Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
File: hps2AP1zjmmNEv7yDhBuapTjtnQ.mft (raw, json)
Hash identifier: ISzdZCfUYWR5HFVEFdric3zeSrHTWjiTHAE6AgJQG3Y=
Subject key identifier: A9:D0:B2:E0:39:42:34:C2:10:58:A7:63:68:55:69:8B:4D:FC:2E:FC
Authority key identifier: 86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
Certificate issuer: /CN=869b3600fd738e698d12fef20e106e6a94e3b674
Certificate serial: 0194BBCE4C3F810163C44FFF1B232BC3AB09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
Manifest number: 091A
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: hps2AP1zjmmNEv7yDhBuapTjtnQ.crl (hash: jPs6vXSMwIkei6Dx9dE8foHznoQiwre0FJ9why9XuVM=)
2: sdThYvleJaL-c_bm6C-9ZPzP9Y4.roa (hash: o0CkhveA8bkxqQ9BoY1Nin+1fU50JT7PqNBRU8Zhn3Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4c:3f:81:01:63:c4:4f:ff:1b:23:2b:c3:ab:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869b3600fd738e698d12fef20e106e6a94e3b674
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=a9d0b2e0394234c21058a7636855698b4dfc2efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:54:03:5a:af:83:20:69:d5:89:55:81:ed:
c0:c1:2c:be:64:c5:d8:e2:2d:a3:ca:a0:c1:57:66:
ad:b8:c7:8a:2e:76:56:94:a4:59:f8:95:2b:25:c4:
f6:70:51:a6:a4:18:1f:26:42:27:f9:f2:17:f3:f3:
9e:fc:42:5b:f3:ec:7c:e2:4c:8a:23:72:0c:95:e0:
4c:d9:89:4d:63:c6:6f:90:39:60:9d:81:ad:13:61:
62:e7:37:5d:62:1b:b3:8f:3b:25:f7:88:e1:92:a3:
29:14:2e:cf:24:3b:ca:fe:13:67:51:c6:3b:c5:02:
9a:ec:5f:5f:5f:e1:c6:af:93:eb:6b:1f:15:28:ea:
98:fd:a3:6d:06:7d:ec:bc:90:3a:a2:86:3b:a0:ae:
c7:f4:0e:05:59:fc:75:eb:bc:81:eb:54:8f:30:6f:
e7:2b:1f:9b:b6:24:c5:32:28:1e:1a:bb:13:28:8c:
27:d3:5d:9e:47:4e:5a:94:df:a8:1c:1d:e5:46:ce:
2f:9a:20:87:95:9b:01:dc:c3:29:b2:04:81:85:a2:
b4:c7:16:e9:1c:0f:f6:a9:03:e4:f3:da:17:c8:9d:
78:ac:66:27:6b:28:1b:b1:fc:3a:a1:33:fd:d3:b3:
29:96:56:ac:09:a2:5b:c7:63:d2:4c:30:94:03:89:
5f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D0:B2:E0:39:42:34:C2:10:58:A7:63:68:55:69:8B:4D:FC:2E:FC
X509v3 Authority Key Identifier:
keyid:86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:de:02:ed:a9:1b:63:ba:cb:19:13:a8:62:1e:62:67:9e:2b:
52:aa:5a:7b:55:79:4c:cd:a1:4c:af:7b:88:93:b6:fa:6b:76:
d4:76:95:8b:46:69:0d:65:84:f3:d8:9e:2d:d1:fd:7c:b2:37:
6d:fe:cb:76:ec:f9:df:7b:a5:5f:60:5a:64:b7:0c:92:3f:d8:
99:da:70:df:fd:b2:36:6a:03:31:98:33:b4:34:9e:a0:31:98:
79:a7:2a:8b:21:fa:5e:83:d8:de:39:ec:4f:1a:e5:da:c1:31:
f8:50:0b:2f:7b:be:46:42:ab:5b:22:fb:63:e2:fa:f0:73:10:
c3:bb:59:06:ac:e7:89:ea:b0:d4:c9:95:b1:2f:31:d7:c3:88:
00:10:d5:cf:d8:05:fc:0e:0d:e5:72:fd:fc:57:7e:41:ec:b5:
f6:2b:bd:2e:a4:79:53:f6:ab:fd:8f:f5:21:5a:cc:4f:d2:c5:
34:fd:93:3e:31:1f:0f:37:21:a2:f9:f9:10:a5:47:f6:34:23:
bf:93:5b:05:82:88:91:1c:1c:37:e3:dd:d1:94:55:41:c8:e8:
65:9c:29:24:c7:ab:3c:5d:be:b9:16:7d:1a:5f:10:43:f7:28:
a3:be:4f:87:70:dd:21:01:31:c8:0c:41:6c:53:73:f6:67:e4:
b0:d9:07:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:41 2025 by rpki-client