Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier: cM4MrIfuxQ+rFU2AhqnKT14X1jo6quIkEIdaNiSHG6k=
Subject key identifier: 8E:40:D0:48:90:03:E9:78:BD:53:82:3A:25:8E:1D:17:73:05:0B:FB
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial: 0194BCA98148C4AA7004C713D5D108B70CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number: 0823
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: Pi13Jn_f8QNwlYweA6cENA4uaSs.roa (hash: UZD7c+7NUs2opXS6uWJEcxhLpAXCSZYdWwe68q1uABI=)
2: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: 1YQHaVSoLwrl89tGc9CSQKgfktEZXBnY3VgSWscYiHE=)
3: kSeV1NXuoW2kMAhRuEJXNL0G3J8.roa (hash: BCpFIjkEeCfOQHY9iAYyAPzCmQqEp82NEt+xGk7yxzQ=)
4: sXoE76O0g9HbvTQdsrTuLQ6BEGY.roa (hash: 2c9XhIaXdBcwGvuorQuJKcEG+b0v5OcuRLvlracJLGY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:81:48:c4:aa:70:04:c7:13:d5:d1:08:b7:0c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=8e40d0489003e978bd53823a258e1d1773050bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cf:34:ad:01:a8:be:9e:10:2b:70:26:f8:7c:
08:e1:02:46:5d:1f:57:62:fe:c1:de:1a:3d:ed:a4:
80:ac:7d:14:0e:1e:75:f5:7d:51:7c:5a:7f:d6:2c:
5b:00:27:14:18:0a:a8:5f:96:94:07:4b:ba:f0:f6:
1a:b7:39:80:a1:8c:84:7d:af:9b:9a:e8:47:b4:bd:
6c:ab:e6:d1:55:66:fb:ef:01:2a:6c:e8:70:b0:d7:
63:f4:b5:65:9b:c3:32:5f:54:fc:24:b6:78:fa:f6:
6f:ea:60:bd:9c:0a:7f:60:1b:41:86:8e:21:6d:f8:
26:da:f1:fe:ec:0f:07:2a:b2:b0:f8:bf:f2:82:4d:
22:f4:75:45:d0:3e:34:f0:d8:7e:a2:c1:dd:af:3a:
c5:aa:cd:fd:78:0f:c1:c9:e7:e4:ff:53:5f:12:8b:
e5:0c:11:e3:d8:90:1a:13:f7:cf:7a:3d:23:de:bc:
1b:4b:e6:27:e1:57:a4:98:88:aa:e0:de:b2:27:17:
3a:7f:5a:c2:f7:81:7f:b2:bd:c5:60:01:74:6d:af:
8f:32:51:bf:61:75:7b:b9:14:a6:e6:57:7e:9c:50:
c6:30:1d:e0:90:e7:1c:4e:38:af:54:f0:81:d7:12:
d3:0c:04:df:e8:a9:66:f9:ba:3c:f0:ce:c5:40:06:
a9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:40:D0:48:90:03:E9:78:BD:53:82:3A:25:8E:1D:17:73:05:0B:FB
X509v3 Authority Key Identifier:
keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:55:9d:a4:de:fe:06:42:53:0c:9a:04:b3:e0:47:6c:ac:5f:
f7:16:0c:04:7e:7f:37:e8:59:76:ad:c8:fe:de:5b:a6:e5:ac:
d3:75:02:a4:e2:63:c0:85:f1:b3:2f:0e:14:b1:9f:44:3f:9d:
bf:2a:c3:ee:80:1e:cd:1c:1e:a3:3d:34:5a:7a:30:45:5f:36:
df:d6:24:c7:96:89:07:43:a6:01:c5:6e:0b:52:7f:00:bc:72:
ab:38:4e:7d:d2:82:7a:ee:68:49:75:f1:11:de:85:a9:f3:f9:
1e:6f:1c:c9:68:e1:10:d7:af:a5:ef:18:1a:0e:35:4c:84:5f:
94:49:b1:d0:95:0d:c8:7e:96:03:bf:15:bf:ea:d6:9e:e3:34:
f1:f4:8e:68:21:a6:91:4e:b3:cd:50:a2:6b:5b:c3:68:a6:42:
cf:61:38:08:51:48:66:b2:4a:91:2a:98:32:55:c8:46:b0:68:
8b:54:1d:bf:eb:ef:f6:94:5e:95:f9:a7:bd:75:b5:21:e2:f8:
01:ab:04:50:b9:6c:60:80:ba:2b:a3:a7:f4:0d:87:78:cd:ca:
eb:08:4f:93:ca:55:42:43:b3:c5:ef:1c:59:c0:c6:3d:9a:fe:
85:7b:62:24:2f:7b:9a:1e:86:4c:5a:55:95:68:62:00:2a:55:
fa:85:b9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:25 2025 by rpki-client