Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
File: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json)
Hash identifier: 8ftt+d8116A3RV7+8IM4LmHAPEfm6ECsfIfG/BIYFbc=
Subject key identifier: D6:88:B4:D6:32:7A:EC:E1:BB:C0:A7:00:B6:28:10:31:D8:3C:4A:0A
Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
Certificate issuer: /CN=854e8383e8208936802362a09f36085a50fcd85a
Certificate serial: 0194BD17787FC2B65B0084B8FFC296AC56BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
Manifest number: 13C0
Signing time: Fri 31 Jan 2025 16:00:19 +0000
Manifest this update: Fri 31 Jan 2025 16:00:19 +0000
Manifest next update: Sat 01 Feb 2025 16:00:19 +0000
Files and hashes: 1: TpP1ghqsvudxwpVNjEnVhO4RWww.roa (hash: 4+AlZPeiYc4qPwqWqByXnBYBTrZOMTJuwqjVuo2TCds=)
2: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: h+/xxbHGVnyhTGZaNhx68q6NVzPIVvtr3wzUFO9qPvs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:78:7f:c2:b6:5b:00:84:b8:ff:c2:96:ac:56:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a
Validity
Not Before: Jan 31 16:00:19 2025 GMT
Not After : Feb 1 16:00:19 2025 GMT
Subject: CN=d688b4d6327aece1bbc0a700b6281031d83c4a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f4:63:4f:ba:84:34:79:cb:bb:56:75:f0:8d:
23:c2:89:fc:c3:e1:0c:43:0c:fe:b3:6b:bc:0f:01:
cc:e1:a7:d4:40:53:95:61:af:61:c8:7f:70:58:29:
25:27:fe:ce:08:e5:80:bc:bd:a1:87:b8:10:bb:9d:
76:dc:11:76:0e:88:39:c7:ad:4b:41:b1:ba:9a:89:
8f:89:aa:05:40:fa:bc:6a:60:17:b3:08:65:a9:cf:
6c:a9:bc:5f:3f:b6:17:c1:ba:0e:9b:9e:55:5c:7b:
b5:12:80:d7:78:2b:4e:b2:ad:c2:c6:73:5e:36:20:
16:78:2a:91:7a:04:2d:06:c5:72:3b:63:34:ac:fc:
af:df:7c:b1:30:c4:4a:7d:2c:da:69:24:e3:28:28:
b8:52:3e:f5:1a:00:ec:ca:80:42:1c:b8:32:44:a0:
19:69:a9:81:4a:16:3b:00:76:a8:f0:b2:7d:7b:bb:
10:ea:6a:d8:f1:3d:f0:a6:48:d4:9d:ba:27:a4:31:
29:00:5d:2f:7d:84:e2:60:67:6b:8f:0a:51:85:81:
dc:93:d6:f0:a6:07:cf:7e:82:ef:97:55:6f:5e:fe:
54:4a:df:c5:1d:c0:b8:47:12:0a:76:a1:8d:77:99:
ad:08:6f:45:f3:e9:03:bc:e2:89:75:ae:4f:73:7d:
e6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:88:B4:D6:32:7A:EC:E1:BB:C0:A7:00:B6:28:10:31:D8:3C:4A:0A
X509v3 Authority Key Identifier:
keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:26:d2:d7:a8:cc:68:ae:ab:de:21:77:ab:22:8c:96:81:c2:
eb:82:03:5d:e7:14:b5:ac:f6:80:4d:5e:d5:b4:f6:db:61:f6:
e4:87:ca:60:94:d7:cb:94:d0:93:ef:f4:d7:6d:c0:ae:1a:c5:
76:f6:5b:57:4e:c3:26:a0:02:2f:be:aa:77:56:b6:5d:18:3c:
58:d5:78:76:af:22:2c:ba:c4:1c:7d:e3:e7:56:0c:05:93:d9:
cd:1b:a5:df:38:6d:c1:67:ca:14:35:25:53:42:7a:1b:98:c1:
3e:df:db:23:3a:13:a2:c1:0e:b0:24:3f:bb:73:f6:94:3b:f8:
e4:16:e3:0a:e5:6b:fc:27:b7:fd:4b:38:7c:4f:87:b6:5e:a3:
f2:ae:64:7e:4a:c7:cb:cf:fb:f0:8b:c9:95:3f:95:b6:6c:f7:
ea:5e:4c:19:5d:5f:e7:37:00:df:91:eb:a8:5c:43:75:b9:60:
61:c9:b6:d5:b3:14:02:ba:90:ec:1f:c2:4e:42:dd:f7:bd:18:
45:10:e9:bb:1f:5b:eb:90:ff:00:2b:38:6f:57:84:7a:77:ec:
ce:38:90:b3:83:76:17:cf:4a:b2:77:15:22:ac:62:92:57:e3:
c4:50:33:7a:ae:61:fe:e9:1b:25:16:62:ae:e2:fe:f5:eb:e9:
31:fe:64:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:20 2025 by rpki-client