Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
File: hwogf40P0mMwvNWfqEc1SdyS3uk.mft (raw, json)
Hash identifier: i801/LliFIyT68JNQwvU0BMiP8vcXid1VOZQyV9uQLs=
Subject key identifier: 77:7D:BC:62:37:BA:11:21:15:F6:C6:CE:72:FE:D9:34:66:BC:28:D0
Authority key identifier: 87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
Certificate issuer: /CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Certificate serial: 0194BD1776E740DEEC240AB20DEC64A9D2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
Manifest number: 09EE
Signing time: Fri 31 Jan 2025 16:00:19 +0000
Manifest this update: Fri 31 Jan 2025 16:00:19 +0000
Manifest next update: Sat 01 Feb 2025 16:00:19 +0000
Files and hashes: 1: U0r3hhSWvJREMqLZH2Hpa3q15Vc.roa (hash: ddXvERc2U8k9QtkbhiwQPmEstoMSyktp+JN206s3ypM=)
2: hwogf40P0mMwvNWfqEc1SdyS3uk.crl (hash: 7o63dOiwfPuYX99pp5sYnIFL3r1Lhke0uuRwe7VRctM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:76:e7:40:de:ec:24:0a:b2:0d:ec:64:a9:d2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Validity
Not Before: Jan 31 16:00:19 2025 GMT
Not After : Feb 1 16:00:19 2025 GMT
Subject: CN=777dbc6237ba112115f6c6ce72fed93466bc28d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fd:1b:41:88:d7:35:1a:0d:79:29:b9:ea:5b:
2c:bb:99:4b:c4:1b:52:0f:fa:55:83:e1:e3:df:fc:
ae:61:25:53:3a:a8:e9:fc:e5:48:70:b7:22:77:be:
54:7c:a3:b9:70:2d:50:82:97:b1:1b:9b:aa:58:88:
3f:e4:f0:95:fc:8c:83:9a:1d:ae:96:e5:ad:65:eb:
83:13:e6:0b:86:c5:18:0a:d5:a6:fb:90:b9:d7:08:
6a:e2:56:ce:e5:a1:f3:b6:7d:a4:76:b9:85:87:5f:
fb:57:7c:93:d5:d8:06:c2:c0:8a:42:48:c2:0e:e9:
e9:7c:a5:17:eb:11:f7:35:f2:1d:ab:1c:55:2c:7a:
0f:51:e5:88:c7:58:c6:06:0e:b1:ce:13:9e:7b:ae:
78:c3:fc:ad:ad:ff:fa:6d:ec:13:58:fa:41:eb:15:
1a:02:be:ef:2a:a1:9a:58:a1:48:ab:6e:b6:87:a6:
e5:eb:e9:c3:ee:f9:3e:0a:9e:f2:a0:c4:71:c7:ed:
c8:dd:7b:f8:89:f4:52:7d:6a:6c:95:d2:13:f5:27:
b4:c7:29:ee:b3:14:44:a8:9a:85:2d:86:ef:33:9b:
e8:c6:bf:61:8e:30:3b:18:67:62:f8:e8:57:b8:1c:
05:e9:f1:5c:d9:2e:fb:ec:77:d8:4f:36:da:26:17:
8c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7D:BC:62:37:BA:11:21:15:F6:C6:CE:72:FE:D9:34:66:BC:28:D0
X509v3 Authority Key Identifier:
keyid:87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:fc:f4:c3:c6:4a:71:03:bf:28:16:b5:f0:c8:d9:9e:dc:57:
3e:42:07:c2:bb:39:ff:e0:ee:0f:3a:ba:30:ef:c0:44:ad:bb:
16:07:6f:95:68:1c:37:4a:22:3a:7d:d3:05:d9:55:b9:54:07:
40:93:8b:e0:0a:51:f7:30:ae:29:b2:ca:20:87:8e:9e:61:51:
89:77:a7:a9:66:03:f5:de:cf:dc:de:c0:c8:6d:3b:39:c9:8c:
fe:51:10:57:23:ba:78:78:53:cf:76:c5:34:f1:c2:9b:9b:e8:
ee:b5:40:8b:18:c0:2c:af:d5:29:57:02:1f:fe:ce:0a:04:26:
22:47:af:90:0b:8f:9f:7c:f6:19:9d:4f:d0:fd:73:cf:48:c0:
60:ad:3b:a3:3c:61:87:b2:00:71:bc:9a:93:d5:cd:03:eb:29:
77:69:49:d6:e5:f3:71:dd:90:72:68:e8:7f:0e:b4:1a:a1:41:
88:a1:5f:45:2e:ca:7b:84:54:68:5c:f7:95:40:99:1c:51:24:
0f:d9:b2:b8:cd:c3:60:0b:4f:49:07:16:f5:41:24:7c:48:16:
6b:30:a0:10:cf:84:2d:6e:d1:ef:81:56:2c:62:a1:9e:fe:c1:
71:a5:cf:b4:46:ec:7d:37:7d:da:a6:13:f4:ad:9e:c6:db:7f:
32:42:8e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:28:20 2025 by rpki-client