Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
File: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft (raw, json)
Hash identifier: zkzgBDtNiHO5OIIFunCnPqS/7q8izsxVpH4Z+GH7e7w=
Subject key identifier: A8:EE:C6:CB:85:59:2E:1C:6F:C0:DD:0C:73:1A:8B:F5:18:84:D9:DD
Authority key identifier: 85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
Certificate issuer: /CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
Certificate serial: 0194BC04E1EC2511BB16FF8FC7CDFE59BA43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: ABe8z9WKNFPr_YS82i_p03iXBIs.roa (hash: Okh3TBWQ1pwf5rloCDPJjft+o38Qlvi8R+jxiL9y4DI=)
2: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl (hash: SHywXnYTXM8bhJ796WEkc/JCLg5FJl1O4MmbITcC8bM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e1:ec:25:11:bb:16:ff:8f:c7:cd:fe:59:ba:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=a8eec6cb85592e1c6fc0dd0c731a8bf51884d9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:49:b2:fb:c2:69:6a:90:04:6d:3f:1a:f5:
22:e1:b7:22:4f:73:af:77:60:13:49:be:ed:aa:e1:
3f:94:d2:29:20:fa:b2:32:df:be:79:0e:bf:3e:99:
46:28:e9:44:34:5b:ed:eb:66:20:f4:47:33:81:26:
3e:6c:59:cc:42:0f:41:0e:99:23:de:71:4b:be:c4:
26:83:49:c4:c7:48:60:42:fd:6f:4c:61:00:d6:89:
bb:bb:24:fd:d8:5c:3b:de:9a:3e:76:d3:2b:e4:d4:
7b:eb:18:a7:3a:15:be:ac:7a:40:c1:c0:03:4d:1a:
54:ec:4a:ec:da:57:94:6c:ab:52:dc:24:45:c3:1d:
6f:76:bf:b1:ce:95:22:52:f6:de:70:fc:31:f7:95:
7b:ad:38:cd:27:91:1e:b6:1b:cc:34:50:5d:f8:d2:
9c:8a:f2:98:a8:8d:ce:d0:2e:23:b8:e3:0e:d9:34:
2c:63:27:d3:27:98:c7:da:bd:c3:8a:b6:14:20:4a:
45:8b:bd:9e:77:d2:a1:f4:9d:04:14:bd:63:2b:38:
69:23:56:3d:af:59:16:9a:69:b8:01:57:40:86:56:
2a:fe:cf:cb:99:32:43:a9:82:90:3d:fc:d2:a5:07:
cb:d4:a3:31:99:b2:97:e0:51:cb:75:9b:8f:48:08:
0c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EE:C6:CB:85:59:2E:1C:6F:C0:DD:0C:73:1A:8B:F5:18:84:D9:DD
X509v3 Authority Key Identifier:
keyid:85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ea:36:5d:f0:5e:36:e8:c1:0e:5f:fa:d7:d8:fc:07:38:16:
41:39:4e:63:d4:6e:3b:e1:d6:61:e0:f8:f8:09:70:42:79:3d:
95:ac:d5:96:c9:df:75:15:61:7b:e3:19:5e:44:13:09:41:8f:
9c:8a:57:5d:03:60:16:ba:9a:a3:11:7f:10:8b:8e:71:e5:6f:
88:2f:43:b8:24:5e:cb:d7:a8:7d:eb:f0:3a:27:ec:f9:71:09:
36:d6:bb:0a:6b:6a:25:9e:d6:fb:ba:2e:7d:ae:f5:d2:2e:f0:
6e:b3:2d:f4:69:c4:b7:55:5a:92:48:13:6b:f9:8e:ff:c7:9a:
f9:f7:51:60:73:6f:80:a8:89:cf:ad:c0:88:15:a5:7c:75:6d:
30:4a:87:2f:08:fd:75:62:88:36:e8:58:82:6c:a2:ae:0b:22:
56:8e:6a:1d:56:0c:77:e2:72:03:16:e3:2e:23:06:6d:81:8d:
9a:57:c6:5b:4c:89:e7:7c:a1:6a:0e:f8:8e:ff:6e:d1:2c:8e:
cb:c6:fb:bc:a9:54:b7:78:78:7e:6e:49:95:90:af:38:b9:31:
22:af:ef:03:b1:b2:41:94:69:1c:8a:ad:d5:1b:44:65:26:4f:
d1:61:64:6b:1c:16:cd:2b:5d:af:d8:ba:86:de:28:fb:4f:f2:
c3:f6:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:21:07 2025 by rpki-client