Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
File: h0HsF9wDCbE9iKZ-oi3Luyak46E.mft (raw, json)
Hash identifier: JnAP8syHGM58c1uujP6eY1ye6/Z1vCzi+9gwwJjOKa0=
Subject key identifier: 84:84:B2:24:47:E1:78:80:F0:3D:30:D4:49:9B:82:98:1B:31:A0:E0
Authority key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
Certificate issuer: /CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Certificate serial: 0194BD8581E11E9A9EF3A67AF52EDCEE6DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
Manifest number: 0757
Signing time: Fri 31 Jan 2025 18:00:30 +0000
Manifest this update: Fri 31 Jan 2025 18:00:30 +0000
Manifest next update: Sat 01 Feb 2025 18:00:30 +0000
Files and hashes: 1: cASyfuH0abUwpn-V7hmuZSIQ09c.roa (hash: U2HpSDc4zJjb5yR4FxelHkJvS6rW6HvOOx+N/+WSuMk=)
2: h0HsF9wDCbE9iKZ-oi3Luyak46E.crl (hash: GBJeRR6UzPVSUH7uTO0VPtsxuc9PVzgh7wVzFo0DeN4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:81:e1:1e:9a:9e:f3:a6:7a:f5:2e:dc:ee:6d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Validity
Not Before: Jan 31 18:00:30 2025 GMT
Not After : Feb 1 18:00:30 2025 GMT
Subject: CN=8484b22447e17880f03d30d4499b82981b31a0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4c:81:b4:82:22:1b:b9:5b:b6:52:c2:dd:e6:
b0:71:bc:4d:4f:9b:6c:a9:4f:d9:15:7e:48:8c:0f:
db:2d:b9:0b:7d:82:8d:08:d1:eb:88:8b:ca:f0:df:
4e:49:db:09:b6:ee:4b:47:04:48:34:83:67:0d:a1:
50:27:f5:e0:33:70:18:23:f7:a1:81:af:ca:4a:57:
68:39:4b:b3:1e:58:a1:c1:9f:f4:53:af:9f:ba:74:
32:20:e9:dc:3b:54:20:0d:5e:03:98:cc:f6:20:27:
28:89:8f:1d:8e:51:99:31:92:e6:53:11:68:b9:5f:
74:8c:0e:0d:b0:a5:a7:03:12:68:8e:05:53:06:d8:
03:f0:36:c9:74:bc:14:f2:9c:3c:5b:a6:b9:1a:8a:
c8:e7:bb:de:db:40:a2:b5:09:7f:13:a4:57:ee:31:
f7:fc:08:75:05:74:70:76:31:01:21:37:4e:2a:08:
6d:42:31:b5:af:32:cf:a8:17:b2:42:4a:8b:b5:21:
2d:c0:b9:42:70:dc:9c:6f:6d:0a:f6:80:4f:4e:06:
2f:61:58:a7:af:3a:4a:16:98:00:11:f1:07:8c:a4:
f6:32:82:a4:29:9d:fa:9d:59:1f:00:22:88:02:12:
07:5e:1a:f2:9f:bc:ca:5e:8f:0e:8f:d4:ba:67:cb:
a4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:84:B2:24:47:E1:78:80:F0:3D:30:D4:49:9B:82:98:1B:31:A0:E0
X509v3 Authority Key Identifier:
keyid:87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:46:9c:ea:69:2b:27:1c:b4:f9:38:b0:87:31:c0:2e:76:72:
81:f4:84:79:85:52:2d:58:17:c9:a0:b5:c1:44:9d:18:62:54:
3a:90:27:ee:bc:fa:13:af:bf:53:7d:60:22:4a:da:07:ee:31:
cd:ef:1a:a1:f8:ef:a3:a8:2b:50:90:0c:36:d7:6a:91:ce:35:
73:6b:c3:03:6b:24:4e:53:05:7d:ca:1b:bf:89:08:5c:68:fc:
cc:d5:a0:f3:08:66:4c:da:86:e4:42:ea:6c:ba:c1:47:24:a0:
54:91:eb:e9:5d:f4:0c:cf:39:d4:20:c5:59:db:37:30:e4:a8:
5c:e3:7b:91:72:02:c7:28:0c:ec:47:a8:a1:61:65:aa:4f:1f:
d5:d8:41:5f:d3:48:31:57:f6:f9:ce:c1:4c:fe:5d:9c:a3:b7:
7c:79:70:b0:3f:c5:7a:31:da:62:2e:34:dd:c6:de:60:8e:c4:
cc:d7:3b:43:2c:b6:d4:1f:d0:3b:33:df:c3:1f:13:2a:c9:0c:
47:87:ff:ca:65:ab:13:be:11:f4:e5:f4:83:e6:50:14:ad:1b:
84:0d:7e:47:00:21:39:ee:91:1c:4d:da:11:82:6f:06:15:9d:
4d:a5:71:08:ed:44:6a:e5:fd:1b:84:d2:c4:35:a1:64:fd:bd:
5f:7a:9f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:13 2025 by rpki-client