Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft
File: hnWNin7SGnQXLM7sM4xk02sDeNQ.mft (raw, json)
Hash identifier: b3CHJy/QzN0aQow8hhhUzL1iLCrwy+gFs+14WSDT/Vc=
Subject key identifier: F4:63:01:4B:3F:2C:4B:60:AB:B9:09:D1:24:F8:DB:04:96:44:D0:13
Authority key identifier: 86:75:8D:8A:7E:D2:1A:74:17:2C:CE:EC:33:8C:64:D3:6B:03:78:D4
Certificate issuer: /CN=86758d8a7ed21a74172cceec338c64d36b0378d4
Certificate serial: 0194BC04B1A806D9038D6701D89F84D609A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hnWNin7SGnQXLM7sM4xk02sDeNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft
Manifest number: 0292
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: Tmqal5XUVoUE8c77AFlzaqU97c0.roa (hash: r3d2ZcS64ApbYh564RwP4TPidKg35TEhpwQ3BNXhcQw=)
2: hnWNin7SGnQXLM7sM4xk02sDeNQ.crl (hash: eidQ8dkX2VqH4ScAm3rMo3tayj5VxPZ/VgRWW8uG8jE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b1:a8:06:d9:03:8d:67:01:d8:9f:84:d6:09:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86758d8a7ed21a74172cceec338c64d36b0378d4
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=f463014b3f2c4b60abb909d124f8db049644d013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:6f:2e:47:58:0e:42:38:87:6f:4c:f5:9f:
4d:4a:90:18:c4:4e:6a:ea:5d:eb:7b:b8:b5:08:cc:
37:05:ac:a1:7f:37:04:54:bf:1b:27:c4:58:39:ad:
0b:37:25:28:db:94:c7:47:e1:19:8a:b2:31:66:94:
72:05:79:2c:b2:c8:c9:9e:59:40:e2:2f:2f:da:36:
62:4c:e5:4e:1b:44:14:d2:37:39:10:ea:6b:16:b8:
ba:0b:ad:f6:98:ce:71:df:f4:79:6e:a5:92:35:dd:
d3:cf:34:e6:07:a8:26:b9:01:ab:16:5f:14:39:fa:
51:5c:65:55:fc:b9:e6:38:fc:fc:7b:97:69:2f:b4:
d5:e6:cc:87:ca:7d:1b:ef:96:68:1e:28:c9:99:6f:
1e:96:f5:5b:11:ea:c7:88:da:ea:2d:d2:74:ce:ed:
08:aa:f9:a6:1c:38:cb:d8:9a:d4:96:55:68:ba:38:
03:bc:2f:b9:aa:9a:21:0f:c2:9d:10:df:64:33:d1:
34:a6:56:73:ff:fd:1e:e2:09:40:d2:67:76:59:61:
77:ab:6c:e6:e2:72:f4:38:d6:19:f6:31:df:b3:90:
c0:34:f4:9c:a1:24:e1:88:cf:12:64:6c:72:5a:3e:
3d:93:2c:ab:3c:de:5f:69:3a:71:75:ce:37:bd:fe:
4b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:63:01:4B:3F:2C:4B:60:AB:B9:09:D1:24:F8:DB:04:96:44:D0:13
X509v3 Authority Key Identifier:
keyid:86:75:8D:8A:7E:D2:1A:74:17:2C:CE:EC:33:8C:64:D3:6B:03:78:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hnWNin7SGnQXLM7sM4xk02sDeNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:44:28:48:90:41:2d:a1:cf:03:30:68:cb:81:0e:06:78:bf:
57:35:a7:bf:9a:3b:c2:5e:5c:0c:8d:f8:79:dd:94:0c:0a:d0:
12:a2:2e:d3:c2:75:8e:3b:69:0e:df:c0:e5:fe:41:91:c1:fa:
6f:e5:62:3b:58:e5:4e:4b:8f:50:9b:a9:8f:2c:d2:a7:3b:2b:
ce:82:3d:4b:7f:93:7b:a7:33:72:59:4b:91:16:cb:6d:58:e4:
75:d4:14:cc:30:5c:4a:9d:c7:f6:45:84:16:e1:42:45:a4:89:
ff:9d:95:ef:3a:48:8a:51:ca:44:73:85:e4:38:5d:e1:5f:3f:
ae:0a:79:a4:d2:ee:54:f4:40:95:fd:26:a0:57:67:98:d7:e3:
81:19:69:59:67:bf:54:67:0e:60:76:3b:b0:99:5d:41:dc:ab:
0a:7a:82:c3:af:81:32:b9:f2:6a:6f:ed:ef:e0:ed:1a:67:42:
69:da:b3:9f:eb:65:02:af:26:34:92:33:a8:85:67:f7:a7:2d:
2e:5c:6f:60:18:53:24:74:6d:50:a9:b4:d7:cf:44:61:dc:22:
91:79:2e:e9:af:03:ea:c5:b0:13:5c:0d:a8:5b:c9:5e:d4:99:
cf:09:38:4a:ce:c8:e2:e1:c7:cf:25:45:73:43:87:c7:7e:07:
b6:27:98:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:55 2025 by rpki-client