Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
File: c8_hHopwk73JW8AeINtDduIqpRY.mft (raw, json)
Hash identifier: H5jhlkoVzic8vc1oHSSpZki2dkrq8+FRD5soPAoHn9g=
Subject key identifier: C5:F9:7E:5A:62:E4:DD:48:08:0B:08:17:67:85:B8:8D:94:EC:53:51
Authority key identifier: 73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
Certificate issuer: /CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Certificate serial: 0194BC3C0DD0FB179C1229D9A331A45BAEDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
Manifest number: 013D
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: SVFNCXAgs-J1Ur0M2wuVWaTBzQI.roa (hash: rGZg6LxxY7ku4GUoLGf94rOsH2eH6eg3rUYHF4vWHMk=)
2: c8_hHopwk73JW8AeINtDduIqpRY.crl (hash: LvzIIXmRofLFkkFjI6fAT71XEvQHWhfrfD1ypbugYxM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0d:d0:fb:17:9c:12:29:d9:a3:31:a4:5b:ae:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=c5f97e5a62e4dd48080b08176785b88d94ec5351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:70:a5:30:25:a7:a5:ac:64:49:91:f7:13:
dd:fc:8b:00:bc:78:0a:0c:c7:54:ed:fe:19:04:e2:
6c:e9:12:a9:57:31:e6:6b:b1:ce:9c:73:72:e6:6e:
4d:e3:51:eb:1c:49:61:87:db:2a:56:a2:97:29:64:
bc:18:76:58:cd:14:dd:58:9e:be:5f:2c:95:93:0f:
96:fa:03:65:8f:24:24:57:e3:3e:04:e0:ec:2b:bc:
e4:6d:90:cc:f0:d0:53:f9:b5:b0:cd:08:f5:02:80:
d6:55:2e:a5:18:8e:96:7e:76:f4:b8:7e:c1:43:99:
67:a8:eb:8a:05:8f:4c:95:05:6f:5d:be:bd:6d:34:
d7:0d:38:a1:f7:8c:0f:27:9c:fa:c7:a6:64:fc:8a:
68:10:65:9d:cc:91:81:24:c7:11:bc:bb:e2:2c:47:
77:ad:ff:af:49:e2:2b:96:95:c7:3a:70:59:32:1d:
e2:6b:44:f8:86:5a:8c:5c:40:ab:9e:93:41:68:d0:
0f:1d:10:d1:d8:c7:4c:e2:9c:67:f0:85:81:50:ea:
86:55:37:8a:b0:2c:a2:23:cb:2b:83:30:9c:9c:38:
74:76:1a:a9:fe:de:4e:df:f1:6b:26:fb:9f:79:a7:
72:7b:15:8f:65:67:89:29:d8:4f:72:9d:b9:d2:0b:
66:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F9:7E:5A:62:E4:DD:48:08:0B:08:17:67:85:B8:8D:94:EC:53:51
X509v3 Authority Key Identifier:
keyid:73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:00:80:87:47:d2:06:99:06:c3:93:22:b0:62:bf:74:26:33:
03:39:30:ac:6f:19:04:59:7b:c7:93:d7:63:9e:4a:36:16:d3:
9c:7e:b5:68:13:fb:cd:ce:ea:b1:ca:bf:0a:ee:a1:8f:4e:58:
16:e4:10:30:92:60:cc:6f:e9:e4:c7:3d:ba:e7:01:73:72:6a:
81:2f:93:dd:fc:74:0c:99:cb:26:5e:1d:93:f3:f2:62:c0:26:
d9:cb:0b:63:6b:8d:50:88:16:93:2e:95:d1:48:05:05:9f:69:
df:b2:ea:33:77:8e:3e:0f:b4:3d:a2:1a:4b:69:65:65:21:9b:
18:d2:55:55:5b:37:d2:88:95:e8:eb:21:be:fe:4a:99:e5:b2:
df:d7:21:f4:6e:7f:ef:8d:a1:db:f9:da:33:62:ab:93:2e:27:
2b:40:49:0a:a8:d4:cb:f7:d9:5a:59:df:8a:d4:fd:32:65:c4:
10:16:a4:4c:c2:c1:47:b2:2e:01:73:74:c9:02:22:b2:29:17:
85:99:a9:7b:63:24:8f:14:23:37:79:f3:fc:1b:d6:41:18:2e:
c8:f9:9a:22:d2:cd:ca:0f:cd:0e:33:22:d3:e6:9e:36:56:53:
b9:fc:e3:96:ca:2c:56:4b:41:64:d6:86:cf:0d:91:62:8d:86:
f4:71:b5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:53:35 2025 by rpki-client