Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
File: hR1ONNTkhTnBcEUdTiYTiIf26SI.mft (raw, json)
Hash identifier: 5SGb7Cpb2YaaRyTjtKdcjZcIjPVuzpPkQElOhZ37vw4=
Subject key identifier: E7:B4:51:5B:EB:B4:B6:AB:E5:15:0F:96:7D:D6:34:34:9A:62:7A:4F
Authority key identifier: 85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
Certificate issuer: /CN=851d4e34d4e48539c170451d4e26138887f6e922
Certificate serial: 0194BC3C9CDE0778D88E7EC1505DC51C9AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
Manifest number: 0FD6
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: EgrdXaLN-vc8C2zZS8RN3DywvDo.roa (hash: hzm54PDUPW3onP/qtSLZRsQOvKv3wuQ4riGx7IRQcQA=)
2: hR1ONNTkhTnBcEUdTiYTiIf26SI.crl (hash: Q/vg5x4gEnLmv+jf1MTPy57ahnAP/B5hQFcLPXsOiI0=)
3: rAaiXMvO9i5snovqluPbyo_QCN0.roa (hash: pt3vDzVbNzSpy4PSZ8+XX3gpZBn6uEG/ZRILx9TbDQc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9c:de:07:78:d8:8e:7e:c1:50:5d:c5:1c:9a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851d4e34d4e48539c170451d4e26138887f6e922
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=e7b4515bebb4b6abe5150f967dd634349a627a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:41:4c:2d:be:7e:6c:97:a4:54:2e:63:35:
f8:9c:7e:3a:ee:1b:3d:d4:25:f8:52:b3:8e:76:53:
a2:ba:20:24:23:ff:96:9b:1c:f2:86:6b:c7:16:39:
1f:17:06:98:9e:10:20:b9:a5:cf:28:19:b5:6e:36:
63:37:95:88:d9:c1:3c:50:81:4f:9b:c6:89:67:ef:
98:b9:23:fd:f0:b9:95:d9:aa:15:bf:fe:7c:95:2b:
65:5d:22:fa:61:0b:28:dd:65:0f:b2:80:5d:1d:f3:
59:af:b3:c3:bd:3e:34:97:d3:a6:32:8a:96:4d:de:
bf:46:d9:27:97:e6:58:45:e3:78:41:8a:9a:d1:6a:
76:ac:a3:15:07:7a:69:a9:09:27:b0:eb:43:d8:98:
aa:94:64:44:d2:d6:91:bc:8d:3b:f6:7a:20:a4:d7:
34:a4:4a:80:78:3e:f0:65:dd:5f:40:16:ee:5d:68:
21:a7:0a:22:df:7f:34:34:7b:6f:c9:51:29:68:8d:
7d:07:ba:03:fd:8e:11:ee:43:f3:04:35:41:9b:1c:
0c:bf:92:7f:3d:5f:c1:2c:c2:80:c0:08:a6:7d:2d:
c0:ec:f2:81:66:4d:73:50:59:b1:b2:11:56:a2:a4:
3d:b8:a7:a9:36:e9:8d:34:54:e4:39:38:67:97:c0:
3e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B4:51:5B:EB:B4:B6:AB:E5:15:0F:96:7D:D6:34:34:9A:62:7A:4F
X509v3 Authority Key Identifier:
keyid:85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:56:88:99:b2:b1:60:23:4f:08:67:3b:03:39:cd:e4:31:ba:
b8:4f:f0:ee:2e:19:03:7f:bf:85:eb:5e:bd:b0:fd:c3:1f:3a:
9e:b8:6e:bb:d6:5c:6f:c6:cf:a1:c4:1b:80:2d:b9:6f:8d:fd:
52:6e:55:6e:f6:f9:e7:57:1c:f3:33:ab:fc:2a:f3:9a:e4:70:
53:d2:aa:a1:b4:5d:af:18:85:f1:3e:ea:7a:d7:00:5b:a1:2e:
0c:9b:11:fb:2f:d2:11:91:d8:89:89:c7:c4:09:eb:2c:03:1e:
2d:3c:e6:71:4d:aa:70:b3:ba:82:a3:bf:af:95:15:68:ef:16:
d4:86:23:b8:8d:17:1d:6a:72:88:b3:c1:42:d2:8e:c1:ab:4a:
47:43:ea:dd:23:06:be:d6:2b:a1:ea:a5:a5:6b:89:3d:bf:db:
4c:cd:2e:96:d0:5a:41:b6:81:56:41:93:dd:97:51:72:bc:d4:
4b:2a:3d:51:b2:0d:7d:0e:6b:41:88:80:c4:e0:40:bc:14:16:
30:46:93:6a:3b:8e:cb:b4:6d:96:ca:d2:83:0a:9b:82:4b:b5:
cf:2a:1d:48:1d:52:cb:aa:17:9f:73:1f:06:3d:23:9b:73:6f:
55:13:3f:f3:4e:45:72:1b:a3:6b:6b:ac:98:c2:16:67:30:a0:
77:7b:fa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:33 2025 by rpki-client