Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
File: hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json)
Hash identifier: G8KRBqK7i20Dm6K2UaSiWj//dqYH9MfmvJ2B8OBN/BE=
Subject key identifier: 89:1F:65:7F:0E:00:6D:B1:52:57:58:51:FA:80:51:06:20:F2:C7:25
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Certificate issuer: /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial: 0194BC72FD9A272694F6B433B12AEA6FD499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: ZqMG8mpe5nSXKW1FrNNGNQPtlac.roa (hash: KO75sPS4/XP/JBEid5X4pt0EZyoaOZvo180Eq+iiPnQ=)
2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: psNYrutQGfQwGEYJoFDhWB2EndwfUlrpFWNiX7MTDww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fd:9a:27:26:94:f6:b4:33:b1:2a:ea:6f:d4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=891f657f0e006db152575851fa80510620f2c725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:70:52:71:32:fb:03:1f:f4:61:50:4e:cb:
fc:d2:f5:84:28:46:91:63:37:ad:5a:fa:9f:1c:c3:
30:ce:cf:6c:69:6c:6d:62:4b:3f:89:f2:a9:81:cd:
6f:93:59:91:ba:e0:a7:5f:3a:56:07:25:c1:d4:a3:
fd:55:33:6e:87:ff:5c:e3:aa:82:27:30:d3:8f:58:
d5:b1:1c:d2:e3:0f:6b:18:97:1b:bf:2a:0d:07:5c:
da:10:a8:74:bc:06:76:18:e0:1f:e9:4d:e2:eb:3d:
da:3c:3b:86:67:5a:57:29:f7:86:f1:23:3c:ff:d1:
b8:32:4f:26:44:37:88:97:c9:e1:1e:de:06:76:b4:
3d:7f:27:db:f9:09:ef:54:3a:56:d0:43:0f:52:61:
df:28:b7:d1:6e:e9:c8:e0:96:d5:33:0a:ed:f3:b3:
bf:94:04:ac:b3:24:30:bb:ca:68:c7:3a:7b:45:3f:
71:9e:81:95:94:c8:a4:12:ac:60:31:96:9a:00:ca:
be:f3:7e:f3:05:63:6a:14:fb:f6:70:ef:96:0f:d7:
eb:19:83:e1:c0:f9:57:1d:05:bb:b4:11:8a:ae:19:
4e:64:9e:b6:99:b3:58:7d:90:a6:e3:97:f1:32:8e:
34:f8:aa:a2:e6:e5:bc:11:79:58:59:82:c1:d8:ba:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1F:65:7F:0E:00:6D:B1:52:57:58:51:FA:80:51:06:20:F2:C7:25
X509v3 Authority Key Identifier:
keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2c:67:49:0e:16:12:56:0a:bb:78:db:6c:06:6e:43:f7:81:
8d:1a:d2:01:15:cc:61:29:1a:26:f5:70:86:6d:79:3b:12:5b:
20:b7:be:54:7a:a9:f6:6a:ad:b2:36:e9:d6:f1:61:1c:f0:8c:
2e:bf:4b:92:43:75:ae:9a:72:89:75:63:29:f1:32:d4:be:8b:
99:7b:47:69:dc:d2:31:df:dd:a8:dd:a8:a7:72:db:64:d0:40:
3c:74:e5:d7:15:ee:21:f9:98:50:3e:eb:d7:0c:c0:7d:db:c1:
80:3d:c1:91:a6:c3:de:77:d5:9d:8e:f3:70:69:77:01:6a:a8:
2f:6c:e3:ed:81:76:26:12:c5:2f:21:be:7f:99:7c:1a:78:19:
ce:03:ae:a8:9b:02:f8:b5:78:d9:82:b0:4c:3e:4a:f1:91:7c:
83:19:73:d3:d8:1c:18:ca:f6:4c:2c:af:18:c5:a8:6c:31:ea:
77:3b:3b:43:dc:58:b0:d6:0c:a4:02:a5:9f:17:99:b6:57:0f:
1d:86:bb:d5:3d:09:e7:4e:36:8b:16:10:bd:3b:22:03:bd:a9:
40:49:97:97:cf:5a:1b:0f:1d:e8:5e:80:fd:ce:4f:42:fd:02:
67:80:a7:7f:02:0d:21:93:a1:0f:8d:f3:03:aa:31:2b:b6:20:
0c:9e:59:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:34 2025 by rpki-client