Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1e76ee-31bb-4299-814f-239e5abfcc6a/1/hn3QWtctwi--owKfzukOb7BjiQQ.mft
File: hn3QWtctwi--owKfzukOb7BjiQQ.mft (raw, json)
Hash identifier: CULVO69PwivBu0JhcKNAISzDQgA6Qg26LDNTC/YTf80=
Subject key identifier: 6C:2C:43:55:48:79:D7:2F:16:10:5F:96:34:CE:7E:BF:4E:FE:51:49
Authority key identifier: 86:7D:D0:5A:D7:2D:C2:2F:BE:A3:02:9F:CE:E9:0E:6F:B0:63:89:04
Certificate issuer: /CN=867dd05ad72dc22fbea3029fcee90e6fb0638904
Certificate serial: 0194BBCE230F33F125EBE1A805F68B05A24D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hn3QWtctwi--owKfzukOb7BjiQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1e76ee-31bb-4299-814f-239e5abfcc6a/1/hn3QWtctwi--owKfzukOb7BjiQQ.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: 1hbevT8gwbMVGXnU3oslqDok4xQ.roa (hash: PvOSpkQG3GMAcOSv9DP0juXGFg1PxvMowO3npVuSH5E=)
2: hn3QWtctwi--owKfzukOb7BjiQQ.crl (hash: TDPq1q+kmvMnOYliJeiINx8XhmlIEcRwG1mKnQ+O6dg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:23:0f:33:f1:25:eb:e1:a8:05:f6:8b:05:a2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=867dd05ad72dc22fbea3029fcee90e6fb0638904
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=6c2c43554879d72f16105f9634ce7ebf4efe5149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:40:c1:ff:8b:08:66:90:13:78:ad:e2:47:
2c:b7:cc:39:cf:96:d6:23:ff:c3:40:92:7d:e4:90:
33:8b:ab:b4:b7:3a:aa:56:ff:d3:dd:cc:69:cc:47:
a8:58:5d:cd:b8:1c:87:38:e2:36:c3:f8:a6:a4:e8:
a2:19:68:38:0a:cc:55:4c:2e:92:5f:bc:87:e9:f1:
2c:bd:60:71:5f:f3:b9:d8:d8:88:d2:cf:cd:62:45:
c7:58:ac:84:1b:b2:fb:1b:80:07:6b:7f:0a:60:33:
3c:7b:5d:cb:8f:6a:a8:b6:6f:95:d9:e0:e8:1b:9e:
f8:1d:fc:aa:a3:33:c9:98:25:4c:c7:35:e3:b7:0d:
81:6c:a4:41:de:17:50:2c:14:f3:55:d5:02:1d:88:
e9:72:91:f0:25:13:b6:44:15:ae:12:63:c1:87:81:
4b:4f:00:cd:0b:ff:1e:62:14:bc:6b:e0:7c:6a:04:
18:d0:4d:6c:ef:79:63:6a:51:cb:b2:df:90:dd:55:
c3:63:b1:44:16:3d:28:1e:d8:b9:11:4c:44:a6:84:
8b:8c:32:25:0f:cb:36:cd:a5:b4:eb:81:d8:35:34:
d9:99:b4:f4:22:91:51:c4:95:c3:1b:fc:34:81:c6:
55:28:60:33:95:ad:1c:e1:c1:68:ef:ca:f7:8c:76:
d7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2C:43:55:48:79:D7:2F:16:10:5F:96:34:CE:7E:BF:4E:FE:51:49
X509v3 Authority Key Identifier:
keyid:86:7D:D0:5A:D7:2D:C2:2F:BE:A3:02:9F:CE:E9:0E:6F:B0:63:89:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hn3QWtctwi--owKfzukOb7BjiQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1e76ee-31bb-4299-814f-239e5abfcc6a/1/hn3QWtctwi--owKfzukOb7BjiQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1e76ee-31bb-4299-814f-239e5abfcc6a/1/hn3QWtctwi--owKfzukOb7BjiQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:99:07:67:8b:08:ce:29:76:6d:31:2c:3c:cc:5f:45:82:65:
5b:94:f4:34:a7:9c:75:b8:45:34:7a:8f:cf:27:3c:5a:2a:f4:
4e:2b:4b:78:3e:80:48:a4:c2:e3:5a:e9:6f:f9:cf:01:50:44:
5f:83:cc:99:79:73:45:6e:5c:a2:6b:08:d0:2a:8a:9f:0d:8e:
03:da:32:c0:3d:17:79:9a:7d:35:d0:e1:69:8f:1d:bb:5a:8b:
76:24:35:58:e0:b7:3d:96:3b:21:5e:f8:8c:20:a4:a4:a3:44:
d9:ed:65:c0:a7:f2:cb:a6:8d:1c:b9:e1:04:8c:a9:74:0b:5b:
03:f6:ed:db:d2:21:d7:54:64:0e:5c:22:9e:fb:2a:73:84:02:
f6:c8:c3:1f:6c:6c:0d:8a:43:bd:87:48:d6:f5:54:6c:62:c2:
08:94:91:88:49:b5:5e:86:70:54:19:11:70:ad:d4:7f:e0:db:
dc:b4:93:f1:d4:72:41:a1:c3:b1:b7:f0:03:a5:95:19:11:81:
d1:23:32:e2:49:8c:f6:2c:71:91:eb:89:0d:e1:c3:f9:43:6d:
01:0a:ea:d2:e8:4c:b8:ce:64:f6:c6:6a:0b:fe:c7:fe:21:18:
04:72:39:88:e3:50:81:16:73:f7:78:40:21:d2:d8:35:6c:ad:
89:10:7c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:57 2025 by rpki-client