Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
File: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft (raw, json)
Hash identifier: qSaa7+L7wOvO4zLOnUFW2glBC4PwCdnfPujiWsBJThw=
Subject key identifier: 57:3F:9C:9A:B2:48:2A:EE:3F:B6:8C:B4:69:3E:28:BC:AB:A5:A0:52
Authority key identifier: 84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
Certificate issuer: /CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Certificate serial: 0194BCA9C85A0A4B39DB059ADA05D1A69D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: KMVsnQKqVUNL9XICZkhdNnJ13MM.roa (hash: 5anm061W7Wx9IwoLbP71CuCVy1+LTW3TZGfC2uCxoRc=)
2: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl (hash: eLUipurLsxaPlftqsaWTTQ6AekX9t+sNsDUE/hJCFtM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c8:5a:0a:4b:39:db:05:9a:da:05:d1:a6:9d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=573f9c9ab2482aee3fb68cb4693e28bcaba5a052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:10:d9:e6:0b:db:76:b4:e5:86:45:e2:20:
d4:e2:ec:f5:e4:54:9b:0c:2a:99:d7:fc:5f:dc:f8:
2f:cf:9c:ad:14:b0:ca:cd:93:5d:b9:0e:89:1f:2a:
a5:6a:da:ec:a3:af:48:b4:4a:d0:3c:e1:0e:f8:1a:
73:81:17:03:90:ec:d0:bd:67:14:fc:e9:39:ca:83:
02:64:55:f0:9d:8a:25:72:b8:5f:ff:f3:4b:fa:53:
99:91:6a:9d:0b:44:94:ac:1c:ed:fe:e9:80:70:e2:
92:4c:c5:8c:2d:ca:af:5c:e7:e0:f8:31:c0:9c:e6:
18:fe:cb:d6:d1:d9:c5:3b:88:ff:f4:ec:b5:5c:97:
79:68:db:12:2e:8e:b7:5a:f2:4e:e5:52:58:81:76:
ab:ac:e4:81:73:d6:76:11:c7:72:2b:bc:25:cc:14:
1e:f9:2b:72:c7:83:3e:b7:c8:50:22:75:2d:b9:9e:
98:58:8a:35:23:b7:03:3f:cd:e0:4c:bb:f1:44:f9:
a0:9b:e8:b9:73:89:4a:74:b5:8a:92:fd:1c:30:fc:
0e:c8:94:d1:a3:ff:8a:6a:43:68:2c:69:5b:01:51:
2e:d4:74:0f:b9:9c:02:e8:c2:4c:03:9f:1f:08:6b:
dc:de:06:ab:98:18:f5:dd:a5:3f:25:85:00:54:70:
66:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3F:9C:9A:B2:48:2A:EE:3F:B6:8C:B4:69:3E:28:BC:AB:A5:A0:52
X509v3 Authority Key Identifier:
keyid:84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0b:f6:a1:bd:65:48:09:21:75:98:59:bb:14:22:51:2b:0c:
7f:95:34:dd:63:70:b5:34:a8:c6:2c:18:ed:53:49:62:a9:68:
5d:ce:4d:ab:3d:df:a1:7c:5c:c9:f8:ea:05:0b:ae:fc:d2:f7:
9a:bb:96:fc:84:01:53:31:d2:e8:78:26:48:a0:35:31:85:c3:
87:6f:b7:12:a5:3f:18:df:2c:9b:cb:cf:00:0c:e4:93:54:10:
f6:7d:3a:52:55:b6:89:92:1d:98:45:30:20:1b:58:90:84:17:
a9:21:c1:30:72:1c:ee:e8:ec:22:0e:fb:2a:ed:1a:32:9a:e9:
c6:f2:a8:3e:d3:e5:da:31:57:14:d6:b3:ff:46:19:fd:1c:3d:
bd:b8:69:36:0e:0c:e4:c4:8c:fa:32:7b:85:e8:5f:61:c8:65:
7d:53:8f:64:32:bb:48:99:2d:6e:87:77:85:8b:02:2a:59:a0:
6a:b0:9a:3e:fe:73:c2:6e:a9:13:54:6f:10:1c:e9:bb:5b:f2:
5e:9b:c6:b2:1b:37:4a:8f:06:17:10:ef:17:f9:bf:19:9b:4a:
9d:d6:aa:96:05:82:81:77:04:d6:b5:70:20:e0:e7:1e:75:39:
bb:2f:9f:20:e1:30:0f:d1:36:f0:b9:00:0f:d0:7e:27:e6:71:
4d:61:54:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:57:25 2025 by rpki-client