Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
File: hto1bCqGENEdNM24pH0rkFGfvTU.mft (raw, json)
Hash identifier: jnl8feiw34m3mVDxlNZx9/Q13PhDSFAQEElLspmN4/k=
Subject key identifier: 32:84:04:DE:CE:DD:10:6E:99:FB:28:95:0A:BC:82:EF:57:87:48:5F
Authority key identifier: 86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35
Certificate issuer: /CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35
Certificate serial: 0194BC3C0C05C29752D8AA6955AE9C3A02D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
Manifest number: 1131
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: e2SQSmJ5Uij4VeGzNgyMcf8tHqM.roa (hash: /jn7jwBSYHJhjR+sZRgi9zex0zsrMd1Ejp9Gj9O6Ons=)
2: hto1bCqGENEdNM24pH0rkFGfvTU.crl (hash: fkMCsKKmkzcDk1CkCAIoJic4zM/x1Ch90GfVM7sh5go=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0c:05:c2:97:52:d8:aa:69:55:ae:9c:3a:02:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=328404decedd106e99fb28950abc82ef5787485f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:d1:c9:91:ed:4b:0e:c6:ee:af:7e:31:39:
4d:28:4c:49:b1:b4:de:74:cf:4e:35:4c:ce:89:8f:
ae:7f:cf:3b:d8:62:1d:e8:80:f5:2d:1c:96:bd:b9:
af:67:27:c6:d5:5d:9d:21:0b:b2:54:4e:f4:0e:98:
ff:57:13:d0:e9:db:d9:05:29:1b:40:87:af:13:f5:
d4:57:8a:19:36:4a:71:11:08:40:da:a6:a4:3d:37:
62:d6:5f:d6:bd:55:75:70:77:fc:63:37:b0:51:c6:
84:79:b0:ca:5b:16:ba:a0:ae:a3:69:ea:68:0f:2a:
9b:e2:9c:af:a5:e2:b4:92:1d:aa:f6:ea:42:84:e6:
70:a2:28:b8:f6:ec:bd:d7:42:3d:bc:8e:61:5c:cd:
b8:b5:27:4e:2c:52:4a:80:e3:28:a8:39:da:a7:87:
4e:a8:5e:5d:bd:75:d1:94:05:fd:92:8f:0a:b4:42:
05:80:51:c9:d6:11:16:05:18:97:da:17:fa:1b:90:
b4:91:54:e6:90:0a:d1:64:74:bb:46:d6:56:20:3d:
50:6a:d7:2f:bf:52:1d:80:00:4b:a9:70:f0:18:24:
fd:43:ed:67:e4:d5:31:3b:05:f9:a9:a8:a3:66:e2:
d6:49:6b:9c:43:50:ab:78:79:2e:8a:92:a6:93:53:
b1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:84:04:DE:CE:DD:10:6E:99:FB:28:95:0A:BC:82:EF:57:87:48:5F
X509v3 Authority Key Identifier:
keyid:86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:73:5d:b4:3a:59:6a:d1:7e:e4:4c:47:b0:0f:a8:d4:d1:2d:
e0:cf:e6:27:00:4f:ae:78:67:09:45:cf:fb:45:e1:93:10:0e:
97:65:1f:74:f8:53:4a:5a:4d:d6:9b:44:a0:e6:a2:7e:25:2a:
07:02:7a:99:cd:88:3c:0e:fc:2d:c2:8a:89:6d:6f:5d:9f:e9:
1a:fb:c9:b5:6a:2f:28:ee:01:3a:30:de:c4:8f:fe:f4:68:40:
8c:38:ac:5d:2b:1c:70:67:dd:f0:e4:d6:70:67:85:7b:6a:4b:
0c:5f:df:76:b7:e6:56:b6:9b:5e:b3:10:50:d5:37:c2:71:2c:
39:a1:a1:f7:78:51:cb:a3:34:af:f1:f2:bd:3f:52:b2:71:eb:
47:e6:52:84:33:54:f4:25:d1:2d:ff:e9:44:14:b2:99:5b:6e:
d0:7e:c4:fa:7c:1d:fe:98:15:44:a9:ba:01:60:51:0c:d4:d0:
7e:0e:9c:c2:63:10:83:5b:75:1a:f6:80:e8:95:ee:cd:2d:e4:
dc:d5:d1:17:d1:03:7f:be:1d:e3:3b:66:00:4f:f0:55:ae:c6:
7b:44:f5:0e:6d:d9:a3:2c:a0:e9:6e:3b:f1:12:5c:89:0c:2e:
76:81:05:80:14:54:32:89:3e:42:bb:38:2f:fa:9b:bd:e1:bb:
fa:92:67:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:35 2025 by rpki-client