Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
File: 0HCWDtmg2hybfiRX6ry2YEeNCK4.mft (raw, json)
Hash identifier: szpzjD+7H5zOb9/85RUPwVR65y0OnDO43RZURmpPmnY=
Subject key identifier: 80:F8:98:9E:BE:3F:3C:EE:02:B8:2B:40:43:07:33:71:71:9C:E8:7E
Authority key identifier: D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
Certificate issuer: /CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Certificate serial: 0194BD853480A52154E784E51B0FFC9C16EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
Manifest number: 050B
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: 0HCWDtmg2hybfiRX6ry2YEeNCK4.crl (hash: 0UmHBDLCj96Tqu7wczcPxoflKEdleLb4dpsnhwgKv5g=)
2: ZYblDAaDwwmnrchNjFrf0zm4tO0.roa (hash: TUJh6mrSVIERTxbeRqv55tj1PiJ2BrobmYQdllbfBL8=)
3: a5ENWfgeJoTdkmkmWh2QDvelWp8.roa (hash: oka6UR7fuDvaS+P0EhzHRaWdX/8yDP3LK7DL0R3JiIQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:34:80:a5:21:54:e7:84:e5:1b:0f:fc:9c:16:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=80f8989ebe3f3cee02b82b4043073371719ce87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c4:7b:df:c4:86:a2:82:71:f1:c6:d8:39:5d:
21:9f:19:24:ac:bb:54:e3:a4:ce:17:df:31:96:a4:
9a:8e:c6:4e:ce:67:fd:1a:e5:8c:53:4f:f7:fd:f7:
a3:c4:28:1f:f8:e8:85:01:5f:3a:a7:49:d8:1d:84:
d6:3e:fa:2f:af:4c:56:84:6a:b2:63:29:16:b2:7b:
19:b3:6a:08:d2:80:51:76:47:f9:29:09:9c:7f:dd:
ba:e9:1c:73:52:c3:74:5a:6d:59:6a:5b:d3:a1:26:
1a:54:0e:a8:f5:00:12:a9:00:c6:2e:d1:f5:86:c3:
b8:72:d2:64:08:46:4b:2e:23:91:99:03:f4:21:9f:
b7:47:77:d9:33:e7:f7:1e:a3:fb:9d:70:5a:64:3d:
80:8a:78:67:da:51:53:f4:3e:66:1c:51:95:e2:dd:
a5:52:2e:64:82:28:9a:21:f5:54:0d:29:32:21:5d:
7d:b2:ff:52:c1:79:3f:d8:8f:3e:1d:a1:25:e7:d8:
36:3c:72:4c:a7:fe:56:e0:35:03:3e:f4:29:fa:c4:
b0:f5:df:85:3c:54:ab:63:5d:97:dd:64:e2:b5:0e:
a0:93:8e:f1:41:0a:75:1f:99:d2:d4:1e:04:35:bb:
25:2c:2b:1e:70:ef:dc:cd:bc:a4:7b:39:70:29:6c:
09:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F8:98:9E:BE:3F:3C:EE:02:B8:2B:40:43:07:33:71:71:9C:E8:7E
X509v3 Authority Key Identifier:
keyid:D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:20:05:e1:27:a1:ef:6d:e3:ae:d7:96:1a:37:ba:d7:28:39:
36:f9:15:96:8f:03:36:7c:19:76:65:d7:4a:90:0d:a3:16:4e:
9e:31:62:24:cc:3c:fa:a5:3f:41:40:16:49:27:39:9b:d7:8c:
21:c8:4b:59:57:43:63:b6:80:ed:93:90:73:23:0c:4b:ea:67:
c4:2d:5c:04:fb:61:be:0e:fd:56:60:75:2c:5a:46:59:33:ab:
3b:4f:0f:e7:f1:e7:85:5d:d1:da:c9:42:8b:ca:1b:d8:a2:37:
1d:01:18:0d:fa:44:97:04:cb:43:e3:52:32:51:ac:11:c9:34:
73:89:a2:b2:7f:05:d1:85:9b:6e:c3:1f:85:d1:ff:a7:7f:72:
99:ec:5e:9c:c3:30:85:30:b2:05:a2:78:6e:dd:be:b3:3f:a4:
20:d9:87:76:93:de:53:82:c4:31:fa:b1:1f:10:6a:c4:d5:97:
43:47:55:01:ec:97:d4:95:9a:ba:5c:26:39:e6:46:3d:c4:6b:
fb:3e:76:7d:d5:38:ec:68:54:c1:36:a8:61:fc:21:4f:60:8e:
63:b5:70:d2:4b:2c:39:7e:39:c2:8a:71:e7:ef:b9:57:ba:dc:
7f:b9:11:8e:fa:57:17:4b:a2:8c:f7:8f:7f:75:79:8f:37:ff:
37:31:35:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:56 2025 by rpki-client