Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
File: hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft (raw, json)
Hash identifier: eJxuSFKlX4Hbm32Rk7PbWtf63f+xJgTHE0F5HgHG3zo=
Subject key identifier: AC:D3:A7:EE:33:27:46:25:1A:66:EF:30:05:D1:B2:36:B6:1C:79:D0
Authority key identifier: 85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84
Certificate issuer: /CN=8521d103fc73e9075dcf1e22bc8242b70f98c884
Certificate serial: 0194BCA9C5C7B388D4D94D6302D459318134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
Manifest number: 0456
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: 5RI4SZ7klYwbXOltWz9mLe7dxD8.roa (hash: GWR45JMOb96igm8o2PgndioWHr8iBdYB9L2Wx8rR7YM=)
2: hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl (hash: B2mL7a/7iSPkoSfm8EEC93+YlUvUri9XIykwsESbr1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c5:c7:b3:88:d4:d9:4d:63:02:d4:59:31:81:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8521d103fc73e9075dcf1e22bc8242b70f98c884
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=acd3a7ee332746251a66ef3005d1b236b61c79d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:28:d6:17:d7:61:8c:bf:c5:d4:8f:e9:2e:
d5:d6:c1:15:ee:23:d1:7c:a7:19:49:71:dc:64:70:
5b:5f:f6:e4:51:49:66:78:f2:c8:48:44:41:bd:5c:
4e:04:96:0b:3e:e0:2e:24:19:ad:93:54:d0:16:bd:
48:7c:93:58:3c:6e:9a:41:eb:06:af:e0:19:36:13:
df:24:b3:00:c1:5e:3e:16:79:a7:ee:7d:5a:6a:bb:
3a:57:6d:42:8b:0a:51:fb:87:c5:bf:8b:28:e1:bf:
a3:03:1d:a7:2c:0c:a7:e0:ca:89:83:89:c2:34:92:
7c:9e:f3:b3:b4:ef:fb:96:a7:d7:a1:86:7c:32:ab:
e0:85:34:30:34:1d:21:a0:9e:72:f9:40:bf:40:84:
58:d6:6f:88:a4:4f:8b:f3:08:a2:d8:b4:e0:8b:e4:
16:d9:9f:b5:11:93:6e:d5:c9:05:a5:96:79:6a:72:
ae:d0:e4:26:4f:37:cc:dd:7b:b3:60:43:bb:f9:52:
66:cb:63:d8:99:81:3c:78:8b:7d:26:c1:1c:58:89:
8c:9c:5a:87:15:a1:4d:56:0c:21:8d:94:1d:c4:1d:
ec:f1:52:c2:3a:22:cc:60:25:98:f5:ce:bb:73:96:
0e:47:cb:48:64:ca:77:4e:0f:38:5a:f1:25:5a:5f:
4c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D3:A7:EE:33:27:46:25:1A:66:EF:30:05:D1:B2:36:B6:1C:79:D0
X509v3 Authority Key Identifier:
keyid:85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:33:70:65:d3:9a:7c:b5:c9:51:9e:58:64:3b:92:c3:32:52:
3e:61:90:13:f5:69:a8:8d:8c:02:95:07:df:2c:79:ce:c2:0a:
23:fc:8a:2a:c8:36:cb:ac:d0:3e:c1:4f:30:c1:e3:fe:6f:e4:
f6:3e:71:f0:0c:dd:06:58:e5:41:d6:07:5b:49:a6:44:fb:ad:
5f:f7:c7:99:1b:29:b7:8e:29:ed:0e:5a:48:b0:15:eb:ef:35:
0d:d7:eb:cd:56:07:f8:98:f6:37:be:6d:1a:04:45:a2:ec:3b:
83:5a:93:f7:c6:85:6b:03:5a:66:80:04:7c:3a:de:d2:ee:f9:
c5:d3:a0:a5:5f:78:46:60:a9:c7:cb:f4:2a:5d:42:a2:06:a9:
06:96:ff:1c:7d:12:b2:d4:d4:8b:db:a0:62:92:8d:9f:37:e9:
8c:c3:15:2c:2c:b5:e8:03:8b:51:2b:c4:fa:f0:7b:4b:74:1b:
24:ae:1b:38:4b:f0:6f:d1:2a:de:bb:72:42:3e:0b:c4:e7:67:
1b:c5:ec:e8:5a:ff:50:17:91:f3:77:c3:c7:38:76:88:d2:59:
2f:f7:35:fd:fd:68:0d:12:d5:7d:e2:57:92:d5:62:54:ed:14:
57:13:6f:74:ae:bd:4d:68:ae:6f:d5:92:2c:77:41:b5:54:41:
91:57:20:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:08 2025 by rpki-client