Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft
File: rhexu-eM5Aqh7G0neLweTqKVFn4.mft (raw, json)
Hash identifier: KqiMXvtDnMS/tUPwdENWcJleZk5vIDVUH8pOu61ZBWc=
Subject key identifier: 98:9B:48:ED:A0:02:39:0D:75:3E:28:1E:61:6E:E7:53:4F:E7:68:FF
Authority key identifier: AE:17:B1:BB:E7:8C:E4:0A:A1:EC:6D:27:78:BC:1E:4E:A2:95:16:7E
Certificate issuer: /CN=ae17b1bbe78ce40aa1ec6d2778bc1e4ea295167e
Certificate serial: 0194BD17BC79CC259A7933E29C8309AC047D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rhexu-eM5Aqh7G0neLweTqKVFn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 16:00:36 +0000
Manifest this update: Fri 31 Jan 2025 16:00:36 +0000
Manifest next update: Sat 01 Feb 2025 16:00:36 +0000
Files and hashes: 1: QVia0R-C1R2OtBKefX55cNuuXdw.roa (hash: 5hYta4LOp/wluPpRpLQ0dqF8+c0Z+WJxjmlf/9qWqq0=)
2: rhexu-eM5Aqh7G0neLweTqKVFn4.crl (hash: NbsnyKbZMlhXEpOKQdNpAsoPMsu20zEmEdYZ60REivw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bc:79:cc:25:9a:79:33:e2:9c:83:09:ac:04:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae17b1bbe78ce40aa1ec6d2778bc1e4ea295167e
Validity
Not Before: Jan 31 16:00:36 2025 GMT
Not After : Feb 1 16:00:36 2025 GMT
Subject: CN=989b48eda002390d753e281e616ee7534fe768ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:3e:79:00:9e:6e:a8:80:a3:ce:68:79:6b:
4d:7a:4e:5a:34:ec:39:0a:1c:c4:fc:76:63:84:4a:
8d:c8:52:75:39:49:75:fa:c7:5b:8a:2c:ad:b3:08:
c2:ea:c1:26:14:39:af:15:36:6c:ab:fc:0c:ea:43:
10:a4:7c:5f:56:d7:8c:cb:13:df:89:bf:be:ad:7b:
c3:cd:93:69:27:13:09:cf:26:e1:a2:b4:03:4a:4c:
10:a0:25:c6:4f:0e:83:9b:b3:82:25:b0:75:87:76:
61:d1:fa:da:b0:a8:97:e8:bd:ad:49:99:30:d2:cc:
72:5e:a5:fb:f9:df:29:9f:a5:9c:8b:3a:47:56:30:
91:b0:c3:d1:86:08:98:3a:c4:e8:57:b8:a3:2c:a3:
25:52:f0:a0:46:8c:bd:4f:fb:33:66:21:9a:24:2d:
35:ae:0c:2d:4d:01:b7:f2:dc:2f:40:df:68:c1:10:
36:6a:b5:89:df:e7:d3:b6:e8:ee:56:81:05:86:49:
37:dd:69:3f:ad:25:d7:aa:5c:d9:94:e9:14:09:61:
cd:35:56:0b:84:a5:44:a6:85:ec:16:8d:48:08:5e:
95:a9:b8:d6:90:65:ea:a4:c0:a5:2a:94:8e:7b:d2:
00:e8:14:0d:14:59:32:02:8a:22:14:80:ca:32:ce:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9B:48:ED:A0:02:39:0D:75:3E:28:1E:61:6E:E7:53:4F:E7:68:FF
X509v3 Authority Key Identifier:
keyid:AE:17:B1:BB:E7:8C:E4:0A:A1:EC:6D:27:78:BC:1E:4E:A2:95:16:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rhexu-eM5Aqh7G0neLweTqKVFn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:40:a2:6a:25:5d:9d:fa:c5:2d:c5:d0:e6:57:07:2d:5a:fe:
fc:dd:26:ee:a4:1a:9f:79:bf:3d:52:12:17:34:09:ac:29:87:
f0:54:bb:40:23:da:bb:93:21:56:b5:df:f5:14:0b:09:7c:cf:
b2:2a:77:75:08:0d:79:a0:71:19:ba:e1:e2:4f:d3:61:f6:2c:
de:4f:b0:29:4a:c5:e9:3a:e5:da:d1:d2:05:e0:29:62:f9:9a:
68:50:0e:f8:93:b5:80:8c:2f:9b:4c:51:d7:89:2c:ec:55:ea:
7b:60:dc:d7:17:5a:a9:3d:d6:42:ee:b1:df:21:ec:07:dc:5a:
d2:3d:91:5b:4b:be:22:38:f4:c8:e9:83:fb:aa:90:ce:65:62:
71:db:87:51:89:d5:e4:70:e1:4f:23:23:27:25:06:e8:51:0c:
c7:e3:a2:eb:12:53:f2:0b:62:dd:c0:07:23:4b:34:89:3c:75:
49:50:22:ec:ab:77:88:62:5f:65:05:de:49:cd:bc:4e:56:a9:
76:46:4f:d8:75:f5:79:e1:38:f9:47:0a:d0:12:b7:20:1c:65:
ec:ba:5f:d7:34:b8:57:f9:f1:d4:66:54:12:f1:30:41:01:25:
be:f9:76:59:6d:79:62:7e:d7:ce:f1:71:01:34:d3:c6:f8:b1:
8f:4d:a9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:07 2025 by rpki-client