Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
File: hPmLsajH8dZnQkjEfg8ErgSa-lE.mft (raw, json)
Hash identifier: yjwUREndVNyKC50AnDPRTSP1qIG8YGIYc9QDHH8Vdzw=
Subject key identifier: A8:43:03:1C:16:3D:D5:2F:54:1C:AC:73:7B:1E:1D:E7:EA:32:D6:AE
Authority key identifier: 84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
Certificate issuer: /CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Certificate serial: 0194BC3BD6BFC61F3DADD32B6F0F7B4DA328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
Manifest number: 0A33
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: Q_PyNzOCLo2V_8ZRI_IgL5-pqQ0.roa (hash: xZL3dvgx52JKq0c82ndChebXnYRXvZQcyI/g63uh0f4=)
2: hPmLsajH8dZnQkjEfg8ErgSa-lE.crl (hash: PO5w7jp7DIB3FgUV+nI/lYhpfidpIFa50UDnEKmkPkw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d6:bf:c6:1f:3d:ad:d3:2b:6f:0f:7b:4d:a3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=a843031c163dd52f541cac737b1e1de7ea32d6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3c:55:78:37:ed:ed:3c:89:bd:8f:b4:af:f9:
1e:dc:20:93:e6:5c:f7:1b:de:a4:1c:81:05:00:c4:
fe:3e:8e:45:f4:14:cc:20:52:ea:0d:47:e4:4b:90:
5d:76:da:39:ed:5f:15:13:41:9f:32:7a:e7:e7:c7:
e9:90:f2:1b:51:a5:69:0f:1f:03:fc:8e:6d:43:1e:
2b:5f:fc:38:4b:df:3d:8f:de:17:19:44:3d:e1:80:
dc:59:e9:7e:80:c0:48:a3:78:99:a8:e4:a3:88:3a:
f3:eb:0f:b3:af:f6:12:c4:d3:2a:63:50:96:01:c5:
79:5f:02:1d:6e:79:87:12:38:32:03:27:ed:2d:bc:
16:72:35:9e:5b:b3:22:9a:41:1e:a0:e2:c9:f3:39:
92:10:8c:84:00:37:bc:d6:46:a1:79:fb:40:06:ee:
6c:2d:27:40:aa:21:d6:ae:f0:88:8d:b1:85:99:3d:
6c:50:93:c8:01:24:39:b2:e4:8f:f8:80:8f:74:23:
2d:b9:21:61:74:1a:ae:83:5e:f6:cb:ff:ec:55:96:
5a:e9:4e:61:a4:0d:e2:5d:a0:8b:03:f4:b7:11:d3:
80:3d:d0:6e:b2:76:1b:b2:bc:92:35:ce:db:48:15:
d0:29:d4:dd:30:01:d2:e3:ea:26:26:0f:2f:dd:9f:
f4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:43:03:1C:16:3D:D5:2F:54:1C:AC:73:7B:1E:1D:E7:EA:32:D6:AE
X509v3 Authority Key Identifier:
keyid:84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a5:a7:2c:fb:e5:cd:1f:91:4f:a4:c3:0a:0b:22:c0:dc:64:
1f:f0:5a:4a:cd:12:e9:f5:6d:38:01:7a:91:fe:0b:73:94:8b:
7f:ca:58:8f:ca:5f:90:ca:eb:08:5c:99:c7:2a:74:b0:b4:28:
22:bd:6f:47:c7:b4:9f:90:38:e5:b6:8a:b2:57:52:71:63:fa:
92:d8:31:92:3c:9b:d5:f2:85:c3:0e:34:60:64:39:b8:58:05:
7c:ce:1f:70:1a:14:60:94:aa:78:e8:46:8d:fa:36:0c:66:ef:
46:7d:97:59:5b:35:58:c0:a5:e6:de:19:0d:da:4f:db:3b:bd:
3c:7a:25:50:07:ef:18:d9:7e:34:e3:06:0d:31:91:6c:61:93:
62:90:76:26:d3:26:59:f7:60:24:5f:b1:c0:48:12:7d:31:d8:
87:8b:a8:8e:ee:6d:44:d3:38:9c:8c:d4:d4:d2:32:ed:c2:e3:
77:e5:63:e1:8e:71:10:19:f4:2b:35:18:93:c9:a9:d9:7a:3a:
73:a4:02:fa:bb:fe:3b:bd:81:a9:dc:d4:b9:de:39:db:cf:3e:
2c:1b:fc:39:36:3e:bf:c7:9a:91:c3:db:45:21:87:08:8d:72:
22:44:52:ff:f3:23:5c:98:92:31:1f:03:fb:4a:85:6d:de:99:
b5:fe:c5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:22 2025 by rpki-client