Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
File: hHi3bGnJkVKU_cORNeINrHN2IiU.mft (raw, json)
Hash identifier: E6U1eRyfkVuP5SSjoipL33Jaj92as14PHgzM3viASAs=
Subject key identifier: A7:9F:00:1F:C6:0B:6E:1B:8F:CB:1E:D2:FA:B2:20:85:92:E1:13:DE
Authority key identifier: 84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
Certificate issuer: /CN=8478b76c69c9915294fdc39135e20dac73762225
Certificate serial: 0194BD17A28F82E66F16A564F3FEF5967024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
Manifest number: 13C3
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: hHi3bGnJkVKU_cORNeINrHN2IiU.crl (hash: lseJ+jkCZEWh8EiZ3/84byjrZLWD60iNiz7vDeVeSyU=)
2: kclE4AGa3IQ3ANoqx8hNmFyyOPc.roa (hash: era/rLdikRzOubIlTwlZQUllh2OgF4bxbh9GfJNQo5I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a2:8f:82:e6:6f:16:a5:64:f3:fe:f5:96:70:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8478b76c69c9915294fdc39135e20dac73762225
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=a79f001fc60b6e1b8fcb1ed2fab2208592e113de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:24:b9:36:7c:44:5e:87:5b:e9:f4:9b:f7:2c:
eb:07:7f:27:97:17:f7:29:b6:70:03:2f:b5:b6:ac:
46:ea:0e:49:9d:b6:b2:ef:26:b1:42:f3:9c:1b:75:
08:a0:93:3c:64:c4:b3:83:62:d0:ea:6e:f0:ed:a5:
8e:f3:0e:24:f4:be:a7:8f:83:b6:ae:41:e3:1e:c3:
59:ab:79:95:62:42:6a:58:6f:7f:bf:12:da:02:99:
fd:df:8a:07:26:4f:33:4d:58:a6:90:d2:8a:f1:3a:
ca:b7:be:f0:9c:30:2c:c4:a0:c8:ed:74:b4:22:44:
5b:4a:4d:88:2a:a3:8f:6f:84:f6:bf:01:e1:1b:17:
6a:bf:af:ba:47:9e:4e:5a:53:7a:6a:c1:5f:8b:80:
e1:18:14:f4:d3:73:be:e6:47:44:fd:69:1c:6a:29:
4b:3e:b3:85:aa:dd:6d:77:38:4c:53:f1:46:93:5a:
40:cd:e2:f6:9f:f2:42:43:38:52:28:01:6d:90:80:
5c:ad:ff:52:c2:99:6a:2f:f4:0d:99:2a:de:51:d8:
64:85:6d:a0:d7:80:85:fe:4f:d4:f9:0c:96:8f:42:
78:e0:6f:b6:ac:1f:48:30:26:bc:3c:da:4f:a5:6c:
34:bc:66:5f:65:5b:da:d1:3d:6b:21:76:a3:e3:a8:
76:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9F:00:1F:C6:0B:6E:1B:8F:CB:1E:D2:FA:B2:20:85:92:E1:13:DE
X509v3 Authority Key Identifier:
keyid:84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:19:81:06:21:b1:f7:b7:f1:e4:c6:33:a0:61:aa:d8:e8:1a:
b5:9d:9f:85:e8:03:51:d1:c3:1c:78:55:07:fa:bc:d9:c6:9e:
d7:0a:84:e8:86:ec:7f:1b:b3:6c:28:63:f3:73:33:90:1d:33:
e8:1a:69:21:35:13:2c:16:a9:4c:9a:4c:27:71:4e:e6:76:5b:
ed:d6:f7:1c:6b:51:ff:07:1d:bc:39:e9:d4:a1:a6:e6:c3:c9:
a3:cc:33:d5:a6:84:3d:48:30:ee:e2:d3:bb:01:4d:ae:65:5d:
db:3a:6f:5e:a9:5c:b3:19:19:5e:4a:2b:29:de:89:ff:57:29:
24:96:85:eb:5e:47:54:1a:ec:30:8e:9e:18:74:6c:24:15:b1:
20:10:51:d3:f2:c5:95:31:60:93:e2:6b:98:8a:e6:7f:02:ef:
8d:87:fb:8c:81:e6:96:ee:ae:6b:e5:90:66:25:17:a9:a6:bd:
c7:4b:3d:b2:e2:1f:e5:91:38:5d:cd:03:c9:64:da:72:29:c0:
ee:78:dd:50:16:9a:fc:53:03:76:5e:0f:14:33:b5:2b:7c:91:
3b:88:27:d6:c4:37:26:de:8e:03:66:7e:1c:23:22:ff:d4:82:
5e:69:ea:35:8c:09:f9:2e:90:01:30:ae:b8:03:f5:27:07:43:
db:a7:ac:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:25 2025 by rpki-client