Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft (raw, json)
Hash identifier: R3uCAeThKgLd3DrodbqLXZCohE9Cw6lMJ0dgeSJxkHg=
Subject key identifier: 90:54:3F:DC:AE:FF:2B:31:FF:C7:08:D3:28:C2:F5:93:1D:9E:80:C1
Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
Certificate issuer: /CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Certificate serial: 0194BCAA3C37CBA4E9944FF295DB20E4FAA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
Manifest number: 0106
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl (hash: R6srx2QzYLJA/mfsYpCZ4ym5OL70gknN67BqnaivbbU=)
2: vlEdWKuRTS0cD9RNJ4tmPb-bgsQ.roa (hash: Y+o+UFhPbkj+17eC+0DjnhM2iiXi4bO98feJGgrh1ss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3c:37:cb:a4:e9:94:4f:f2:95:db:20:e4:fa:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=90543fdcaeff2b31ffc708d328c2f5931d9e80c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:ce:5f:53:ed:eb:72:39:b8:8c:90:01:00:
14:7d:5f:29:48:a9:21:cd:88:e4:4d:2d:4a:d3:ec:
2a:a6:b7:aa:b9:e6:ab:f3:34:5d:c2:5d:fd:51:ee:
46:16:5a:6d:d1:c6:c2:27:3f:4d:0b:3b:af:d0:b6:
14:0c:42:03:5a:4a:cc:ae:b5:88:f3:5c:f8:f8:99:
98:a9:f5:6a:4a:be:1b:c1:4b:d3:02:42:97:5f:89:
94:4d:78:a9:03:dc:1b:3e:d5:08:12:4a:83:fd:6b:
d4:e3:4c:cb:51:5b:70:8e:72:9f:ed:24:94:c2:d1:
1a:1e:eb:7c:2c:a1:83:33:ad:8a:21:de:2c:0a:03:
cf:5d:46:06:fd:2b:de:e9:f9:40:8e:d9:b0:76:b7:
8a:dd:a4:74:f0:00:9d:03:3b:53:c5:f6:55:83:02:
7c:0a:c4:28:af:b8:e8:a6:fd:4d:a3:a6:44:af:30:
0a:00:16:d5:8d:9d:09:8d:45:88:12:c3:a2:d6:c7:
2e:59:39:5d:d3:f3:24:0c:0d:3d:e7:8d:95:22:ff:
fb:c2:21:c3:60:1a:5a:09:54:26:b0:57:df:44:da:
78:9b:8e:8e:fb:13:90:f3:2f:8a:df:1e:07:f5:6a:
01:8a:f8:ff:ff:08:a2:13:4e:92:0c:d0:b7:d9:84:
3a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:54:3F:DC:AE:FF:2B:31:FF:C7:08:D3:28:C2:F5:93:1D:9E:80:C1
X509v3 Authority Key Identifier:
keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d8:5e:b4:07:c2:4c:30:74:f6:32:04:e5:53:fd:4c:95:4c:
cf:d6:d4:be:90:51:9b:68:50:2c:d9:37:a6:e5:a1:4f:73:70:
fe:f7:bc:c6:be:44:50:74:ea:91:13:ce:dc:af:4d:02:e8:1c:
94:a4:84:1b:e1:d2:60:27:92:3e:39:ec:75:b8:f1:17:f2:e9:
11:cf:2b:f6:56:b2:d8:9b:22:85:97:3b:80:17:7e:17:72:2b:
9d:a1:c5:65:60:46:6c:a4:40:3e:a5:3d:b1:a9:b8:ba:91:13:
65:e7:7d:45:ab:b9:ad:48:c8:53:8b:9d:8b:6e:96:ca:b2:05:
74:ab:10:9c:18:99:77:ad:d3:2e:b4:5d:76:b9:d2:36:53:5f:
c0:2f:32:87:d5:5c:41:41:84:53:fc:c7:60:bb:7c:ae:e6:ea:
c8:33:42:fd:a2:f8:0b:91:51:53:a8:18:55:9a:46:62:8a:08:
c6:7f:05:d5:74:8d:d8:de:48:d8:eb:f0:37:3f:6f:da:64:4c:
ce:48:5b:69:bf:6d:b7:97:1c:36:a9:1c:de:97:9e:84:4d:bd:
56:fa:bb:78:ac:e8:1f:58:3d:2e:4b:d3:8e:8f:04:52:73:26:
da:23:61:12:7a:cb:3c:23:25:2b:f3:15:dd:f4:71:f0:32:99:
69:a4:ad:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:54:52 2025 by rpki-client