Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
File: htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json)
Hash identifier: f+nSKkiMMIDx0B90snLvnJECtm2kQNSe/pWyxuH8DDo=
Subject key identifier: 19:B2:1F:40:08:1D:48:D3:78:FD:03:0C:F1:03:53:53:54:3D:14:50
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial: 0194BBCDC124DE37ECA45356D05656BCCDAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: 8RAc371ukABbTWcTiK04QzcyelY.roa (hash: I+sCdVGv/TleBprM3JJBzhdIfzsQV+d2G7DqXk+y4rc=)
2: bbCSbkJ69E4ZyMcMf3FWG13o9vw.roa (hash: QLK4XGB/GAetu80z0dQMeItgOqPLMqF/gY1QoYjWP2U=)
3: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: EhNGfBrYtRxS9YVLmWJx8/JDWLkBjDyrTMr/6j1Twsw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c1:24:de:37:ec:a4:53:56:d0:56:56:bc:cd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=19b21f40081d48d378fd030cf1035353543d1450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3b:10:ae:02:b9:e2:ce:94:f6:6c:7d:e1:dc:
91:72:19:c4:d7:ca:5b:f9:e3:9b:1a:bb:ac:11:90:
6d:1a:d6:40:9a:eb:64:45:9e:74:2a:6c:5a:75:08:
36:b6:e5:ae:19:f4:9e:43:c9:03:93:a1:5d:49:9e:
eb:b8:4e:30:03:e6:a9:cd:9b:5f:ef:b1:f2:ad:ec:
ca:9f:e9:e1:63:b3:1b:84:07:73:74:3a:94:85:82:
77:1a:5c:40:9e:71:74:9f:20:de:e4:88:22:0d:8a:
2b:53:34:7e:1a:39:f9:34:56:f8:fd:f6:bd:84:35:
e8:59:3d:11:e9:4b:ce:39:b7:ce:eb:2b:b1:da:a5:
c9:5d:4d:02:70:86:df:85:d7:3d:d4:03:7b:ec:11:
93:da:ac:b5:81:b7:75:17:63:90:48:5f:04:3e:57:
3f:18:7b:02:7d:58:54:65:d8:95:8c:92:47:40:69:
ab:11:cc:58:b4:9a:f8:98:0d:e5:3f:88:b3:f1:be:
dd:bd:2d:ba:55:f8:f0:b1:52:8b:33:c9:f9:e4:19:
9f:d5:02:2e:db:a1:77:84:fb:6c:c6:e0:9e:59:3c:
ff:2f:82:96:d1:eb:58:23:6b:57:c3:29:95:54:17:
8f:eb:e0:aa:9f:f4:63:cc:38:a0:88:ed:93:a5:8a:
0a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B2:1F:40:08:1D:48:D3:78:FD:03:0C:F1:03:53:53:54:3D:14:50
X509v3 Authority Key Identifier:
keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cb:a7:0f:d6:cc:00:72:15:a3:93:d9:32:eb:3f:74:23:ad:
86:48:44:6e:a1:e7:97:96:b6:b7:21:22:80:75:a4:62:6b:6b:
11:9a:84:c6:22:d0:4d:01:3f:8f:ff:21:84:e5:77:4e:f8:fa:
0e:68:7d:33:99:91:e8:1a:5d:63:ce:61:70:1f:62:ed:17:6b:
31:f4:58:6a:6e:93:87:43:55:78:08:b1:69:34:c9:7e:85:72:
b7:5c:1c:e5:92:28:e8:ea:55:39:15:02:5a:91:af:d4:d7:be:
7c:c2:ed:72:4c:eb:70:10:1b:d4:0f:45:1a:bc:4f:a8:5c:d2:
da:a6:71:56:a9:34:e9:29:b1:23:a8:e4:9d:df:a1:09:97:63:
3b:f9:e1:dc:6d:05:14:7f:0f:de:82:eb:78:6c:c6:f5:75:64:
53:90:c3:33:a4:47:44:8c:a5:1c:b2:11:8c:f4:f9:b0:e0:65:
3e:44:4c:25:3a:8b:9c:33:23:ae:28:b5:ba:61:39:98:8e:f8:
ee:76:1c:14:2c:bf:d4:8e:3f:99:fa:2c:f5:f5:91:14:11:8b:
02:6c:91:90:43:bc:ad:66:c3:4b:08:8a:6a:66:fb:be:59:8c:
70:4d:ef:52:89:b1:0d:2b:95:dd:c9:56:cf:f4:59:96:54:ba:
0a:1c:75:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:41 2025 by rpki-client