Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
File: hY6VYi_VRF1u00P4DgU-r_sRiyw.mft (raw, json)
Hash identifier: lwJC3Dvw8tpomwVYc+AesUfZ0/1Q+xXoT2s1u8sZbtQ=
Subject key identifier: 40:56:F5:7A:9B:F8:78:11:B2:56:4B:57:C2:28:C0:48:60:DE:1E:34
Authority key identifier: 85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
Certificate issuer: /CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Certificate serial: 0194BC72FEC52375B926811500C76459C985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: VqHyyiIf_MNHRUQN5mAvsdQ_W6I.roa (hash: MDdqX3nQAwimP61KTWNfGEm7PlFzODAKVqf8oTIIVz0=)
2: hY6VYi_VRF1u00P4DgU-r_sRiyw.crl (hash: 9CiKHZjDbi4JcZfc4+s6fkLq+SWgVYd2lKfbsctBhJg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fe:c5:23:75:b9:26:81:15:00:c7:64:59:c9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=4056f57a9bf87811b2564b57c228c04860de1e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:75:df:b9:dd:c0:27:99:c9:58:fb:86:bf:
50:3b:4a:34:75:b0:06:a8:9b:29:99:6f:b1:36:e7:
52:65:5f:81:6c:91:4f:bb:8c:90:04:84:ad:21:10:
8d:46:19:cc:10:c6:68:3a:a4:54:96:47:65:63:e1:
63:96:a7:ce:c1:e3:94:28:82:d2:4e:29:50:e9:66:
fb:fe:b7:20:9d:b1:fd:d5:da:9a:74:72:be:ba:e2:
d2:82:83:d4:1a:b3:bd:a0:0d:96:e4:71:49:5c:fd:
a0:55:0a:b3:18:1d:1f:68:a1:62:bb:78:4a:a1:1d:
b3:f5:c8:0c:84:1d:8e:48:59:73:c2:0e:58:47:90:
9f:8e:cb:0e:58:5d:a1:1f:ce:ef:f3:50:d6:44:9c:
fd:98:19:ee:cb:5c:c8:17:f3:4a:19:db:01:50:b8:
2e:41:52:6a:4b:b2:56:4c:d4:a6:9e:79:70:ee:d5:
4b:9a:14:73:41:f0:db:7e:7a:c5:b2:f9:67:24:4a:
46:d2:86:90:5a:b4:ff:f4:91:97:44:4f:15:68:d9:
51:b6:23:b0:07:44:92:6c:f8:0c:01:1d:d8:88:01:
2e:87:f0:d8:8e:63:83:fc:fc:d0:ee:51:b9:44:20:
4f:04:6b:15:2d:bc:36:54:03:2d:8c:f3:7f:6b:2e:
b9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:56:F5:7A:9B:F8:78:11:B2:56:4B:57:C2:28:C0:48:60:DE:1E:34
X509v3 Authority Key Identifier:
keyid:85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:62:81:8c:48:13:29:50:c5:27:36:77:31:f5:84:a1:51:32:
a3:31:90:fb:ff:ff:7e:82:3c:c2:85:e2:52:a0:0b:2c:a1:b2:
72:db:2d:68:59:34:25:00:e4:f0:33:0b:53:5c:23:75:74:98:
d3:b0:c6:4b:97:39:6a:bb:80:73:d8:8b:e4:b8:06:72:1d:0f:
6b:69:5e:f7:1e:c2:93:dc:a9:24:15:91:2e:e5:bf:d1:a6:03:
c7:23:6f:9c:c4:6d:de:5f:d6:75:f8:13:88:6b:56:72:15:77:
1c:fd:f5:17:3f:5d:87:37:52:15:a4:f4:05:b3:db:e5:42:b8:
34:eb:70:6d:a5:7b:2f:b3:ac:ef:63:b9:de:18:7a:2c:da:a1:
d6:14:3b:6a:6f:e8:f9:55:72:b9:e1:69:6b:d3:44:6c:9d:af:
85:3c:d5:38:24:b7:29:90:ff:9b:9a:58:fc:da:8f:7c:f9:3b:
aa:3e:f1:4e:72:bc:f8:d5:f6:88:38:af:cf:1d:f8:8f:f5:7f:
8a:f4:99:75:4c:00:61:f5:f0:56:e0:bb:aa:3e:82:95:55:4b:
55:3f:0c:79:08:46:ba:45:4d:f0:22:28:ee:15:a7:8b:dc:93:
41:41:78:b0:70:fc:b4:b1:fe:53:5f:75:32:88:fa:3a:b0:2a:
95:9b:47:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:45 2025 by rpki-client