Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
File: hAfwBj7przHYfP5lubwZPrQsiWk.mft (raw, json)
Hash identifier: cpHI9Av8ZWQt2UxfTxEGXTZG40b5qwLmp3bppIIOE44=
Subject key identifier: D7:B7:3B:2E:21:E6:29:0D:2D:29:0D:37:AE:1C:09:C3:D7:03:85:62
Authority key identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
Certificate issuer: /CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Certificate serial: 0194BC3C9311B44AC7DB0D3FB5EE2054B36E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
Manifest number: 048E
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: Z7UyGu5eAyy6eE2IZXWBPwAGCsY.roa (hash: 69ViYIsd0St7iG615BWi/I8unIJ08lLoNoGfAWMd13A=)
2: hAfwBj7przHYfP5lubwZPrQsiWk.crl (hash: fNVJ/bfhaBJ4MGXP0W3lUL3s/w0eqkhUQ1rGBaeEwUM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:93:11:b4:4a:c7:db:0d:3f:b5:ee:20:54:b3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=d7b73b2e21e6290d2d290d37ae1c09c3d7038562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:25:2c:5c:89:89:0b:88:1f:c3:41:c8:95:
61:94:93:68:f3:e0:36:86:e0:4c:ca:24:70:77:28:
46:8b:83:f5:e1:ff:61:28:25:7c:34:e6:84:54:e1:
94:ce:a5:a9:2a:2c:d6:c9:7f:8c:8b:bb:e4:b4:32:
0d:70:4e:54:04:d2:aa:aa:a3:aa:14:08:b7:30:d3:
90:af:8d:58:c8:a4:fe:88:68:d7:3c:84:cc:60:b1:
b2:78:18:a1:b5:c8:e6:74:d9:c9:48:05:d4:fb:21:
d6:a6:77:22:58:d4:46:b7:ca:a5:7a:ad:ce:73:c4:
c8:25:49:77:ba:a7:0d:24:b7:ac:fe:7e:e3:71:fd:
de:30:ee:93:96:a2:44:8a:81:e2:de:74:2d:05:65:
73:e0:48:d5:5b:0b:bf:c2:b4:be:d2:ec:37:a5:8c:
31:12:0a:e4:91:fb:5f:61:05:d3:f0:57:79:cd:be:
d2:9a:de:0a:3b:b8:b9:f9:4e:8f:ab:15:4a:46:ae:
d3:e4:e6:b1:86:f0:dd:84:ef:f9:35:f5:82:82:e2:
ec:c8:04:65:ef:d2:f7:20:0c:3f:d6:19:0a:d0:ca:
10:56:ae:33:4b:f2:ee:07:2d:70:9d:39:1e:85:bd:
23:75:b3:4c:72:eb:ab:b9:64:e8:c6:3f:e3:cd:fe:
c4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B7:3B:2E:21:E6:29:0D:2D:29:0D:37:AE:1C:09:C3:D7:03:85:62
X509v3 Authority Key Identifier:
keyid:84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8a:ba:2a:2d:26:9a:38:a3:57:3c:5e:fc:3a:a6:da:56:12:
17:92:dd:4c:a8:84:c4:8c:bf:73:b6:96:61:43:7b:b9:bc:bd:
69:ef:d6:8a:cc:9c:af:b4:46:42:17:68:70:ca:3a:ea:5e:e6:
24:c3:6c:8c:c0:fe:84:5b:fd:68:ae:0b:38:82:7c:e4:44:52:
9b:bd:d0:a4:e0:b8:c4:6f:a9:cd:0f:6f:31:19:c8:34:54:3b:
b2:a2:58:57:8c:f3:40:70:f4:c1:67:a6:2f:65:bf:e3:65:76:
3e:4a:86:83:75:e5:cb:96:c1:b8:c4:b5:0c:9d:15:42:59:e4:
b1:d9:b0:84:58:ff:57:40:7a:ae:c0:ed:92:47:7b:2c:8a:ea:
2f:8d:28:eb:92:c0:63:0c:3e:5d:c4:3e:04:bb:f9:03:a0:c4:
b7:1f:41:1c:96:1b:bc:fe:16:1e:48:32:f1:cd:87:0c:d7:8a:
98:c4:85:6e:80:6e:f2:d1:50:86:6a:4e:55:e3:22:86:24:e1:
08:4e:05:db:7b:98:a1:21:58:e2:6a:f1:1e:ff:d6:95:10:10:
3d:04:24:90:56:34:e7:20:b5:eb:c0:db:6e:17:fc:01:61:7b:
48:f4:17:7f:56:8f:f3:ec:12:ac:79:88:84:b8:c9:7a:65:cc:
ca:1b:f3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:05 2025 by rpki-client