Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
File: haz7mtOlDOFTMc_066iLzAe3ooI.mft (raw, json)
Hash identifier: 5RzgELuysT4j3PVpN6c0TcgbVE7qaQ5IvmYJmEaov44=
Subject key identifier: A1:47:85:E1:4D:57:D2:4E:BF:22:D9:F3:1D:FA:05:C6:70:91:CF:2F
Authority key identifier: 85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
Certificate issuer: /CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Certificate serial: 0194BC72EFAEAC2091AE4A6D724EAC9B1008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
Manifest number: 03AD
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: GNR7fo6zYUZ0aZ61h9x_BF8llVA.roa (hash: CFopZ6dmtVSvrmIdzz/ovM49rlPrGJS+jY6gLGQSqVo=)
2: haz7mtOlDOFTMc_066iLzAe3ooI.crl (hash: aBjwWZcifEljIQWpMOUzR4rrPMTxRgI3E/rfLWK9Grc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ef:ae:ac:20:91:ae:4a:6d:72:4e:ac:9b:10:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=a14785e14d57d24ebf22d9f31dfa05c67091cf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:64:7e:04:f9:9f:01:fa:bc:71:0c:b5:3f:
d6:ac:16:c7:0b:e1:f7:04:b2:8b:00:f4:d5:bb:7d:
98:33:d1:e4:60:74:f4:98:e5:c2:f7:82:e5:f4:e3:
bf:f3:e1:3f:59:7b:5e:08:60:fa:12:56:7e:8d:8f:
5f:e0:ce:c7:18:f0:de:41:7a:12:40:9f:88:71:f2:
93:2b:cf:6a:2e:97:69:6c:20:52:bf:12:0e:d5:4d:
54:07:1f:a1:6f:d0:05:90:ff:4f:62:e7:97:8e:0a:
c8:c8:e5:5c:57:44:67:75:40:de:3e:bd:79:17:d2:
8e:66:50:4b:f4:60:c8:c1:a4:ed:5f:1a:8a:f5:c0:
91:d6:56:b2:41:85:61:5c:8a:f2:a8:21:1e:cc:61:
be:07:97:42:33:a2:6b:bc:fc:21:09:43:f9:a7:ba:
f4:0f:ed:64:58:f1:c4:5d:ce:44:75:df:94:6d:25:
10:71:af:55:c4:e2:31:cc:4a:4a:cf:7e:87:b9:ca:
8d:05:17:ac:87:73:0c:12:d3:ff:6b:bc:78:d1:76:
e5:d0:e3:d6:b2:7c:54:da:79:b4:2b:84:e7:ea:05:
ad:ab:79:21:66:91:53:f5:50:98:bf:9d:1b:f2:62:
6d:4c:f3:0e:f4:2d:c0:84:dd:ca:72:54:29:3c:a2:
92:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:47:85:E1:4D:57:D2:4E:BF:22:D9:F3:1D:FA:05:C6:70:91:CF:2F
X509v3 Authority Key Identifier:
keyid:85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fd:89:b1:75:b6:6f:be:3f:89:71:2d:c7:4d:fb:55:41:58:
2e:e5:01:10:11:e1:d3:58:93:a7:92:9e:cb:5a:c0:c9:06:53:
14:37:63:a9:0a:0f:26:54:9a:a2:60:ff:26:db:c0:1c:c4:b3:
44:13:56:2f:c7:30:6f:6f:d5:95:47:ac:b0:8f:27:c0:fb:21:
15:62:40:dc:d4:f9:9c:21:27:61:b9:bf:e2:53:32:06:db:9e:
10:38:7f:b8:92:bc:97:fd:2c:2c:e2:0e:fa:b5:f2:a2:7b:1a:
06:8e:6e:23:f8:76:cd:5d:32:a5:92:c7:19:41:b7:45:5b:8e:
e1:06:30:64:85:c0:f6:1c:05:93:0a:f3:89:81:57:b6:45:a8:
40:7c:64:f1:cd:75:1f:5f:40:8d:fc:41:3c:b9:75:7e:1a:40:
c2:af:b4:c4:75:bf:c5:5d:2e:16:ce:4e:2b:dc:c5:8f:b4:a7:
fe:f4:e7:40:12:26:9b:28:4d:d3:dc:e7:c5:60:97:1c:8d:e0:
d6:5b:b7:b2:66:53:1b:44:25:62:69:0d:57:93:2d:a4:87:ce:
fb:12:d3:21:29:e2:8f:1d:51:2d:6d:c0:38:03:3a:f8:cd:07:
18:6f:7a:97:69:0b:4b:84:c2:8d:9e:69:9a:38:f4:d7:02:e7:
15:d8:f9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:35 2025 by rpki-client