Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
File: hUyBdtnELHBLMQkTMJRwNRu1meU.mft (raw, json)
Hash identifier: JQzSbdNW+uN4KopCQMAVbMKpsgZPkx+RrFbm2Hg5Qx8=
Subject key identifier: FF:D6:1C:3F:16:34:B0:92:49:E1:26:0B:BC:B6:40:26:90:1D:5C:28
Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
Certificate issuer: /CN=854c8176d9c42c704b310913309470351bb599e5
Certificate serial: 0194BBCE20BC6A009DAB988596C5948F7EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
Manifest number: 0F52
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: FYfGapYZgv1rSx7oxjUTR0AEqSI.roa (hash: /yS9+tjgVqFWik3KkW3YA5pzZoZBBA4Y+IeN8zVnoxw=)
2: d12qVgxDPPHiE2ljm9qZxxkNLxQ.roa (hash: zX9r1B9nDeSmX0ma2mBmx6eNhz70tybIXv2tasEp9Z0=)
3: hUyBdtnELHBLMQkTMJRwNRu1meU.crl (hash: 534fgRR3/njkaRoUf4JBGltzQL4qEF9V7gcRTdHtrzo=)
4: j-Ef-_ZUrA-AY6ZXYzU0wKA0MAE.roa (hash: xMubkcRgzBEAU63sGA3yqVsJQIJj2JYDdMpLJL8yY80=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:20:bc:6a:00:9d:ab:98:85:96:c5:94:8f:7e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c8176d9c42c704b310913309470351bb599e5
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=ffd61c3f1634b09249e1260bbcb64026901d5c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:b8:ff:3c:de:e8:50:7c:5b:24:68:0a:6d:
05:92:b2:ba:be:a5:82:b0:41:06:cc:35:5e:20:8c:
ab:79:9a:a2:b6:72:bd:29:d9:30:51:80:44:56:71:
0b:0c:2b:5b:1d:ae:67:11:65:be:d3:aa:62:19:8f:
8e:86:f5:e4:f0:b7:4e:11:eb:18:f5:a9:54:33:bb:
8b:8a:44:a1:7b:2d:50:35:59:c6:d9:7b:30:ef:29:
8e:3c:db:21:10:f2:de:f9:b3:66:8c:1d:a4:78:51:
bf:96:13:86:97:b2:ee:b7:5e:26:9e:de:33:d7:b6:
9f:58:01:d1:33:f7:e3:1f:ee:57:5f:e0:9d:40:3e:
53:66:e9:e8:cb:88:50:5b:8e:33:d6:e3:8d:ee:d9:
e2:34:b5:1f:2a:4e:ea:b2:ab:7b:2c:08:ed:47:d0:
42:f1:e4:93:c8:c6:87:60:88:13:51:5e:8b:c4:cc:
3a:3f:e3:64:09:2a:66:b5:09:9d:ec:cf:1e:1d:5a:
1a:a2:18:0a:20:55:e6:2d:64:71:1e:ec:9a:1e:22:
f4:65:3f:35:56:61:cc:0b:55:e4:d5:df:0a:fc:9a:
98:7d:a6:e3:ec:67:5e:32:3a:3d:6e:84:30:af:d9:
33:01:0c:0f:cb:e3:55:05:35:83:17:39:19:a1:b7:
cc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D6:1C:3F:16:34:B0:92:49:E1:26:0B:BC:B6:40:26:90:1D:5C:28
X509v3 Authority Key Identifier:
keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e3:44:08:d6:38:5c:03:77:66:67:36:da:da:a7:43:82:a5:
c4:8e:62:8f:99:81:fa:50:c3:bd:6e:39:b3:f9:83:c6:85:12:
9e:f8:32:c2:88:28:95:70:75:f3:b8:e4:8b:1f:a8:a3:54:2f:
c2:6b:90:6e:66:26:94:60:e4:9b:2b:d5:c6:4c:24:0f:2f:e6:
cd:0e:c9:8d:1c:0f:35:0f:6c:fb:81:4b:93:9b:e1:65:e1:e3:
31:54:20:4a:d6:9d:78:d9:9d:07:7c:89:db:54:10:0f:e2:73:
14:9a:60:ee:42:02:2c:c1:16:eb:d6:07:d7:d4:80:dd:44:92:
a1:4e:d4:58:4c:77:77:3c:c6:68:64:72:80:0d:37:f5:4e:1c:
19:2b:c1:92:95:8d:a2:5a:ba:ee:73:4a:f7:f8:ff:9d:b8:82:
90:a0:55:41:68:3c:63:4e:41:00:9f:05:5e:72:0a:02:74:da:
04:c8:ab:de:0c:50:ca:2a:66:62:f8:29:e8:49:ec:d0:9f:43:
9d:91:83:fc:c4:31:f1:8b:d1:d4:a9:fa:e6:3f:3e:ef:5e:55:
55:f8:40:ad:0f:2a:a8:c1:6e:3a:d1:68:35:5d:57:6c:43:e1:
b6:52:a1:5c:ef:53:be:a3:cb:93:98:c3:e1:43:2e:90:bd:84:
d6:f7:65:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:30 2025 by rpki-client