Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
File: h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft (raw, json)
Hash identifier: KaWzvpcNHwgx+5vg2Fyk5bd7nl+r0loBlR/yEW1q8vU=
Subject key identifier: E3:44:C4:F4:85:D4:A3:72:F7:BC:4F:69:AF:F1:44:07:CE:48:6C:FA
Authority key identifier: 87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
Certificate issuer: /CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Certificate serial: 0194BCA9B8285631B2EB182B154BE3B77BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
Manifest number: 0BA1
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: RHGOdSgcoaK-6eU2dKjKlpRjaMo.roa (hash: NRVJAc4Gjyt0Wmb+WBhbiFKpJbnBkqjBbBZ7MMuCSS0=)
2: h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl (hash: hco289VXOGSkC4VzlRYdyp97YrmHdioDPvBRCVY+26Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b8:28:56:31:b2:eb:18:2b:15:4b:e3:b7:7b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=e344c4f485d4a372f7bc4f69aff14407ce486cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:65:94:ad:a3:e7:b2:06:57:18:30:4e:e0:29:
4a:1e:5c:47:a6:9e:8a:c0:c6:10:21:d9:ed:4e:7d:
eb:99:f7:5f:e8:3b:b4:7b:80:2d:1e:2b:fb:ec:22:
b9:97:ab:cc:85:a1:c8:f3:66:4d:dc:3e:05:da:df:
38:0a:0c:23:24:d1:c4:ab:a5:fd:05:a2:40:6d:e1:
5e:25:02:2b:a9:87:de:d2:44:b8:e3:60:fa:3e:3f:
cf:aa:de:ca:60:57:92:72:e7:6e:14:25:4f:57:87:
32:e5:c3:18:37:49:64:08:42:78:3f:62:e8:69:d5:
d7:e3:45:0d:f0:3a:ee:59:2a:c2:98:51:c3:bf:34:
5e:0c:c1:a5:05:46:c9:5c:c9:1e:bd:b5:f4:22:fc:
a2:48:e5:8e:48:2e:c4:c6:df:56:8f:4b:07:bc:49:
b9:a2:47:e2:bf:b1:c7:42:0d:21:fb:60:bb:8c:d3:
b5:ea:c9:58:a3:e0:fa:fe:d3:d6:00:ec:47:2e:ca:
80:6e:ed:ec:f0:4e:33:45:23:e7:44:f3:98:45:7e:
2e:37:8a:27:41:28:5f:7b:f4:17:ae:f4:7e:8f:df:
09:f4:d6:48:6c:a2:73:6c:06:33:e8:e7:71:8f:cf:
71:30:25:61:ca:57:b3:8b:2e:b0:91:3d:ef:e7:79:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:44:C4:F4:85:D4:A3:72:F7:BC:4F:69:AF:F1:44:07:CE:48:6C:FA
X509v3 Authority Key Identifier:
keyid:87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:22:2a:11:43:77:03:e5:e9:26:c4:d7:ee:0b:7e:84:d8:2d:
3f:6d:fe:d9:03:02:be:56:1d:ce:99:7d:bd:f4:1b:29:9d:2d:
e7:67:67:71:60:bb:59:52:cd:1f:eb:d5:d6:86:4b:d9:bd:ea:
1e:2b:b1:b8:b3:20:70:ce:c8:1e:ae:ca:70:ce:58:51:eb:2d:
06:ae:58:26:84:ed:f1:b3:fb:60:e4:d2:4a:5f:d1:c1:76:8e:
1a:66:43:87:7f:a7:cf:f7:7f:a5:99:93:52:31:97:93:09:53:
cc:f9:49:e6:e2:7d:53:17:a9:73:b1:66:7e:61:32:f6:96:0e:
a8:e9:63:0a:c3:8d:f3:92:9d:4a:90:60:ba:d6:c8:c6:24:ae:
03:29:43:5c:21:96:62:57:d1:19:a6:c3:ff:db:ab:2c:ab:b0:
bd:67:c3:f9:c1:5d:41:3a:df:de:7f:7b:ee:1d:1c:85:ae:84:
f7:ce:56:87:09:a8:1a:e5:8b:15:65:97:9a:47:6d:ae:4e:bd:
00:6a:60:f8:92:39:7a:2c:8b:6b:a0:02:0c:ad:0a:ce:9f:3a:
3a:1e:08:1f:3d:4c:24:e3:a2:30:41:3c:07:9c:3d:40:27:c7:
1b:b0:2d:33:9c:7b:24:75:79:25:8d:03:2d:54:01:2e:44:a3:
f4:7e:c4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:07 2025 by rpki-client