Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
File: hJG76s9bDFiembk_hOHF5H2a9gQ.mft (raw, json)
Hash identifier: 6ADRKa6qe7mVqLhrazktTs9yppG5Uc9GpMDzgqdhY1U=
Subject key identifier: 03:08:D3:7B:6C:30:E9:DD:75:62:EA:CA:30:65:D4:2C:7F:9C:59:D3
Authority key identifier: 84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04
Certificate issuer: /CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604
Certificate serial: 0194BCE0DF289CF3C677BE3F6CC21E5245AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
Manifest number: 0A29
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: QpSqb6NaQUo2aw3LPuosxHd4Wqs.roa (hash: euL9pnyKB7Cxdfldh990cg3q0bj2BEOIXY3BCjW3Vt4=)
2: hJG76s9bDFiembk_hOHF5H2a9gQ.crl (hash: L8STSGVyDSL47yfnYmoDVoWX3c4WQ8xuIZGVDYLklWY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:df:28:9c:f3:c6:77:be:3f:6c:c2:1e:52:45:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=0308d37b6c30e9dd7562eaca3065d42c7f9c59d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:5a:61:e6:15:df:ed:df:25:93:26:7d:f0:
91:f4:66:d6:54:f6:96:f0:ed:d0:75:89:51:df:d1:
a1:29:89:10:62:56:b4:d8:6f:0e:ed:f8:07:c9:21:
f1:87:8e:46:b1:f0:a0:eb:6d:51:da:3f:2a:d4:e1:
63:5d:1b:54:61:86:bc:3d:c9:f4:33:32:38:70:37:
30:a3:50:a1:da:e7:69:c0:d6:93:03:14:a0:9a:de:
f0:b3:5d:76:ec:a9:c8:cc:d4:00:5a:f1:b2:3b:97:
d3:7a:ce:03:6b:c5:24:17:b2:c1:fd:14:f7:9d:36:
d6:a2:2b:1c:76:c5:1c:39:b8:4b:e1:2c:0b:45:d9:
70:bc:cf:ab:ec:86:8b:5c:99:7e:d3:53:c4:7b:14:
73:55:2f:bc:62:d2:4b:cb:0d:a5:db:08:71:b6:d6:
72:b9:4b:4f:28:f5:7c:f9:6e:85:12:32:0a:30:2c:
16:ce:ce:43:9e:ec:e7:94:03:b4:7e:68:54:d1:ec:
8c:34:6d:bd:5e:8b:d3:87:23:f8:78:be:e3:f3:ed:
80:b6:e8:fa:d0:14:c6:4c:f3:db:37:73:e8:6c:99:
82:ee:ed:3d:47:91:91:2e:ef:82:17:0c:c7:9c:5e:
fc:62:df:d2:4d:63:13:74:86:7e:9f:fc:69:e5:99:
fe:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:08:D3:7B:6C:30:E9:DD:75:62:EA:CA:30:65:D4:2C:7F:9C:59:D3
X509v3 Authority Key Identifier:
keyid:84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9d:7e:7f:ca:68:cd:31:56:f4:b6:0d:39:69:26:79:4a:fb:
ff:29:f8:8f:8c:9f:86:9c:88:bd:1f:8f:cd:a5:e3:32:f5:37:
4a:59:82:e4:87:57:71:80:38:a8:8f:21:de:2f:68:52:ee:0f:
3b:43:6a:59:6c:76:54:7c:12:75:b8:8f:c4:03:7b:f5:2a:01:
51:e7:fb:00:27:2b:91:79:2d:c7:65:00:0d:b4:02:ba:ca:47:
3a:11:fb:01:93:b5:47:9c:86:a6:0d:79:4f:1c:36:d0:49:f7:
50:d0:79:27:20:ba:8f:48:c2:66:80:5f:ee:76:ac:6a:9b:02:
34:ca:b5:13:59:8c:48:f0:34:50:1c:fa:4b:af:78:cc:24:7e:
04:11:49:de:7b:60:db:2c:e0:cb:04:ac:d8:f2:67:54:e7:11:
0f:07:fa:50:3f:f8:a5:b5:25:26:e9:55:47:bb:79:10:c8:38:
3b:2a:7d:aa:ad:66:f8:fe:b9:de:ae:2f:83:5b:02:cd:18:70:
4f:98:b5:ab:b2:15:52:8f:9d:17:31:60:fd:9b:0b:97:3e:b0:
01:ef:bc:68:3b:98:85:62:47:96:59:28:0e:b9:45:2d:a6:a5:
87:99:a4:b8:d5:60:60:b4:a7:51:70:97:19:d0:ac:cc:3f:0f:
f1:0b:b2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:55:59 2025 by rpki-client