Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
File: htqvTmjTIiSCMFRM2NspVo5s8AM.mft (raw, json)
Hash identifier: MDcDZm2v8/e/quCDUyEsfJP5sRlQSdJ/Oi2H3V+Fiug=
Subject key identifier: D2:AB:AB:E0:AE:D8:5A:5C:88:27:DB:31:D1:D3:76:C7:9A:87:26:1B
Authority key identifier: 86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
Certificate issuer: /CN=86daaf4e68d322248230544cd8db29568e6cf003
Certificate serial: 0194BD85A8B8CBCD81D901A071552C50B84F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: htqvTmjTIiSCMFRM2NspVo5s8AM.crl (hash: 3rW2ToWClxkQCgopDSgKq1G36pFQlPvdCCdFAkWSt34=)
2: uiT-f1UkP8u3VtHM1H2WjnfclYk.roa (hash: tX+V4MHF7T2iULGYZ2/cXlHTKSsA+WHHf7K/tt0Vdcs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a8:b8:cb:cd:81:d9:01:a0:71:55:2c:50:b8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86daaf4e68d322248230544cd8db29568e6cf003
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=d2ababe0aed85a5c8827db31d1d376c79a87261b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:11:e6:5c:33:db:24:f0:15:a8:25:f1:97:75:
62:ae:02:4b:0a:ff:19:96:60:4b:60:fb:e8:81:00:
38:be:0d:27:95:79:a2:2d:01:0f:8e:e7:f8:33:82:
99:16:78:d9:58:7e:56:49:4e:57:ac:43:f8:10:f9:
35:f5:f8:e3:77:8a:da:13:72:d2:a6:41:02:74:f0:
8c:45:5e:43:25:55:50:f8:c5:dc:4e:bc:a8:6b:2c:
10:df:1e:d6:22:50:67:b1:6e:b2:77:56:e3:4f:d8:
fb:ce:81:47:aa:a0:93:1b:d1:3a:4c:66:ff:b6:6a:
17:32:56:41:be:f8:3b:56:02:32:96:e4:76:f5:24:
98:27:60:c8:62:cf:95:2c:f7:cd:73:db:ee:85:80:
b7:cc:47:84:cd:f8:c4:be:ec:a8:79:1a:0c:62:10:
b6:7e:7b:76:06:68:98:cb:1d:f8:c2:75:09:4d:3a:
5a:e2:db:fb:75:ae:3d:c6:7f:7f:fb:b5:03:12:d1:
d0:e6:65:13:f5:91:bc:51:68:86:46:ef:68:6d:51:
15:b1:51:7d:c5:8c:98:a9:5a:98:5e:45:84:c0:5b:
e2:9d:f4:2f:45:50:b3:16:98:c0:3c:a6:01:05:ff:
a0:c1:94:a9:8a:92:c0:08:1d:18:3a:16:af:15:93:
18:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AB:AB:E0:AE:D8:5A:5C:88:27:DB:31:D1:D3:76:C7:9A:87:26:1B
X509v3 Authority Key Identifier:
keyid:86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:63:5f:4b:f9:29:02:9a:83:c3:09:3c:37:f3:87:72:b3:8c:
9e:2d:1a:a3:60:29:8d:a2:47:3f:c2:a8:43:43:25:3d:5e:65:
aa:87:95:d9:47:2c:3c:a9:88:1b:24:10:2f:9f:fd:3d:b5:b2:
c4:8a:83:00:c4:75:3c:7a:81:26:f0:f4:c1:58:5b:c3:eb:26:
e4:b1:67:57:6f:92:42:bf:ae:d9:06:e7:ca:39:83:2d:5d:2c:
c2:3f:cb:95:6c:9c:8a:4a:4e:2b:17:55:ad:74:e7:57:82:9f:
08:ad:7c:02:82:5d:43:f4:42:18:34:de:7e:49:c4:e3:8f:15:
0f:ba:6c:a7:25:40:3a:dc:71:51:c3:47:74:7c:9b:f8:19:39:
24:a4:71:eb:0e:6f:be:db:d6:c9:5b:f2:2c:8b:c6:e0:fa:67:
1e:0d:98:af:64:01:a3:bf:72:68:92:a7:37:fe:ab:85:e0:63:
f6:01:78:54:80:ca:73:97:bc:2c:66:ee:b8:67:49:59:92:66:
f2:ea:ec:6e:3c:09:b8:3f:88:26:f1:26:e8:79:4e:d3:ea:d3:
1e:d8:30:9b:fa:b1:23:e2:af:b7:ee:8a:a9:ba:3e:53:c3:ac:
91:f8:32:b4:40:88:c5:5b:51:c4:df:37:65:18:29:a3:24:b5:
40:03:f4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:52:47 2025 by rpki-client