Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
File: hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft (raw, json)
Hash identifier: 2xLGTSc8H/59j07Xlw63K0IPHyCNUi0NVJML+skbqdY=
Subject key identifier: 94:97:42:B4:B7:70:80:10:21:B9:CE:28:64:34:DB:05:D1:50:FE:E0
Authority key identifier: 86:38:41:50:6D:02:61:31:96:50:57:40:9A:16:04:A5:67:1F:05:41
Certificate issuer: /CN=863841506d026131965057409a1604a5671f0541
Certificate serial: 0194BBCE33EBB2E5562CF64B3D1BABAE45CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
Manifest number: 01F2
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: hXap7hNXLEAQarnfnwYswdCAdkQ.roa (hash: bNhK/WdUp/9xvJiGhX97CJWQhZiON1WPJ6uWrAYKvFI=)
2: hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl (hash: PfBWLzF9WpBf7QvIZQPHt9x7oWHd5wPGEtT25ExRP1I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:33:eb:b2:e5:56:2c:f6:4b:3d:1b:ab:ae:45:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=863841506d026131965057409a1604a5671f0541
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=949742b4b770801021b9ce286434db05d150fee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dc:6b:54:bf:f5:8b:d1:d3:aa:15:bf:78:51:
56:d0:5a:33:61:2c:a9:fc:d8:6a:a4:4b:1d:2b:78:
ee:40:4b:01:ce:0a:e5:e8:33:47:1b:ef:cf:c7:59:
7b:a4:d6:8c:af:e3:82:16:7c:ca:fd:9e:88:40:3d:
6c:60:91:b2:d8:c1:c1:ef:85:9b:92:3f:04:90:85:
a2:5d:82:13:ad:26:79:25:5b:0d:eb:d5:cb:ca:12:
b0:50:f1:b9:9a:be:3a:99:3c:ec:9a:a6:1c:f3:7c:
60:42:1f:97:8f:01:93:2a:ec:18:9b:a2:ad:4d:bd:
fd:be:7e:46:02:81:70:f2:69:b7:16:c7:29:0c:8c:
f0:d5:ed:01:41:a5:30:1b:1b:38:89:e0:da:b6:4e:
e3:db:85:af:d1:2d:af:ea:b3:e5:9d:bf:9a:f4:69:
ef:19:f6:2b:43:b9:3b:33:a4:69:88:4b:f9:b0:45:
d5:f0:13:a0:a5:fd:90:59:88:cc:71:6f:8f:96:0b:
52:2f:71:dc:c8:2f:77:c7:98:5b:cb:cd:26:97:6b:
07:5c:08:4c:74:3a:21:59:7c:2e:ec:58:2c:3c:74:
5d:48:79:e7:d1:6d:a9:ee:14:9a:87:ba:ad:28:29:
bf:0e:f4:32:a6:20:72:10:bc:42:24:58:09:f9:41:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:97:42:B4:B7:70:80:10:21:B9:CE:28:64:34:DB:05:D1:50:FE:E0
X509v3 Authority Key Identifier:
keyid:86:38:41:50:6D:02:61:31:96:50:57:40:9A:16:04:A5:67:1F:05:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ee:c3:ae:8d:ab:61:94:8a:b1:49:48:74:dc:d7:dc:14:95:
e8:61:52:96:f1:b6:fc:83:3b:7b:80:93:fb:cd:2a:c8:d5:d3:
ab:39:ab:95:8f:0d:91:e9:7a:6d:30:70:6d:eb:33:ce:f6:1b:
ae:46:05:46:8b:f0:e6:81:23:28:ab:ab:54:33:79:8a:06:07:
04:8e:d5:bf:4d:c7:6b:25:96:95:0c:21:0b:b5:50:6c:ff:b8:
55:dc:62:ac:55:56:c4:b4:23:c0:5d:40:93:34:b9:1c:1c:f8:
dd:08:4b:65:82:b4:2d:0a:7c:95:f7:7f:52:4e:6d:c8:33:25:
a6:0d:b1:f7:cb:42:34:ea:54:7a:a5:b1:ec:6f:04:b8:94:26:
ca:a6:38:f9:ce:d2:81:ea:c2:89:8f:5d:af:a3:d9:d6:e3:53:
76:f9:2b:4f:29:e9:fd:81:d2:9f:71:5f:e6:bf:85:5c:93:3c:
dc:1f:13:c3:65:24:0f:26:c9:11:0e:8b:9a:bc:77:dd:64:01:
60:3d:42:8f:ce:63:ea:34:55:65:2e:b9:75:d4:28:84:dc:3f:
ad:6c:41:46:62:31:37:05:19:b2:ba:ce:01:58:5c:69:e8:4c:
ef:47:d0:54:b7:7f:d9:52:eb:84:ad:02:19:87:2a:32:7f:71:
4d:dd:db:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:56 2025 by rpki-client