Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
File: hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json)
Hash identifier: a3BgCXbtrnIe1PCIAykLYITFecvF5p6xxaETxbOt8AI=
Subject key identifier: 59:9C:B9:16:91:91:C0:BE:4F:59:E7:DD:A0:57:59:56:57:B7:72:EA
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial: 0194BD85612D2C4CFEAB872422152931695F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
Manifest number: 057E
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: HrSCIGhI5pLFciUXIMT4CnC-hSs.roa (hash: eWiCHygAovdf0PgGIUiCzBDgPi+OqepoXf9QONvD3xk=)
2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: YmlpklK4EEi4zwAa0pb9kjgMovq/4rOogK0GZpiy2+0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:61:2d:2c:4c:fe:ab:87:24:22:15:29:31:69:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=599cb9169191c0be4f59e7dda057595657b772ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:0b:6a:4b:aa:ae:9c:ee:11:8c:47:c0:96:
3e:20:50:57:ee:61:0c:fa:55:2c:05:c9:d2:07:aa:
b0:78:37:cf:f6:c5:7f:55:3b:c3:88:f0:e5:11:88:
5a:93:90:9f:8c:24:af:72:ca:0c:63:d4:34:b3:5e:
f5:b6:43:6d:b2:ce:34:63:ff:75:d5:a7:08:0f:95:
80:23:71:e5:26:60:1c:75:70:9e:b7:db:a8:1d:1d:
83:f8:4c:0d:f8:ac:ee:06:01:f3:02:e6:a0:e1:7d:
84:69:c0:59:bb:36:1f:a2:70:e2:16:32:49:f1:9d:
bb:3f:db:aa:a4:ba:a2:31:a7:34:34:9c:d1:d9:68:
d6:c0:7b:d8:5b:b7:21:27:3b:8a:af:67:56:80:8f:
51:58:ba:99:cf:8c:c0:5f:81:c3:50:16:c5:20:b4:
9a:cc:37:2d:d1:bc:b6:48:bf:c4:5e:a2:c5:5b:a7:
77:ac:a4:1f:f6:91:ba:f0:de:81:c9:0a:ba:12:6c:
b4:cc:64:d1:20:b9:fa:0b:a4:c5:68:28:76:82:1d:
10:45:99:78:be:37:5b:6c:89:a5:a9:cb:84:9f:57:
1d:c6:cc:76:52:c1:e8:bc:26:3e:03:35:7c:e8:f4:
37:f0:cd:a1:19:01:e3:20:3a:a9:de:35:cd:9a:c6:
74:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9C:B9:16:91:91:C0:BE:4F:59:E7:DD:A0:57:59:56:57:B7:72:EA
X509v3 Authority Key Identifier:
keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:65:59:e8:6d:d4:ba:d7:ba:db:9f:22:8f:5b:93:28:a6:82:
96:f1:e9:3e:7b:1f:00:e8:c1:24:64:e7:45:50:0c:55:d7:50:
ac:7c:ff:20:1f:49:d9:69:13:4d:a6:26:15:be:61:7d:d3:40:
1b:d9:e5:6c:d3:eb:26:8b:84:62:be:de:91:84:c1:e6:72:19:
fd:67:aa:20:59:42:bc:3d:62:f5:a9:ad:3f:07:ff:08:6a:0f:
2c:15:b6:c9:66:9c:43:a7:73:9f:87:19:b3:0b:bc:f0:53:da:
e7:cc:b4:62:d9:d6:e5:de:10:31:d7:7d:51:6f:14:40:ec:8f:
dd:51:ab:c4:88:1f:b3:f6:32:f6:bc:95:e0:6b:28:5c:10:37:
a3:f2:4b:17:c5:ef:05:61:91:cc:d1:0b:b4:b4:19:07:90:a7:
a2:97:e0:e5:b9:1c:19:22:12:af:aa:7e:2c:93:c7:55:0f:69:
da:fd:00:63:bc:cc:f0:f6:b0:0d:54:37:e1:d4:e5:33:a1:df:
c0:a4:ba:a8:5e:91:44:f5:ab:af:c1:64:7c:50:d2:6a:c1:a8:
d3:88:6d:ef:e7:38:4c:14:a1:60:35:c2:74:ec:07:8a:11:a2:
22:21:a3:dc:90:06:63:f9:e4:6b:80:52:0e:ca:8e:a0:54:cf:
4f:23:60:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:15 2025 by rpki-client