Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
File: hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft (raw, json)
Hash identifier: P94SZnpzbwMoh+GMQjvAoyptYWgDd9vWBGaLyecn50I=
Subject key identifier: EE:B8:31:D3:36:54:17:95:37:5F:78:91:0A:A9:EE:5A:03:40:44:2B
Authority key identifier: 86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
Certificate issuer: /CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Certificate serial: 0194BCE0955AEAA0EF4387B95D9C6B622945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
Manifest number: 0642
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl (hash: MfjitQUZuYstXr2uOXNFrLmDflDov3OSv2pLHrmSxiw=)
2: oiBFy3pkObmB-SUVyi8mjUeggCE.roa (hash: DrQMitQl5NyHBIDeRzh85R9x2+NpayUje01H5X2GJbg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:95:5a:ea:a0:ef:43:87:b9:5d:9c:6b:62:29:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=eeb831d336541795375f78910aa9ee5a0340442b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:af:51:5f:2d:71:87:cc:d3:2b:22:b6:f8:
b6:57:21:6a:cf:0d:fb:82:7c:ff:74:be:1a:c7:c3:
87:ec:41:0a:3d:3d:e8:7d:c9:f8:77:99:5a:a1:1b:
c5:b3:66:29:1c:fd:ab:97:6a:56:7a:ca:98:8f:76:
95:df:ba:6f:a3:85:eb:c7:85:3c:e5:63:69:c5:92:
67:53:d1:e5:86:39:1c:2c:71:e1:b7:af:04:1c:09:
38:9d:51:c9:14:c0:ea:7e:ff:d0:d1:84:c8:87:69:
4e:68:62:6e:bd:e1:28:aa:9c:b9:07:ba:91:7f:33:
65:94:0b:cd:1d:e1:79:8a:42:92:4a:a5:59:1e:40:
3c:16:c5:72:f1:36:15:16:61:71:be:2a:5d:4f:fe:
72:e4:46:4d:f2:28:b8:96:a8:ab:22:5b:b8:5e:a1:
6e:8d:c0:92:83:4a:80:34:2d:34:62:d6:67:7a:e0:
c6:86:bc:f8:d5:06:f7:a3:50:f1:8a:62:78:b6:43:
26:3c:9f:9f:6e:7d:b7:1a:a1:19:2f:5f:9b:1e:eb:
22:aa:94:42:ff:76:81:17:81:0d:8c:83:a4:e4:cc:
6c:d4:90:84:d3:c5:31:53:22:de:28:c3:06:1b:64:
fa:d4:b0:30:58:b6:f5:ec:6d:12:14:60:18:62:8e:
4a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B8:31:D3:36:54:17:95:37:5F:78:91:0A:A9:EE:5A:03:40:44:2B
X509v3 Authority Key Identifier:
keyid:86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d6:a4:ce:ca:6a:f3:af:1e:19:1b:99:f3:e5:b3:41:8b:98:
f1:b6:3a:75:41:36:43:a3:e8:65:03:32:b5:fe:13:c2:97:6b:
af:36:a2:ac:7b:40:6a:a9:f4:87:bd:54:a3:81:89:6e:18:9f:
f2:0f:96:ec:f3:45:b4:1c:91:b1:69:a3:55:47:26:b3:9d:f6:
d1:c9:0b:56:4a:18:07:65:bb:12:46:84:ba:5f:7c:f5:08:e7:
2e:f0:b6:d5:d0:33:b1:26:7c:7d:d3:8f:32:c4:2d:cb:ff:21:
6e:ec:ba:08:1b:4d:b0:81:5b:a7:a5:2b:98:76:d1:db:fa:95:
bf:76:ff:88:4c:40:2c:a9:3a:b9:81:14:60:7f:05:dd:7e:fc:
2c:fc:5d:2b:80:60:7a:77:a0:1b:f0:0b:83:bd:fb:4d:0c:82:
69:cb:08:6a:67:97:66:25:0b:9f:b6:0a:73:77:9a:ee:61:46:
d4:bd:f9:53:1c:fb:26:5d:4f:e9:c4:a9:56:42:3d:bc:f3:5c:
8e:d6:90:e2:ba:8b:57:c3:b1:fa:63:b5:c1:59:15:2d:12:42:
aa:13:64:1a:c5:f1:ac:f7:b5:25:eb:bf:47:f0:a5:8f:62:fa:
98:97:7f:dd:3b:f7:35:fd:ea:40:92:7d:e6:a8:d4:f1:2c:5e:
07:9a:d8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:54 2025 by rpki-client