Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
File: hXLVrMJRZ2mcf886G4BOoyWsTl0.mft (raw, json)
Hash identifier: KuGMQWJxC4wzXMewiOT3mItAj7uyMBJEQJsjQ5CufJw=
Subject key identifier: 2A:EE:CF:93:FA:5F:5A:BC:E1:D2:13:49:46:ED:0C:30:90:9E:CE:2F
Authority key identifier: 85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
Certificate issuer: /CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Certificate serial: 0194BD855FDD413D4B3C47D19A3B50233BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
Manifest number: 135A
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: E_g8JEJGx2RzSEjGgXwsnLzhYuY.roa (hash: 1/I3aoM+yKdAzYPZU70IJvPWqKBQF4IK2mBQQ0GVymw=)
2: hXLVrMJRZ2mcf886G4BOoyWsTl0.crl (hash: a7ZcrPB5m8Mm1rn01ABz6pO7GKr4DQN8G9KCJRWOlvY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5f:dd:41:3d:4b:3c:47:d1:9a:3b:50:23:3b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=2aeecf93fa5f5abce1d2134946ed0c30909ece2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c6:e4:bf:f8:b8:b3:63:a4:c3:70:19:4d:d3:
10:d6:de:14:9f:62:82:a9:4a:42:70:4e:54:64:c3:
de:75:10:55:a2:56:7e:53:62:d8:c4:db:e6:93:99:
ce:51:25:77:e4:9d:cf:73:b5:01:9c:89:ca:39:bc:
cf:68:d7:b9:20:47:73:d4:60:a4:b7:9d:4b:83:d7:
25:9e:f2:bb:73:4f:06:92:53:67:81:28:41:55:32:
65:9c:09:f3:ce:ce:1c:c6:8e:6e:ca:92:a7:5f:d5:
11:2d:d7:2a:d1:be:01:b5:31:71:7d:3e:db:54:ea:
84:e4:52:6d:e2:f2:a2:87:f4:2e:11:c0:8d:88:f1:
c2:c1:88:b4:d7:8c:f7:04:3d:d8:41:1c:cf:fa:9f:
6a:20:1c:a8:e3:d0:36:48:b4:33:06:8c:73:89:bf:
0b:b0:d0:36:d5:d7:6b:de:ca:22:78:c5:21:1b:d1:
1a:7e:9a:4d:84:43:86:65:a5:4d:e1:42:ce:02:f6:
82:6d:e3:2e:56:87:87:96:19:5b:ef:e0:de:da:f8:
79:1b:c2:87:0a:77:2f:c7:a7:ae:62:fc:d1:45:f7:
5e:1e:bb:ea:9c:4c:18:1c:49:4e:13:39:1b:a8:fb:
bd:2a:a0:fd:af:e7:65:22:d2:11:8d:34:2e:c0:67:
b2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EE:CF:93:FA:5F:5A:BC:E1:D2:13:49:46:ED:0C:30:90:9E:CE:2F
X509v3 Authority Key Identifier:
keyid:85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4c:db:bc:6e:d3:c3:3e:35:4b:57:85:10:86:77:b5:02:0a:
43:a8:d7:08:fb:6c:cb:8a:27:c7:a6:18:9c:65:75:06:83:3f:
48:81:0a:60:47:c9:17:77:2c:5b:11:88:b0:bb:c1:a5:6a:35:
de:66:13:78:84:01:69:ba:79:fb:d1:dd:09:69:1b:53:47:bb:
4a:ec:f1:d1:cf:4f:c3:ab:26:36:da:44:88:9b:d9:90:53:4c:
07:6c:a6:f2:5f:f1:18:b7:8f:ba:74:d3:7d:ac:48:97:d9:cf:
19:3c:b6:9e:ff:86:e7:33:6f:18:c8:57:4d:93:61:ce:a9:a6:
a0:d9:7b:10:1c:9a:4c:08:3e:8e:f8:98:7c:9c:65:93:8a:18:
19:57:63:e2:01:a0:a3:91:ff:ab:1d:47:c0:84:34:7a:5f:d7:
11:e5:63:9b:99:ea:05:c8:00:9d:8e:9c:01:d5:b9:fe:20:7c:
b2:e3:21:ef:07:17:58:20:86:c8:ca:81:24:57:99:18:65:0e:
34:49:c9:d5:44:97:41:7f:c3:2a:e1:3c:5b:db:7b:ac:18:7c:
64:07:5f:f2:c9:a3:bc:3e:cf:1d:bf:62:08:d2:ce:8e:24:bd:
21:33:79:a4:92:49:f8:d7:5f:70:13:f2:20:f9:47:0d:01:d5:
8a:dc:0d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:30 2025 by rpki-client