Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
File: hWSCS22vvTPxCjaW4ArLlIwRKjg.mft (raw, json)
Hash identifier: svgVMzJFABhyqRAYE8u8l8SIHbgwEmbZ1HxymjcBeTU=
Subject key identifier: C8:E4:EC:88:A9:92:8A:E5:AE:1F:B5:45:C8:25:93:54:36:C6:FD:C8
Authority key identifier: 85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
Certificate issuer: /CN=8564824b6dafbd33f10a3696e00acb948c112a38
Certificate serial: 0194BCAA0DA726D09CEB96977F1AC212DB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
Manifest number: 025E
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: hWSCS22vvTPxCjaW4ArLlIwRKjg.crl (hash: eXjJBjVqkeoXFX0/Sc+YGRPNpcX+UfwAaqwmJDsCEPU=)
2: j3mlArIrCrvoTStpcqF9EPTMJII.roa (hash: zagzdTS3IOA1uItKGwOJz9trfPNv/LGCzKt9YV1P5Jw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0d:a7:26:d0:9c:eb:96:97:7f:1a:c2:12:db:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8564824b6dafbd33f10a3696e00acb948c112a38
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=c8e4ec88a9928ae5ae1fb545c825935436c6fdc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cf:3c:fa:0c:7f:80:b1:dd:4c:b1:4f:56:f5:
f8:23:8f:f1:9e:0c:ff:df:35:15:bd:68:83:a9:64:
3a:ac:44:1a:30:7f:e3:a3:e0:4d:3c:ab:66:60:e8:
fa:ec:ca:32:85:a7:6c:2f:65:86:5e:05:be:7e:cd:
d8:6f:93:91:78:56:89:71:88:6f:f1:da:d8:7b:0f:
a4:97:b8:d4:79:c2:f4:a1:1b:35:c7:76:06:24:87:
d4:bb:2c:cd:07:3b:db:85:b7:6d:29:0b:9f:9c:fb:
ae:e9:65:76:66:42:8c:ec:f7:ff:a3:b4:b9:d0:46:
fd:6c:14:20:f7:cf:a0:c6:d7:42:43:ab:01:5f:d7:
bd:7f:de:ee:f5:d7:59:95:54:7e:4e:35:bb:d3:1e:
22:2f:86:89:77:8c:04:71:c4:8b:3e:a2:4c:e5:fb:
49:dc:ce:31:00:1c:8f:d6:ec:c7:4c:61:0b:83:78:
a8:e0:1d:7d:37:69:10:86:9f:ed:46:3c:9f:bf:9f:
e6:e6:40:1b:53:4a:45:5e:1a:fc:61:1f:1f:d4:0d:
f2:eb:1d:8d:0a:d2:76:ed:9f:17:44:86:e7:44:a3:
4a:08:3c:2e:ca:28:68:ee:4a:8f:91:f4:fd:3c:4e:
33:ae:1b:9b:a3:07:7f:e3:d7:c7:6c:5e:00:d4:f8:
d2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E4:EC:88:A9:92:8A:E5:AE:1F:B5:45:C8:25:93:54:36:C6:FD:C8
X509v3 Authority Key Identifier:
keyid:85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d7:df:22:c8:19:2a:0b:f6:50:8a:bd:46:9b:26:e1:f2:ef:
8d:64:0b:4a:0f:a1:ba:2b:e6:d1:e8:33:2d:1c:cc:33:a3:10:
9f:f9:df:f0:3a:cf:a9:6b:7c:99:1a:a6:e0:1a:35:fa:3a:66:
bf:20:c8:f9:10:97:4b:90:be:8f:7a:02:fe:af:36:07:f3:d3:
a8:a4:1c:89:19:15:96:b4:c5:52:f1:93:b0:57:32:8a:83:8d:
7f:cb:ff:a5:16:bf:61:f6:fd:a8:53:20:a3:7b:a9:c0:6a:97:
5c:90:c3:2a:36:21:3d:11:2d:05:c1:94:e2:32:04:67:4b:a6:
f1:16:46:e4:75:ca:65:fc:e9:af:9e:66:03:9f:36:c8:a3:bd:
df:d5:7e:9a:75:16:bf:f8:13:3c:1d:75:88:ce:f5:27:db:9f:
e4:cf:b0:08:2b:2e:d4:8a:4c:15:e3:aa:95:eb:07:85:22:a6:
79:34:05:3b:6d:1e:62:2e:4b:bf:9f:2f:97:8c:dc:d5:78:5f:
e4:68:b5:8f:47:fb:25:cd:b8:db:e6:3b:b6:ab:c6:98:16:e6:
78:b9:86:64:24:9a:1b:33:75:e4:c2:91:ac:7f:de:e0:85:bb:
86:17:bc:7a:a4:b3:54:fb:b5:ad:93:15:59:b3:9d:f1:6e:4a:
66:96:f3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:17:30 2025 by rpki-client