Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
File: hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft (raw, json)
Hash identifier: IH532a9ZAbXO3N/6sF5roh1MGR5RF8xdRvP2mGRTgtg=
Subject key identifier: C6:8C:A2:E3:51:DA:4C:08:A2:A2:3F:F0:78:A8:BF:7D:D3:6F:96:0F
Authority key identifier: 86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E
Certificate issuer: /CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
Certificate serial: 0194BC04B4F7D2373AD7E6DEAF5814D00F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
Manifest number: 0A6B
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: DrEVnl_Ykn70BF2dDk8nNsnafnk.roa (hash: DyicDcDpSxUVN86uLjb/ckkTBO6IskAUo4EXniFnwpA=)
2: hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl (hash: 6ShItDJShm+T1XvW8niaDL4PL3rZLP9cSd/b8jdJRvs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b4:f7:d2:37:3a:d7:e6:de:af:58:14:d0:0f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=c68ca2e351da4c08a2a23ff078a8bf7dd36f960f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:08:5c:f6:23:1c:ec:0e:82:d3:81:8d:bd:
5b:2d:af:a8:9c:c2:a3:84:6b:d6:92:52:da:cc:df:
2b:76:38:53:6d:9f:7c:01:27:b6:c9:63:ea:e4:3f:
b5:b5:43:4b:df:bc:a0:87:62:34:3b:1c:ef:57:d9:
2e:39:68:40:18:74:13:b7:4a:3d:79:1a:fe:a0:37:
ac:eb:6d:65:69:38:51:b4:b5:f4:e7:36:d3:ea:2c:
8e:91:3d:71:57:6b:16:a3:44:e5:35:2c:c7:61:6f:
2f:84:01:b8:9b:a0:a6:f5:b3:fd:91:c8:1c:aa:00:
30:37:dd:3d:a2:61:1f:7b:27:f2:4a:80:d3:74:f2:
3d:dc:5e:ba:4a:03:8f:2b:4e:87:07:44:c1:4a:be:
57:30:b4:ef:73:3d:cd:9e:7c:76:6f:d8:e4:f2:ff:
16:ea:70:3e:94:78:ee:6e:97:7d:bf:9e:71:11:3d:
6b:67:2a:49:32:3f:3c:60:7b:87:33:5c:70:a6:d7:
e2:a4:00:3b:01:11:80:57:8f:c7:1c:87:5d:b0:32:
f7:11:8b:2f:8e:ef:6e:92:a5:2b:3f:5b:2a:b8:03:
08:72:5a:48:ae:53:67:71:7b:b9:97:51:a8:9e:3b:
8f:57:4e:d5:fe:5e:c6:0a:87:b1:56:04:7e:eb:26:
34:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8C:A2:E3:51:DA:4C:08:A2:A2:3F:F0:78:A8:BF:7D:D3:6F:96:0F
X509v3 Authority Key Identifier:
keyid:86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a7:49:20:75:67:c0:ef:c1:7e:58:8d:20:b6:e3:ab:f0:5d:
a2:ac:6b:2c:8e:45:26:67:b5:fb:92:3b:4a:9e:8e:b8:a1:fc:
7e:7b:c1:61:c9:15:b9:11:61:a3:08:2a:60:fd:4d:d4:01:34:
cc:a1:bb:0a:39:37:44:41:91:5a:0e:8e:21:a7:2c:3f:86:2f:
f0:45:5a:a1:dd:23:9b:18:fb:07:69:87:dd:50:61:67:1e:9f:
da:cb:26:7f:17:72:25:2a:16:d3:d3:a4:41:20:e6:be:5b:7e:
3c:fe:9e:26:26:6b:e6:23:e7:db:bf:7f:46:cf:d8:fb:9f:fd:
18:f8:81:ed:42:3a:f2:21:4e:25:78:49:fc:ad:4e:ce:93:58:
23:22:b4:a2:fe:ad:22:ab:c1:c7:e8:e7:8a:03:aa:29:e9:cd:
f8:17:f3:a7:bb:97:f5:7f:96:40:46:45:67:d8:ba:6a:2b:8d:
d5:07:f5:20:96:e4:09:1f:78:40:81:82:3b:98:4d:13:ed:37:
66:5e:80:60:95:23:94:ae:d2:64:88:47:26:e0:12:6a:f0:2f:
69:2c:d6:14:7c:9f:b3:88:85:5c:d3:68:5e:1f:6e:ff:11:e4:
a8:2e:16:5e:a5:63:09:d1:1a:c8:e8:d0:fd:23:c3:87:00:0f:
8f:79:41:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:56 2025 by rpki-client