Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
File: hAKSSGHLwIjGVahyU1qQMQige_E.mft (raw, json)
Hash identifier: l0NeQgLg5NLBjuz8aS12NM2yiNmiKj6wAZ8yQTtgFqE=
Subject key identifier: 4D:A5:06:B6:19:AB:F5:ED:26:EF:E4:B4:97:B8:5B:C6:39:C8:25:1D
Authority key identifier: 84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
Certificate issuer: /CN=8402924861cbc088c655a872535a903108a07bf1
Certificate serial: 0194BC3BF78F63B043B5710589127467F9A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
Manifest number: 1063
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: V4HzyqT3UdFuM-GyIseILy4xTfQ.roa (hash: 1TwXBA5f5XgP5uZG5yeFX6kZqTX4W9t72jbcfsBpAgw=)
2: hAKSSGHLwIjGVahyU1qQMQige_E.crl (hash: dcA1aWQg88wHKL6H6KORi9pnrGTAdBNLtqwcTUBIL1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f7:8f:63:b0:43:b5:71:05:89:12:74:67:f9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8402924861cbc088c655a872535a903108a07bf1
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=4da506b619abf5ed26efe4b497b85bc639c8251d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:db:a5:c8:21:fe:1f:09:21:f6:33:1e:5a:
1b:dd:49:4f:37:0d:4e:ff:dd:76:80:27:bd:8d:f9:
b7:e8:86:e0:e6:d6:57:af:63:1e:e2:57:cf:71:3d:
62:0f:e1:c1:56:49:7a:52:46:05:d7:85:14:aa:a6:
99:76:12:84:08:ff:3d:b5:9e:a1:7f:a6:4b:c2:01:
90:65:a7:c4:64:29:c1:6f:ab:68:e0:a3:6c:5b:cd:
fb:2a:21:36:dd:4c:23:a4:a5:15:1f:44:75:c5:bb:
0f:78:e2:fb:e8:26:e7:28:ea:e9:f6:c2:58:a1:54:
b9:88:9a:79:74:22:e7:e7:3b:1e:29:da:2c:2f:29:
05:75:63:f9:cb:b4:2f:ad:be:58:ef:82:6e:ac:03:
9c:4b:3a:a1:35:42:70:c0:b3:32:1c:9d:b3:cb:47:
8e:3b:8c:6c:69:62:e6:9a:ed:f8:59:3a:44:3d:9a:
97:08:8e:27:2a:95:4b:87:84:88:2b:81:64:09:19:
c0:38:68:c0:49:d7:84:8d:a5:d4:3f:58:bb:7a:97:
20:25:82:b5:dc:54:14:1b:74:c2:8c:fd:f3:2f:40:
ba:8e:f1:a3:da:60:5a:7b:fa:da:fd:4a:22:c1:71:
85:db:cc:73:89:07:2f:24:01:f2:37:45:96:98:8b:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A5:06:B6:19:AB:F5:ED:26:EF:E4:B4:97:B8:5B:C6:39:C8:25:1D
X509v3 Authority Key Identifier:
keyid:84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ef:6c:7f:d6:e3:9b:ba:56:78:13:9d:ce:1f:69:2b:c6:2d:
39:98:c5:07:e6:bd:71:d0:0d:88:22:35:1a:9d:69:5b:9e:47:
86:56:c5:2c:2b:02:ff:43:6b:ec:7c:80:a0:8b:9a:ac:e8:3a:
67:b9:02:60:d5:46:b6:46:fe:b5:b6:54:88:74:8f:53:39:33:
61:a9:c5:e5:ba:1d:cc:f9:be:82:6d:cd:e6:30:c2:79:e6:22:
39:66:c1:87:3c:60:f6:25:55:b6:e2:7c:04:c3:4d:62:83:6f:
58:39:fe:18:88:30:ab:08:1e:0e:8c:00:e5:bb:66:f3:fb:66:
38:1f:6f:88:ba:0f:d9:64:15:67:09:7b:9e:d1:2d:b0:64:87:
a6:6f:90:9f:21:86:2c:79:76:52:9d:fa:61:e5:bc:0d:10:2e:
75:6e:28:36:7e:15:b3:d6:d1:d8:fc:a6:57:a7:b0:ce:15:f1:
45:b4:01:76:85:6f:60:aa:68:5c:de:bc:68:52:cc:d9:0c:06:
6e:15:ff:f5:80:46:42:87:49:75:cd:56:20:64:5f:ff:89:a1:
a4:fc:e6:a9:1b:ef:25:84:1e:47:7e:e7:2f:e6:fb:fb:bd:c0:
31:bc:d2:d0:66:f6:5b:b5:c7:ae:37:c0:e5:79:bd:af:74:87:
e1:79:d9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:40 2025 by rpki-client