Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
File: hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json)
Hash identifier: 8dD1o2fvSMOD6VgFxmgrGQFRhw9b+sKBIDwpYVmZ6aQ=
Subject key identifier: 39:E9:03:67:DE:E8:6F:A6:08:5C:0A:E4:24:1E:A0:BC:9F:A6:59:09
Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
Certificate issuer: /CN=8453d1e8618ef8fae8075ddd58270d094006be99
Certificate serial: 0194BD180C0D31A9DB7C4BD6C90452CB9136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
Manifest number: A4
Signing time: Fri 31 Jan 2025 16:00:57 +0000
Manifest this update: Fri 31 Jan 2025 16:00:57 +0000
Manifest next update: Sat 01 Feb 2025 16:00:57 +0000
Files and hashes: 1: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: 5Z/e1YY6cyEh0+Fn84sIT+XQS0tVL30E6KglvsXZIp4=)
2: lO_Mg3DZHEdW5_hWel-RB7XxrdI.roa (hash: mSvOkFvyMe8N8eCEVEp8qdqZ/KkLJkgUd3GK7ljSNTc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:0c:0d:31:a9:db:7c:4b:d6:c9:04:52:cb:91:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99
Validity
Not Before: Jan 31 16:00:57 2025 GMT
Not After : Feb 1 16:00:57 2025 GMT
Subject: CN=39e90367dee86fa6085c0ae4241ea0bc9fa65909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:22:49:3a:85:27:e6:ea:44:9c:ae:75:00:
1c:e0:68:22:49:64:2e:92:ec:f1:30:9c:c1:46:e6:
17:3a:3c:b6:bc:d4:d2:49:18:34:4d:73:c5:27:1b:
9d:50:50:f2:36:ed:f1:62:3a:ae:31:5a:c1:f0:49:
44:55:f9:e6:90:e1:f3:ee:52:ab:37:a3:5d:29:9d:
fd:c4:ec:dc:cb:b3:97:38:78:9f:e0:61:be:af:19:
81:2e:13:f6:15:34:32:67:a0:3c:a4:db:18:e3:d5:
c0:35:e2:58:b2:44:68:64:6c:69:94:e0:4c:c1:d2:
22:fa:58:af:20:3d:0e:7d:1c:67:25:d5:05:b4:b3:
b4:cd:66:6a:4d:81:94:d6:cb:2e:b7:87:52:1c:2e:
97:d5:60:14:fe:05:69:c7:67:16:be:22:85:85:07:
a6:b2:e3:ca:ea:5a:a7:e3:8a:34:77:9c:35:03:c8:
73:25:ff:1a:95:f2:21:80:4e:a6:cf:15:31:8e:81:
c7:fa:78:af:4e:b4:59:6f:06:e8:2c:90:e3:7b:38:
07:bf:cd:19:58:9b:05:2f:8d:68:76:22:1a:a5:61:
47:5b:e3:6c:ce:b3:31:c9:ff:df:05:f6:88:af:00:
67:76:a4:a4:35:af:32:6d:47:67:02:6c:ca:93:ff:
e4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E9:03:67:DE:E8:6F:A6:08:5C:0A:E4:24:1E:A0:BC:9F:A6:59:09
X509v3 Authority Key Identifier:
keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:e1:26:7d:52:f0:fc:2d:0f:d1:47:81:6f:3c:73:e2:4d:2b:
f1:d9:ea:d9:6e:70:ac:b6:66:75:d9:52:63:06:f3:e1:91:cb:
e4:22:15:fd:e0:da:68:82:6c:c0:68:65:bb:27:e1:fd:4c:cd:
19:10:10:7c:ab:4d:f0:e4:85:9e:0b:a2:3e:f2:b1:98:d3:8d:
0c:1a:d1:f3:05:79:ad:47:4a:e1:cd:c9:d4:ca:ad:27:a8:bd:
cd:84:a3:72:da:03:c9:54:d6:07:3a:fa:0e:68:80:71:b8:c2:
65:02:1f:3b:23:d5:69:3c:e3:55:5a:17:f7:e5:99:26:c6:c1:
7f:e1:a2:ee:1c:b3:5f:e0:41:99:1a:4b:13:4a:17:cd:f1:35:
e1:2f:6f:69:43:5f:b5:3c:cd:27:13:f6:1c:56:7f:8c:be:85:
a7:ef:4f:01:a3:12:90:fb:d2:a1:de:15:56:ab:2c:24:c5:89:
2e:36:db:dd:d9:2b:85:1f:38:6e:a1:74:5d:57:58:fc:ad:b3:
3c:a1:2c:cd:d5:05:c5:c5:98:c5:04:98:d8:79:35:d9:5a:5f:
ef:26:4c:31:42:f1:b8:cb:e4:43:5b:49:a9:12:16:3e:b2:32:
43:2c:b7:ea:84:8d:1b:4b:e1:9a:43:ae:99:77:32:ba:6c:31:
94:15:c6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:32:43 2025 by rpki-client