Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
File: hBhM6RkCNkC7klbC2NGgSfoQJSA.mft (raw, json)
Hash identifier: 2Y2Vv6GMMVkvfPJo8XmgqoqtE7MhZMXmwzEJOrhg2q4=
Subject key identifier: 57:D0:20:BC:CE:48:55:DE:18:C3:B2:5C:6C:99:E3:16:A1:96:06:C4
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial: 0194BCE063B3A8C7F1A7D180528AAD0D10C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:09 +0000
Manifest this update: Fri 31 Jan 2025 15:00:09 +0000
Manifest next update: Sat 01 Feb 2025 15:00:09 +0000
Files and hashes: 1: HyOxfsfCg8-tkufuXac7nvkK01o.roa (hash: L5Ny6HNe08uh+c2YqS2y8m1kghjhUwTxv7PPQGLCeAk=)
2: Za1vvPAEMQLX9tFDLmhPbJ3BBlk.roa (hash: ny9mwL29fdAvRnLi4zBGCZuIouNHHSaZbEkA3+/PrUQ=)
3: hBhM6RkCNkC7klbC2NGgSfoQJSA.crl (hash: IAzjBrCZcDemnlc6REQoUeaeB2cBk7DIFS3UqHGkhqw=)
4: pQKQijoa8QLl8H3UvggEgIJH4JI.roa (hash: JjHJzDNM1I3FEnY1/wJ+QeN9KOwj+3VjvvY6xPkS+9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:63:b3:a8:c7:f1:a7:d1:80:52:8a:ad:0d:10:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
Validity
Not Before: Jan 31 15:00:09 2025 GMT
Not After : Feb 1 15:00:09 2025 GMT
Subject: CN=57d020bcce4855de18c3b25c6c99e316a19606c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5c:2f:f0:e8:da:3e:f8:f5:2d:98:e5:4a:df:
3c:6e:6d:75:c6:63:26:e2:1a:9b:f4:cd:ed:d6:d3:
22:a6:78:ea:7d:bf:86:e3:46:e2:c5:d2:ef:a1:82:
38:43:37:b3:9a:d7:6a:4f:88:9f:9e:3f:89:52:0b:
73:17:a6:e2:49:0c:e1:17:8c:fa:e7:5f:be:0f:47:
e8:1a:90:7d:30:0f:5d:cb:6b:26:49:ec:fa:d6:2d:
06:b1:fc:66:62:66:5a:66:02:16:81:c9:e5:9f:37:
de:a1:bf:ca:45:63:bc:a0:94:15:3f:23:92:c8:92:
5d:1c:c8:8c:e9:cb:f1:79:8e:a7:8b:36:f0:d7:dc:
35:09:10:c5:bf:30:94:ef:92:c4:68:86:0c:cf:ef:
b3:0d:7a:a6:43:1b:0c:46:33:6d:ac:01:5f:a7:cf:
04:88:69:00:bf:80:fe:5a:08:3d:7e:05:a4:23:27:
4c:76:47:21:e5:ab:4e:b6:51:32:f0:9a:13:4b:9b:
a2:f3:f2:f5:53:17:b6:68:40:cd:bd:41:87:a0:09:
ba:cd:cb:4f:61:45:63:3b:2c:92:19:8d:e5:3f:2e:
8b:f8:14:05:4c:9b:cc:7b:88:05:34:cf:0b:8d:db:
9a:f2:44:ba:7a:0f:d2:69:0c:39:39:f8:8b:53:a7:
83:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D0:20:BC:CE:48:55:DE:18:C3:B2:5C:6C:99:E3:16:A1:96:06:C4
X509v3 Authority Key Identifier:
keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:81:a7:90:8f:e9:a4:d6:b6:a0:f3:1d:f2:45:21:22:d7:ed:
c4:27:d7:3f:fb:26:18:99:cc:50:dc:fd:e3:0b:e3:0a:1b:43:
7d:0d:d0:74:ef:80:81:e2:16:bd:fc:10:e4:f6:00:9e:57:dc:
d5:cd:5f:b7:40:a5:e6:d3:f5:c2:72:ce:44:8c:58:0f:f7:32:
41:c3:96:aa:eb:ca:2f:82:48:59:52:91:e5:42:f8:6f:2a:31:
ca:09:29:18:7f:b5:42:ba:b3:42:66:d9:77:9b:84:67:4a:1a:
02:a0:8e:ee:47:59:f5:04:02:65:76:e8:e6:6a:dd:1a:5a:5f:
a1:7d:90:13:1d:2b:9a:2e:eb:ad:e3:53:58:29:0b:c2:16:ba:
1b:06:d1:5c:d5:df:04:03:a0:d2:0a:d3:fd:7d:14:ec:66:64:
d9:80:69:27:75:d3:f7:09:1f:c3:ff:32:69:96:88:30:d6:21:
c6:69:e9:23:0f:96:9c:b0:84:ec:ab:57:b7:9b:1b:cf:04:73:
3a:98:33:ba:10:69:28:90:48:f2:ec:fa:5d:55:10:12:d9:ff:
c4:f5:c9:98:44:38:17:55:ba:79:50:8b:53:83:f3:d1:8b:4f:
5f:fd:a6:e3:90:9c:95:89:37:f7:07:9a:d2:71:25:aa:8f:e0:
e1:0b:ce:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:50 2025 by rpki-client