)
5: hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl (hash: JC7d7anll7oPdeg9l8nkVW52MDyAUlnOOZ6undPttsI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:46:26:8c:fb:8a:15:fd:8f:37:83:88:6d:d5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
Validity
Not Before: Jan 31 16:00:06 2025 GMT
Not After : Feb 1 16:00:06 2025 GMT
Subject: CN=f01316e0cc606cb96dbfb7a2bf85d15f610d7dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:b7:9a:74:be:d0:1e:bc:d1:d6:09:2d:94:
a1:c2:70:80:e2:0f:a9:5e:5e:54:63:b0:93:e8:f4:
33:7f:7a:ab:16:ce:25:30:13:0d:30:b3:ba:a1:06:
48:e6:09:da:04:4d:31:68:3f:f7:99:00:1f:dd:0e:
5f:ec:9a:8c:f8:f1:d5:44:c6:da:ea:9e:d2:6d:83:
bd:ec:bb:df:c0:30:86:df:08:00:41:13:6d:dd:f1:
a7:cc:6a:2c:1f:f0:df:66:2b:1d:66:21:19:bc:28:
01:de:0e:25:28:11:e4:7c:1b:fe:ee:ee:38:7a:1c:
10:9b:83:bf:91:96:c8:09:b6:d9:f4:10:25:40:e3:
1e:4c:06:44:fb:94:c9:18:e0:94:45:cd:d5:cf:df:
5c:5d:82:6b:67:6e:d6:5d:f8:f2:58:9f:43:aa:7a:
c2:db:70:49:9f:10:36:4e:5b:18:80:35:c6:8f:0c:
5e:44:89:92:c4:ac:d6:b8:17:28:ee:bc:e3:95:a4:
81:56:23:10:99:15:88:98:0d:1d:51:dd:36:93:f7:
69:34:68:ad:03:02:38:eb:45:af:63:19:2f:f4:df:
4a:5b:43:37:1d:a0:1e:52:34:a6:0b:d3:e9:b6:f5:
a7:99:80:dd:a7:ac:6e:fb:61:c2:f7:44:56:af:9b:
91:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:13:16:E0:CC:60:6C:B9:6D:BF:B7:A2:BF:85:D1:5F:61:0D:7D:DE
X509v3 Authority Key Identifier:
keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:04:ef:1f:14:54:f6:56:f1:41:fa:15:80:7f:ee:ec:4a:dc:
c1:8c:7f:11:fb:0e:b2:61:c4:e7:c7:3a:8a:99:22:51:00:bf:
04:82:a8:7c:fd:7a:4b:d9:b1:90:ba:49:5b:c2:db:b1:53:ef:
df:70:a9:2f:31:73:f0:55:8e:1b:ff:79:23:bc:63:08:20:0f:
9b:2b:ee:0b:04:70:8d:51:f1:a9:4f:e4:9a:c3:39:df:b4:ad:
0a:03:b8:4f:f8:dc:39:d5:d1:97:e3:de:a7:72:e3:c7:ac:02:
9e:ca:bc:62:cb:84:7a:3e:ff:03:07:52:b0:ce:a7:3c:5b:f9:
62:55:3e:40:40:d5:36:b6:f0:1a:31:f3:98:3d:1c:27:e6:25:
b5:8f:4c:48:9f:bb:94:3a:3e:b5:08:98:d7:f9:52:11:8b:02:
df:13:6a:3c:0d:1d:62:5a:c1:b2:25:66:62:f2:89:35:df:cb:
0c:00:fc:4f:f3:6a:c0:e7:ed:e9:31:6a:7d:02:b5:30:f9:66:
56:82:46:41:a4:f1:73:da:8d:09:c8:92:d8:d5:f9:8c:09:be:
15:89:ef:93:29:58:2d:15:1f:f2:e7:b4:a1:51:bd:81:aa:b7:
ab:9f:f2:9d:e8:e9:bd:2e:ce:bb:2c:78:4f:dd:e7:9c:38:24:
ff:c9:a0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:49:41 2025 by rpki-client