Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
File: h5axwx_d4r1emPj7t3mKvEdJPPI.mft (raw, json)
Hash identifier: 87SkG1BkNibPRhDOmjBpK2ss0Wuc+dQivitO93zoZX0=
Subject key identifier: 13:26:94:0E:41:CC:C8:FF:36:B3:3B:A5:78:52:A9:44:14:5F:91:4A
Authority key identifier: 87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
Certificate issuer: /CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Certificate serial: 0194BC3CAD2D8758A3322B1416BB99B370AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
Manifest number: 10BC
Signing time: Fri 31 Jan 2025 12:01:20 +0000
Manifest this update: Fri 31 Jan 2025 12:01:20 +0000
Manifest next update: Sat 01 Feb 2025 12:01:20 +0000
Files and hashes: 1: Xaf_adaEk34l87Y0UzQQZjHD3uU.roa (hash: RtEuhMllYELC+PU6yqfyctqQo+07f0YVdbie5OODqqY=)
2: h5axwx_d4r1emPj7t3mKvEdJPPI.crl (hash: yFFxhGTMF6t5dSFA50RlgcjoYPZlUfgt8Jv1Rz6nvFs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:ad:2d:87:58:a3:32:2b:14:16:bb:99:b3:70:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Validity
Not Before: Jan 31 12:01:20 2025 GMT
Not After : Feb 1 12:01:20 2025 GMT
Subject: CN=1326940e41ccc8ff36b33ba57852a944145f914a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:b6:7c:55:2b:c1:29:1d:b3:8d:70:5e:4a:
14:16:3a:06:5e:87:c2:72:75:35:71:b9:b5:78:04:
a2:47:0e:df:88:5b:89:f6:78:88:fb:ed:4d:32:fd:
a2:9f:16:73:e5:53:71:cc:8e:e2:90:a3:45:f1:ed:
af:30:0b:af:e1:b6:24:47:e7:2e:5a:08:16:fc:ff:
5f:d1:db:cd:b8:3f:55:8d:38:6e:f8:86:9d:bc:9b:
e8:bd:a9:bd:43:51:04:da:a1:3b:8e:48:61:9f:1d:
e0:e9:17:eb:ab:50:9c:3e:ba:3c:8b:dd:1c:0d:b7:
6f:31:54:be:7b:a8:90:0f:10:19:b6:09:0f:3b:23:
86:68:23:bc:77:86:ba:e6:66:fc:45:b9:5a:b0:e3:
8b:b3:1c:9b:b4:16:e0:50:f4:89:d3:07:1b:c2:30:
96:38:54:a8:69:38:0a:63:e7:93:22:20:cf:80:06:
0a:84:e2:9a:12:20:03:c6:da:55:3b:a4:16:6b:33:
45:3d:64:1f:5a:20:8a:a7:f1:0e:d4:e1:91:4f:84:
a0:ee:cb:47:0b:45:ba:9b:9c:23:43:ba:ee:a3:50:
3c:be:f8:e6:94:61:9a:b1:13:ab:a9:b9:3c:18:02:
43:ea:16:41:c5:f0:aa:2b:a4:cf:82:fd:3f:c5:39:
02:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:26:94:0E:41:CC:C8:FF:36:B3:3B:A5:78:52:A9:44:14:5F:91:4A
X509v3 Authority Key Identifier:
keyid:87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:92:db:8d:79:b8:27:ca:ea:8e:2f:05:49:4b:4e:f1:8e:c6:
bc:d6:3f:f4:bc:f3:bc:38:39:91:1d:c0:20:d6:70:f3:cd:2e:
3e:23:7f:2e:43:a7:45:15:b8:2d:c5:cb:82:c8:36:a2:41:dd:
aa:bb:e8:88:1c:4c:e7:c6:f4:85:95:fb:f5:a2:41:1b:77:1a:
99:dd:67:aa:8e:f2:26:b2:82:8b:2b:bc:ea:fa:a6:2b:ea:82:
62:90:b9:17:4d:fd:e7:76:05:23:61:74:aa:f0:69:c4:b6:2d:
ca:4d:b5:87:00:4d:6e:ea:fc:2d:7b:87:b1:d4:53:1c:d9:00:
44:e4:9c:f6:48:ae:58:d1:43:a8:60:06:2e:5c:4d:67:5c:be:
1d:cc:ab:34:a4:9e:93:ec:8c:2a:36:5f:fe:65:2a:d9:fe:4d:
fd:25:7c:62:d0:7c:65:e8:33:b0:b4:c1:00:d4:f6:e6:9b:81:
04:ce:8c:b0:36:a4:e7:17:a3:0a:01:31:8e:d1:76:3e:f1:ee:
f9:91:e2:27:94:e8:79:79:b2:cc:be:e7:55:61:45:f3:6f:5f:
e1:f5:ae:ec:b4:13:2d:7c:a6:35:81:0f:5f:5e:a2:18:f8:b1:
03:f0:68:57:69:b4:ff:a7:bc:d5:3a:3d:77:95:31:8e:7b:4c:
29:fb:2f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:38:50 2025 by rpki-client