Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
File: hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft (raw, json)
Hash identifier: Fb8rS4i8/qV5V99k+00Ymc8gJiGVQfa+k9JxGTanKHI=
Subject key identifier: E0:26:42:DD:01:AF:C7:F9:F1:FC:4C:A9:07:30:D0:34:6D:A6:57:06
Authority key identifier: 85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
Certificate issuer: /CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Certificate serial: 0194BCE0C39F1E86D3A2B5C3E4B8BBCA593A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
Manifest number: 0B50
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: 574W7z-0GVSyQ6o383reYXA7QZc.roa (hash: 7oxCz8Z8dYajS9esPzPSpl386CuN+PzQh5YVWvXB59o=)
2: hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl (hash: YUI9JhBViTYeC58ccR0duNEbkSvl3zzZIKUGKU/d3fE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c3:9f:1e:86:d3:a2:b5:c3:e4:b8:bb:ca:59:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=e02642dd01afc7f9f1fc4ca90730d0346da65706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:65:11:7c:4d:4d:5f:0a:b4:f2:3b:be:2e:94:
11:92:0c:05:d2:43:83:2c:38:58:8c:91:3d:76:47:
55:e4:a7:69:4b:4f:6f:43:5f:97:b6:08:cf:c0:ea:
7b:c8:2c:6d:5d:88:e1:dc:7b:92:b5:a1:14:4e:9a:
4c:77:e4:6a:66:79:44:a1:78:bb:e3:ef:e7:f6:e2:
04:42:10:1d:4d:db:ee:b1:c9:2a:d1:c3:ca:69:11:
96:37:aa:d0:ef:ac:23:56:08:31:92:91:dd:b6:01:
40:80:94:ad:01:9a:ab:0f:83:bf:e8:60:aa:62:c4:
04:91:92:a6:e9:91:e8:d0:ce:19:76:cc:af:d8:78:
e6:d4:15:78:43:da:b8:c5:74:a5:7b:45:26:10:84:
11:dd:e7:19:53:04:bf:5e:af:49:cf:09:3d:aa:d9:
53:be:9a:ff:3b:bf:23:df:b5:b0:89:ad:fe:61:f6:
46:bc:76:7b:7a:4f:7b:d8:68:4f:56:c9:60:3c:ad:
b2:b6:98:b0:4c:ed:15:74:07:ad:54:41:1b:24:fa:
c8:3f:c1:f9:0a:59:82:4c:96:86:b6:f5:15:b1:7e:
b0:b2:f1:e2:6e:14:d2:6e:0a:31:b4:fc:21:38:5e:
41:99:37:f7:f1:70:5b:fc:ef:e4:ee:e8:55:10:25:
f4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:26:42:DD:01:AF:C7:F9:F1:FC:4C:A9:07:30:D0:34:6D:A6:57:06
X509v3 Authority Key Identifier:
keyid:85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7c:c4:91:8c:4f:23:46:1a:28:b7:47:8a:72:a6:a2:b0:e6:
b1:22:14:79:a7:0f:83:59:45:c4:4f:33:0f:7c:ff:f5:b8:3d:
b0:9e:8d:aa:2e:b5:1e:d2:e4:ba:c3:d8:f7:ac:55:42:f2:f0:
d1:6a:c9:71:85:ef:4e:f7:70:43:64:31:3d:a6:25:6f:e4:aa:
45:c2:16:7a:8f:79:a3:2c:96:9b:b0:4d:be:6b:ff:6f:64:68:
8c:16:15:13:13:fc:31:33:82:07:f3:ff:fd:04:88:fc:3a:ca:
0e:91:67:63:ed:6d:47:3d:d4:56:a4:03:8a:2b:68:fa:f2:6d:
6b:b8:04:e2:71:a1:1b:eb:91:bf:09:cc:90:1e:c0:bf:41:1d:
44:93:ac:12:88:a0:f1:d9:12:1e:3b:c3:00:39:5b:51:8d:49:
20:3b:8b:7f:ec:61:a8:ba:75:e2:5a:65:6f:de:a2:d4:e7:81:
65:1a:e6:e6:aa:a1:ca:f8:b3:79:3d:76:5b:bd:eb:a0:3e:bd:
6a:2f:88:7a:3f:80:3e:95:3c:93:c0:4f:97:03:c0:99:77:3f:
54:25:76:b8:74:77:cf:cf:5b:da:58:b3:0e:2f:88:a6:2d:26:
18:50:ec:4b:7f:8e:a6:8a:ee:1e:48:71:e9:d4:af:4f:50:d1:
8f:95:48:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:14 2025 by rpki-client