Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
File: hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft (raw, json)
Hash identifier: dyuNLD77NV5SfCDqPhxOqscGZmtSihN/0XZpNOCu7ns=
Subject key identifier: 7B:57:74:EA:A1:21:6B:6F:EC:BD:86:30:30:F4:3E:01:2E:B0:CD:30
Authority key identifier: 84:6D:45:22:5C:F0:D4:FA:9C:65:AE:E8:88:61:D2:26:12:03:AD:00
Certificate issuer: /CN=846d45225cf0d4fa9c65aee88861d2261203ad00
Certificate serial: 0194BCAA0CC5EF20E9A9AACDE1142134BCDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
Manifest number: 0EC5
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: XLQfftOCYwZhCKWBFvPgcWtM3ng.roa (hash: e5IwRRubP2iih1RAenDvyf84x82YlIWC8mC3l2YoKV8=)
2: hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl (hash: oX8+YWlW7aBDwh7A9R2lePrBkREf3jCDCuaG8kvElkM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0c:c5:ef:20:e9:a9:aa:cd:e1:14:21:34:bc:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846d45225cf0d4fa9c65aee88861d2261203ad00
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=7b5774eaa1216b6fecbd863030f43e012eb0cd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:3f:52:87:b5:f4:77:78:fa:ad:0b:4e:cf:
2b:b9:fe:12:dc:b7:5f:8f:c4:33:5b:91:b8:5b:50:
e3:59:23:08:03:8d:52:22:32:d0:71:de:ac:1b:13:
e9:05:10:f9:db:99:66:7b:39:6a:5f:69:14:ca:da:
a5:14:c8:fd:b7:c1:c0:4f:ba:65:50:43:9d:2d:5e:
d9:12:de:40:f2:f1:ae:54:26:4a:b1:23:f9:e2:ea:
a6:ba:c2:9a:94:a1:6f:24:40:55:b5:91:bb:96:98:
5c:6c:da:04:16:b3:64:3e:f2:c1:b9:9e:d3:68:5f:
3e:c2:f9:c6:61:17:dc:38:9c:86:d6:96:ea:01:41:
32:4a:de:e8:dd:09:86:f0:16:f3:0a:51:df:b9:51:
d3:f0:2b:e6:be:01:d1:ae:00:87:fd:f3:1d:10:b6:
3a:b1:57:e7:dc:c9:84:3b:46:05:e8:8e:ae:1a:8c:
40:0d:a0:53:8d:af:28:97:0e:f2:e3:f3:72:dd:c7:
7b:6d:23:1f:3c:cb:44:df:37:22:43:70:35:21:83:
58:19:52:ee:b1:0c:a5:53:18:f1:98:4d:43:e0:c8:
5a:3d:96:77:ba:24:d7:d2:e0:a3:f7:f1:06:4d:16:
48:09:6b:87:7c:9b:fa:70:13:c5:e0:72:12:dc:50:
e4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:57:74:EA:A1:21:6B:6F:EC:BD:86:30:30:F4:3E:01:2E:B0:CD:30
X509v3 Authority Key Identifier:
keyid:84:6D:45:22:5C:F0:D4:FA:9C:65:AE:E8:88:61:D2:26:12:03:AD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:20:05:0b:7a:42:11:bc:95:6f:a6:40:4d:17:61:26:2d:49:
ac:19:eb:63:b0:0f:62:8b:27:46:b8:93:4d:e5:d5:27:be:68:
4f:91:1a:50:97:c6:2d:f2:ed:6c:c7:55:ae:c5:c5:2a:ae:ce:
3b:8e:38:71:e7:16:4e:85:2d:ae:a3:1c:31:93:d5:3b:b5:dc:
2d:53:d5:e9:f4:07:c2:4e:1d:16:05:05:9e:a0:03:b1:ac:0b:
e3:46:31:cc:7f:46:61:48:fa:7c:28:2b:cb:79:51:c4:e0:1c:
80:57:90:17:fd:82:7c:07:85:c2:23:86:b8:91:ad:33:ab:28:
b7:48:aa:91:71:50:93:13:34:d0:df:ed:d4:98:49:c8:85:f1:
79:4d:c2:44:30:da:e1:6d:21:78:a6:2f:63:87:6f:0b:2f:ce:
35:4f:18:ef:16:ea:0e:c5:99:8e:80:21:fd:10:97:8f:a3:98:
20:b1:da:b8:d9:3f:08:55:62:2f:86:29:fb:92:94:e5:7f:76:
ed:12:14:af:6f:51:30:9e:14:41:39:fd:8c:ed:5e:06:47:92:
e5:ed:47:12:ed:83:0b:ad:79:c2:41:b3:d0:62:ad:fb:a2:13:
f8:11:e9:d4:dd:f0:0d:75:00:5b:06:d5:02:ec:43:de:f1:a8:
77:f4:ed:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:12:02 2025 by rpki-client