Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
File: hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft (raw, json)
Hash identifier: e0vkP2frGLt2bSC6WZaoBMI8yJkT/dUGshCC76jefaw=
Subject key identifier: 36:F4:2E:6A:65:79:26:A7:CA:7C:12:88:DC:8D:C9:71:52:DF:AE:BF
Authority key identifier: 85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB
Certificate issuer: /CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb
Certificate serial: 0194BC72A468DFEA1D9C170F16AFC634AFA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
Manifest number: 0491
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: gBy9cD3j_tP--kqjiHxj-BEz2w8.roa (hash: GWls9v+X93Qb6tijazZ0OBt3/3oq/+caZQ2/zTy7cZA=)
2: hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl (hash: 3dNZC5aza2XaMMqvB292PBd/UXSgk2HKJN8D+4xkIW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a4:68:df:ea:1d:9c:17:0f:16:af:c6:34:af:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=36f42e6a657926a7ca7c1288dc8dc97152dfaebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b3:7b:e5:c5:0f:b8:57:e3:86:7c:4d:ad:e3:
32:c9:c4:f3:24:b6:e0:67:c0:cb:4a:13:7a:fb:b2:
04:9c:82:48:7c:00:b9:14:a0:8c:0f:da:ee:01:cc:
c1:9f:c4:a5:c3:79:da:de:f3:3a:29:06:d8:34:b8:
c2:f1:55:74:cc:3a:3f:c4:91:4c:3f:87:09:e8:5c:
6d:27:6f:31:96:36:0f:8f:fd:bf:da:c5:2d:59:f4:
45:c8:90:26:74:b8:9d:cc:c8:1b:fc:df:83:bd:91:
82:ef:24:d3:7d:b5:16:7e:f6:5f:e6:b7:02:50:17:
5b:dd:d9:18:9a:4a:22:dd:78:39:10:b5:9a:04:15:
6f:3f:66:5d:b8:9e:33:72:c5:1e:50:24:da:64:d5:
3f:2b:c8:39:c0:ad:72:f5:57:26:89:e6:7f:91:95:
83:62:ae:64:5d:b8:91:a0:0b:75:26:25:31:e4:66:
e9:0d:12:57:f6:68:71:0f:25:25:d9:04:3f:44:eb:
c2:6b:79:e9:55:ab:ef:91:03:f3:42:60:d1:aa:da:
98:7e:0c:70:4c:a2:5f:7a:b6:7e:9a:09:08:96:d2:
66:f2:14:46:fc:dd:8d:8e:e9:60:94:c5:0f:be:9b:
63:3f:43:b9:b2:bf:33:c3:bb:47:b6:d5:ef:4e:61:
28:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F4:2E:6A:65:79:26:A7:CA:7C:12:88:DC:8D:C9:71:52:DF:AE:BF
X509v3 Authority Key Identifier:
keyid:85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5a:4a:21:df:c2:22:d9:a8:09:fb:f2:75:6c:29:37:c4:97:
de:76:23:d9:df:5b:30:00:b8:c4:c1:10:2b:4e:0e:06:de:2c:
f5:0a:41:26:32:71:86:86:27:ac:65:22:a2:10:75:9f:01:3c:
98:7b:b6:b1:1b:bf:76:a1:55:f9:ca:6e:86:71:d1:5e:77:09:
47:4d:2a:69:c6:71:33:8a:9c:94:b3:f7:e8:f8:f5:9a:b0:a9:
3c:16:18:dc:78:11:92:76:0d:e0:1d:7e:99:26:8b:8b:65:3c:
37:0b:1e:79:33:6d:24:c3:85:e4:83:95:a2:7d:48:92:98:b0:
b1:8c:e1:f3:46:30:ff:a8:72:8e:d3:08:49:5a:e1:5b:06:2e:
d4:6b:5a:5f:04:90:a9:d0:20:86:77:12:d5:95:73:20:5a:d5:
ad:48:cc:ff:7e:34:0d:6f:7f:ba:c2:55:c5:e8:c8:34:ea:36:
3d:d1:d2:32:19:81:2b:06:e5:91:2e:99:fa:3e:6b:12:00:cc:
0e:85:5a:df:9e:f6:92:e5:b4:c4:ef:26:32:06:be:0f:43:e8:
b5:72:95:a2:16:77:a3:46:94:77:bb:06:81:30:cf:be:f9:e7:
1a:f1:6f:50:35:ca:ef:d6:3b:69:8f:25:89:e5:72:a3:16:17:
36:dc:0d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:01 2025 by rpki-client