Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
File: hUu3qjkIyZjePEL34YSVOLBZJhc.mft (raw, json)
Hash identifier: htKA9fl8G5GSKEkGc/64r3uwPgGCjbf6e82d52R+QfU=
Subject key identifier: 25:F5:27:43:E7:6A:80:E4:DB:3F:3D:42:04:21:F3:C8:B7:A5:F8:D2
Authority key identifier: 85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
Certificate issuer: /CN=854bb7aa3908c998de3c42f7e1849538b0592617
Certificate serial: 0194BD1794D66E26125F6DF10D5118DF7B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
Manifest number: 0CAC
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: hUu3qjkIyZjePEL34YSVOLBZJhc.crl (hash: eNdcDyvziesAmEGWdDa2V8aHWCQkjrEjd0lK6T027Sg=)
2: pkoA1nbX0r8lwiVwxbfu80R8kOU.roa (hash: dAPrEkvaKQk5s5Z7WHpV1G3F1Sw4lOg/QTiasC7ZX1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:94:d6:6e:26:12:5f:6d:f1:0d:51:18:df:7b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854bb7aa3908c998de3c42f7e1849538b0592617
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=25f52743e76a80e4db3f3d420421f3c8b7a5f8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:7d:62:6c:cc:cf:e6:81:fe:9f:17:49:f5:
a9:4f:a5:59:76:5d:51:fc:e9:1a:f6:24:b7:24:36:
84:fc:a4:d2:72:5c:bb:8e:69:03:52:b6:b9:ae:66:
08:8c:53:cc:fa:17:9a:bd:51:5c:6d:8c:97:af:1a:
00:19:c7:f3:b5:1f:59:2b:3d:41:0c:89:81:63:cb:
45:7f:bd:cd:27:cb:d3:8f:92:4c:c7:a5:06:07:ea:
3d:94:34:e0:f4:8b:5d:5b:ab:5b:55:e9:5d:c4:27:
12:f8:79:42:3f:cb:3a:02:a9:2f:b0:59:4f:35:06:
4c:a7:aa:dd:79:96:ba:d4:b7:cd:60:01:92:3b:59:
58:d9:48:07:15:00:8c:73:68:73:52:dd:3b:2c:d7:
83:1c:a9:b1:d6:32:63:69:e0:47:0c:39:97:f3:78:
9e:8b:48:27:2b:75:03:86:06:c8:cb:4c:62:04:55:
d8:e2:a8:e9:74:f4:2b:0f:63:f3:c8:3e:9e:f4:31:
7a:80:bc:16:79:fc:b1:8d:20:cb:77:b8:15:bf:ea:
a0:ca:17:70:ae:15:d6:46:65:d7:5f:94:93:4e:a2:
6d:12:3b:5f:93:9c:26:bb:a4:9a:51:89:08:eb:a5:
8a:19:0c:63:0f:6e:10:63:b3:b8:7e:3c:d6:f0:f3:
7b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F5:27:43:E7:6A:80:E4:DB:3F:3D:42:04:21:F3:C8:B7:A5:F8:D2
X509v3 Authority Key Identifier:
keyid:85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:b4:86:e6:98:d7:f9:fa:00:1d:6f:5d:d3:1b:4c:f8:29:94:
d7:d5:2b:b0:b5:68:e5:34:af:6a:74:30:2e:b5:3c:ba:32:db:
e4:3a:49:b8:17:4d:bc:ef:cb:07:2f:b1:02:9c:fd:9d:73:22:
62:c4:ea:e3:6a:a5:57:74:e0:42:84:9a:07:49:82:59:d0:69:
27:ee:ec:2c:17:4f:33:ce:1c:43:51:46:9b:d0:ca:f1:e5:77:
b5:16:2b:3c:aa:63:10:c1:9b:de:d1:4f:3e:64:cf:c7:e2:7f:
da:fb:9c:2d:25:0f:94:96:23:f0:3f:c0:f7:39:54:69:55:04:
9e:00:da:a1:13:51:5e:57:65:8d:26:67:5d:b8:65:3c:71:73:
69:11:d6:c0:2c:75:a1:5b:65:9e:38:d7:0b:99:4b:9f:0f:0a:
f7:59:c4:20:7a:f1:9c:43:c9:88:9d:3c:26:82:f8:5b:32:b2:
5b:4b:5f:8e:54:25:7f:a5:f4:9b:ee:d6:f7:c8:3c:fd:7c:5c:
f7:96:b0:30:76:0d:fb:79:1d:c5:ba:52:62:fe:fe:a0:51:18:
58:58:b2:bd:bd:b7:59:f4:d5:cc:9e:15:36:d8:81:75:ac:51:
34:0f:ea:2f:4c:c5:ae:ef:6b:a1:60:5f:4c:0d:89:ef:ed:ca:
ed:4d:68:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:05 2025 by rpki-client