Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
File: hVBZemBkyIKuKvP6V1nxP4vR3fw.mft (raw, json)
Hash identifier: FR+55nqakkOxEmECfRB7dnPJFqmIy5hB+lPvckqdZfU=
Subject key identifier: D2:DA:54:86:97:C4:C5:57:76:65:EF:08:73:EE:DA:0F:67:69:76:13
Authority key identifier: 85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
Certificate issuer: /CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Certificate serial: 0194BD17928778D003B742AD285EECFD2778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
Manifest number: 0E5F
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: Nnh8TxyMB33fgGngdO7IhueAOsU.roa (hash: R28y5tSNBK4A6wEp0RdvkAdrsGgoMExqmSzBUnD9C9E=)
2: hVBZemBkyIKuKvP6V1nxP4vR3fw.crl (hash: KJBJ3Uxhy6LEQUJu2SA+GxeRYKXJzVBSwWoOBcouR40=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:92:87:78:d0:03:b7:42:ad:28:5e:ec:fd:27:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=d2da548697c4c5577665ef0873eeda0f67697613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:84:fa:2f:cd:3b:fe:47:c3:1f:81:1e:b0:
58:d3:c7:b4:e0:0a:eb:f7:b4:33:c6:47:22:92:d2:
16:ac:da:f5:e0:ab:29:62:50:01:c6:55:53:ca:fb:
66:71:11:53:09:ab:b2:cb:7f:40:2f:fc:83:b7:ef:
f5:e3:39:39:d4:cd:1c:34:d0:f2:ff:2c:ce:1d:e7:
a4:15:f6:31:d9:72:b2:51:f5:b2:38:11:8d:aa:8b:
05:b3:2e:61:ec:b5:ec:fb:01:50:83:ab:db:b2:94:
6c:c6:6b:22:b0:3e:78:fd:da:8a:e3:b3:b7:a3:2c:
a7:50:bf:c0:27:81:f2:95:ef:6d:d1:5f:1e:cc:3f:
cc:29:0c:7e:29:90:ba:ac:a8:da:e0:70:7a:36:d9:
95:9d:0c:5e:69:a2:ff:90:48:a4:0a:de:b4:29:8a:
34:2b:72:de:13:8b:5a:1b:da:4e:0e:e2:9c:43:bb:
a3:24:32:c9:7b:63:ec:04:7e:9d:d8:48:e6:6b:fc:
3d:dd:26:6f:70:9e:c2:fa:78:c3:4b:45:35:ed:2e:
c6:53:71:c2:66:31:58:96:df:5e:bf:73:32:8b:52:
b5:4c:f8:09:4a:c9:9c:75:9e:19:61:b5:a8:3c:4f:
4d:23:4c:13:a3:a5:e5:8c:d6:74:95:6e:3d:8b:d7:
23:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DA:54:86:97:C4:C5:57:76:65:EF:08:73:EE:DA:0F:67:69:76:13
X509v3 Authority Key Identifier:
keyid:85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:85:39:ab:f7:62:33:67:10:4a:31:94:5b:c7:59:21:c4:4a:
35:5b:7e:ca:b3:93:3d:54:7d:39:87:e6:05:db:b4:d0:ca:1b:
c9:06:1c:69:cf:99:8c:fc:e4:f2:c7:62:4a:3b:25:e4:c3:df:
31:69:48:2b:20:2f:6a:50:0b:7f:9b:02:56:ab:99:9c:5a:a0:
d0:57:92:10:0f:07:48:7b:9f:9f:21:be:74:4c:f2:74:9e:da:
1f:e1:73:f9:67:1f:68:4c:d6:27:60:27:de:77:ce:8d:29:79:
4b:8e:7d:46:a5:36:d8:a5:19:03:8e:ec:84:88:2b:12:a1:64:
9d:b3:69:bb:ac:8f:4e:96:93:92:d8:7d:32:a5:7a:69:9b:f2:
c5:37:4b:f7:ce:5f:8b:76:d5:e1:8f:23:48:07:15:40:84:24:
3b:2a:4b:63:e4:d9:a9:59:df:64:c9:a6:e8:8a:3b:7a:30:9d:
1d:2c:9e:ca:cb:0b:4f:87:89:a6:61:cc:d2:a8:2e:87:26:55:
69:e1:ea:8a:95:b6:f8:e2:be:e4:c3:a6:5d:47:53:f6:b1:a9:
25:cf:dd:93:4b:a7:0a:37:37:36:0e:91:7b:cb:6c:33:03:6f:
7c:c2:62:02:55:2c:39:85:ff:19:c3:b2:12:2e:2a:ca:65:37:
37:e1:ca:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:38 2025 by rpki-client