
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File: 1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier: a1o9tYfccJ6ErLv0SHiTr65QCSYBZxwTVSLK5Nem6sw=
Subject key identifier: DB:44:EA:76:3A:9E:47:E5:34:7B:78:38:B8:0D:57:25:D7:C2:C8:25
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer: /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial: 0194BC72BAB4B20423C54DAD41B6FAE6BFAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number: 0552
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: 00q_V9fiuxK8x1J5dDf6heEWqpM.roa (hash: XdV8RV4SCz2Bjb29weutw1xlx9C6MC3WoiwiAcbHJHU=)
2: 0DRjjmcZlOUPV43RadORGLY5fAU.roa (hash: OsLSdbKdwCfPfb6fa3q09CVq+CXKI7ScoH/tLbYmOyY=)
3: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: 5opSY62DsRGza63MYWq2tVYRTUQFIraUmvorWhORsYM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ba:b4:b2:04:23:c5:4d:ad:41:b6:fa:e6:bf:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=db44ea763a9e47e5347b7838b80d5725d7c2c825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:78:8a:46:d4:9f:bf:ff:14:fe:65:65:f2:60:
f4:75:3f:26:fd:ef:71:e8:9e:f1:6e:07:be:81:29:
7a:24:a2:f4:38:ee:75:fa:d3:55:40:af:69:8d:39:
1d:40:49:af:19:62:96:67:e6:2a:30:ab:82:ea:df:
4d:18:f4:36:56:a4:aa:d0:b5:4c:00:2c:6b:8c:25:
a3:c7:6e:51:f0:5a:c6:a3:e0:23:f5:54:29:33:6c:
d3:05:2a:b3:be:27:54:fe:06:c5:42:ff:e7:b3:8f:
2b:d4:f7:88:1b:80:f7:35:13:5f:40:06:c9:4c:cf:
cf:89:8d:7f:91:b2:8c:ec:6b:97:de:49:76:50:f2:
d1:22:ec:95:46:78:bc:a8:4d:8c:27:d8:8e:91:a3:
f5:a6:4f:d6:6f:f3:b1:e7:f2:35:cd:2b:97:1b:2e:
61:83:81:97:96:6a:a6:b8:92:8d:d2:30:ff:c9:05:
91:5f:30:0b:22:b8:34:64:35:79:89:f3:1c:dc:6f:
70:6b:b1:b3:62:bc:12:72:ab:6a:fd:69:b2:20:80:
2e:2b:c3:e3:99:4c:8b:ec:92:d8:66:17:b4:21:79:
4c:0e:4f:2e:43:97:dd:2e:80:52:97:67:47:b2:7d:
e8:f9:ec:36:74:6e:7e:41:78:ab:10:9f:e2:8b:fc:
c8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:44:EA:76:3A:9E:47:E5:34:7B:78:38:B8:0D:57:25:D7:C2:C8:25
X509v3 Authority Key Identifier:
keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:16:93:54:87:85:f9:9c:b0:bb:28:3d:11:a3:68:98:5a:06:
ea:92:45:d5:dc:d2:8a:3e:5a:fd:dc:2b:58:02:ea:64:58:92:
58:e2:f2:6f:da:cb:4f:2f:ab:49:e2:88:95:0d:09:f2:2f:aa:
dc:d0:5e:48:8b:dc:c9:54:30:36:63:b9:eb:69:88:97:de:29:
f4:10:34:bf:9c:f8:1c:c7:b5:64:cf:86:18:0a:d5:4a:ad:2f:
46:08:7a:fd:68:37:ad:a4:7c:01:8b:a6:2f:98:bd:ff:89:da:
26:a9:d9:fe:da:a8:ab:01:c2:a7:d0:7f:d3:db:48:68:70:15:
5b:0d:40:6d:6f:b0:d0:5a:46:ab:7a:9b:03:08:df:10:ef:a4:
46:a1:66:ce:ba:f7:e8:8c:32:46:61:d8:d5:5a:52:cd:71:9a:
ae:80:1e:cd:bb:9d:c7:90:da:ec:35:4a:be:01:ba:b3:1f:46:
c7:3b:74:77:5d:5c:2e:e5:06:0e:e5:00:9d:76:57:07:3c:ef:
a4:f1:52:a1:5d:8b:5a:1d:96:de:f4:4e:99:aa:5c:8b:ea:50:
16:b9:6b:cb:d3:52:82:1b:25:56:d5:55:71:bf:92:0f:3c:03:
60:30:25:9d:ef:81:c3:63:72:59:3f:f2:13:a5:f8:0a:d9:4d:
bf:89:64:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:37:09 2025 by rpki-client