Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
File: hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json)
Hash identifier: Jq+NMjVy2rKxUw3xoz4B6CL0kFOW6hQJOiJNZtPiSgI=
Subject key identifier: 40:9D:8D:8A:C4:F3:61:53:77:7F:32:B3:7F:26:07:8C:BC:5F:1A:EC
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Certificate issuer: /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial: 0194BBCE4EED55863981A8FE3E69CF1B92E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: KUCsTzvnwNnMm7Jeca6aVL9k1f0.roa (hash: 08CBdTpQIdxpgYISvMqyNDiM+ICQK0H520OtR31swUg=)
2: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: vjTa1JiBQkwnGHbrR3m05oEjD3zYH7zG08G2czUVlFE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4e:ed:55:86:39:81:a8:fe:3e:69:cf:1b:92:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=409d8d8ac4f36153777f32b37f26078cbc5f1aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:11:7b:fb:d6:16:b1:8a:fe:4f:9b:c1:4c:74:
82:be:28:0e:b0:e7:7f:25:c4:7d:4c:0b:51:f8:3a:
15:e3:11:c9:0d:5f:3e:34:94:40:00:14:be:3e:ef:
23:5d:9a:af:5f:f5:3b:f8:c9:52:10:14:07:b1:4e:
13:f5:b7:eb:62:9c:49:16:4e:28:3b:6c:8a:4b:0b:
f2:5d:93:50:25:47:36:7c:94:7a:e0:ce:39:ef:86:
66:7c:79:03:26:74:ce:b6:05:6d:1e:05:60:95:59:
69:06:44:85:16:09:da:0c:75:c9:c7:09:f2:9f:dd:
f9:29:62:db:d4:c4:43:87:10:7c:4f:ab:1a:c1:03:
35:cd:25:e8:0a:79:b2:ba:07:0f:53:f3:08:a0:b1:
d1:6f:ce:4d:5d:09:ed:36:79:63:98:31:95:b2:fb:
81:02:08:84:74:92:db:16:4e:49:37:72:70:74:60:
1d:31:aa:28:26:b0:cf:10:d8:d1:2f:e3:4a:7f:c5:
60:f5:66:07:d8:17:da:2c:5c:a1:94:00:6c:c5:e9:
fb:9f:01:b0:ac:ed:72:fb:c9:6d:39:f5:86:df:a7:
17:b0:ac:3c:c2:15:c4:4e:45:87:1e:36:bb:82:7b:
50:f5:91:bc:69:13:2c:6f:01:2d:b2:2d:08:26:a4:
82:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9D:8D:8A:C4:F3:61:53:77:7F:32:B3:7F:26:07:8C:BC:5F:1A:EC
X509v3 Authority Key Identifier:
keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:32:b9:6c:1a:fd:ca:7e:4b:41:b9:35:e6:47:af:87:55:85:
eb:1b:a7:e3:c2:6d:46:a8:e6:df:02:da:11:69:91:68:80:f0:
1b:c1:4e:79:25:77:94:87:6d:39:f2:60:0d:95:ec:2b:e8:b5:
32:30:38:13:f7:44:c5:16:45:f3:6c:cb:db:86:77:85:f8:85:
5c:2e:37:62:43:b6:62:6c:4f:80:e0:c4:7f:85:36:dd:88:06:
80:6d:c8:ef:7f:fb:16:3a:d7:f8:47:bc:8e:8a:6b:f6:b4:23:
d0:45:82:b8:6e:f2:5f:11:38:dc:82:3f:49:b5:bc:8c:dd:4e:
87:c1:e7:9e:46:34:d6:e7:8e:6e:6b:7d:12:a3:4c:a3:c8:e9:
cc:d5:02:c2:39:bb:0a:c0:58:20:c7:65:1d:2a:d1:17:c4:c4:
55:58:5a:65:3d:6f:a2:eb:4e:e7:4b:ff:56:00:26:d6:fd:fa:
1c:f0:98:26:6b:34:10:9f:ae:50:bc:b4:f4:29:93:94:ef:b5:
76:91:d0:8a:74:34:c4:f6:15:a5:3b:50:80:2e:19:fe:b1:82:
fe:1d:5a:6b:8a:6c:19:ab:ed:ca:b5:84:66:b9:f4:eb:dd:28:
d0:05:14:ea:fe:47:49:89:54:3c:38:c4:57:a7:01:71:78:50:
f8:24:98:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:06 2025 by rpki-client