Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
File: h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft (raw, json)
Hash identifier: BQRRVLS5E8NG81pO7EuMLKHwkdnS7b3gRL8BsxQOTdw=
Subject key identifier: 85:A3:3C:2C:23:3E:5B:BD:DD:AD:77:46:8D:E4:E6:03:9A:62:54:9D
Authority key identifier: 87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
Certificate issuer: /CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Certificate serial: 0194BD4E9BEF11AA5CF39F363E2BEFD5B9AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
Manifest number: 0523
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl (hash: 04FTbZsMpaPLbwfqdxA2y0FtrcczVcMMLA8gCEgU1YM=)
2: hlby1xXJUtbaqPmELmi7xbziBY8.roa (hash: QsHPEqttrfF2zMx3M7sZxcReCt1hljy1sF+KTN49S3E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9b:ef:11:aa:5c:f3:9f:36:3e:2b:ef:d5:b9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=85a33c2c233e5bbdddad77468de4e6039a62549d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:30:ac:d7:ff:e5:3b:4a:49:eb:d8:7c:b4:
5e:7e:d4:db:64:33:cf:64:df:29:9b:68:50:9b:10:
07:5e:3a:bd:96:61:24:f8:79:7b:88:c8:c8:20:e5:
31:23:33:d1:21:df:c4:c9:33:15:ad:e8:ac:35:1d:
11:9d:53:26:72:b4:d6:13:f6:4d:1e:6a:5f:61:f5:
2e:2e:20:dd:66:69:76:0e:b2:52:a8:25:c0:eb:f2:
f1:2d:f6:0f:11:77:6e:a5:98:43:30:ab:7f:d7:6b:
ad:02:1e:0b:88:62:58:1c:1d:91:dd:29:b4:55:f9:
7c:43:d7:5b:7c:d9:e1:39:0e:00:c3:33:59:3d:82:
ab:ec:a1:06:9d:fe:4f:d8:9d:e3:e2:a1:30:d0:e5:
b7:2b:3a:d8:a2:34:81:24:ac:48:e7:25:53:99:3e:
18:5c:cf:17:64:6b:9b:80:41:7d:45:3b:bd:3a:bc:
03:6d:d0:fc:a6:bd:a0:84:ab:15:a9:12:ef:7e:05:
71:8b:6c:72:1e:63:cd:05:fc:2b:f9:a7:52:51:26:
d4:58:3d:81:b9:0d:c0:72:6b:bd:0d:c4:ae:dc:8b:
7c:cc:84:93:0f:dd:da:ae:5f:91:90:fd:42:d2:e6:
2b:7a:23:ee:99:55:9e:98:c7:c0:b3:84:39:75:18:
ae:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A3:3C:2C:23:3E:5B:BD:DD:AD:77:46:8D:E4:E6:03:9A:62:54:9D
X509v3 Authority Key Identifier:
keyid:87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e1:09:32:1d:a9:a1:dc:cc:31:e4:0a:37:57:ed:b0:05:1f:
0b:36:1b:d7:c8:0f:e5:b9:06:54:69:f7:76:04:6b:38:2b:ab:
a8:6b:09:96:11:11:2d:cb:ea:5e:d0:6e:92:cd:ff:e7:29:f5:
b6:04:9e:23:18:13:99:0f:36:89:c3:7b:b7:d0:3f:be:f9:52:
54:9b:d0:80:e1:de:2f:3d:bb:66:42:20:73:93:11:41:66:42:
91:e2:f4:35:4b:a2:fc:7a:eb:9c:f5:40:4a:e3:8a:4d:3c:11:
29:9e:40:eb:02:e4:8f:97:b3:6a:f3:82:15:e1:07:af:2c:41:
a9:27:fb:22:7b:62:c4:a5:57:af:71:19:84:6d:62:31:d9:4f:
37:d6:ae:8c:6d:b1:c0:c9:41:b8:df:a4:ad:0a:5f:81:7f:26:
26:a9:24:91:9a:f1:52:ed:5a:2e:22:78:36:72:0e:79:a0:13:
b4:10:64:3f:e0:77:f4:9f:db:26:7c:59:78:ff:00:e2:cd:0f:
0d:0a:9a:58:b9:9a:7a:87:ba:2b:fb:b9:b3:b3:a6:6e:ae:8b:
87:bd:9e:92:a2:a9:9c:8b:72:8c:52:9f:e2:0c:cc:22:22:02:
72:00:c8:fb:e0:81:0a:81:1a:a1:eb:2d:b6:91:6d:ed:25:a5:
2c:bc:7d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:13:56 2025 by rpki-client