Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
File: hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json)
Hash identifier: V1Y2tXgOxJ1N2iVQtiyXj5/HaXjhFbTGW8k1G1yQG3M=
Subject key identifier: 1F:82:2E:35:78:70:83:4A:FA:B4:C7:10:B1:C1:02:A2:B1:C3:71:B3
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 0194BCAA322EAD6E2FF229CA19705A2AF08C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
Manifest number: 0D33
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: 1-TKHNCKbZE8g4XJcuPLU9wUNwXw.roa (hash: 4YE3N5IWvrJIb1gbK5UKUvbBqNqAEHWjC5reIu6mjb8=)
2: YfG3Zer9S1-dTwVZ058bt2jGz7A.roa (hash: 2aerzGz5WDeQmLCPvnO2oE90pi2KsboywKSSiTQQgEI=)
3: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: dZVPOGTyDsUe3fCIVrVn0JXKWDRGt/RBCqEmKHa8JeA=)
4: iN7xHgqgCrIJFX6hLw-Ge7Hn-p4.roa (hash: nxC4Dpo2LONMiZkoxUE10UGnNhhL4MV2Fcdpdexp7sE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:32:2e:ad:6e:2f:f2:29:ca:19:70:5a:2a:f0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=1f822e357870834afab4c710b1c102a2b1c371b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:f5:b6:e3:d5:05:0c:8a:da:be:97:50:9d:
0d:71:1c:da:c1:c1:ef:11:ad:4d:42:45:55:a5:4e:
cd:a4:e9:f8:11:56:e4:cf:78:49:f8:03:5b:04:dd:
05:94:b0:d0:e0:d8:bd:3c:fd:c9:88:fc:38:1e:53:
c8:1a:6e:ee:e2:92:5e:5c:7a:0d:5a:b8:91:0d:d8:
b0:72:a4:0f:df:9f:90:8b:6f:9a:ec:4b:f5:67:1f:
fc:73:21:77:16:3a:89:91:c7:77:f3:4e:76:4e:c3:
42:f5:eb:d7:ab:e1:02:ad:87:7e:ff:3f:90:c3:5f:
56:5f:1e:a3:ee:c8:78:cd:5d:18:93:04:41:2d:37:
47:32:cb:9a:3d:7b:cb:a0:47:1e:04:4e:54:11:84:
7f:7c:27:f4:4b:6e:56:4e:1b:ea:07:b7:16:3f:a9:
2c:4a:61:b0:ad:7f:85:30:08:81:0d:0f:0f:50:77:
f6:5e:00:26:2e:de:94:f7:20:74:9f:be:c7:24:4c:
36:ed:f0:43:cd:62:d2:fb:bf:6a:c7:92:39:0e:46:
ce:02:27:54:62:11:91:ee:e6:ca:61:61:9d:c5:b3:
f4:a0:6a:04:e4:c2:bb:0b:47:10:b4:a9:0a:cb:cc:
bc:02:f8:82:c9:9d:7d:19:fa:57:ab:40:b6:63:61:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:82:2E:35:78:70:83:4A:FA:B4:C7:10:B1:C1:02:A2:B1:C3:71:B3
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f7:01:c4:11:b5:d6:86:9b:5b:ee:92:6a:ec:db:87:07:a6:
32:90:51:31:9f:d8:e1:1a:a9:04:b3:30:51:ce:d9:ff:14:96:
60:eb:cc:df:5c:6e:c6:b0:fe:1d:bd:2d:17:ec:32:d2:de:b7:
16:e2:61:02:55:e9:16:05:39:ae:87:d3:f6:e9:09:20:29:48:
f0:6d:69:0a:3b:db:51:d2:d1:af:fc:bf:e5:f0:e4:79:9c:e1:
fb:a5:80:ed:bf:b3:1a:46:81:2c:38:66:91:6e:6b:d6:26:40:
8f:8b:61:8b:77:d0:9e:14:a8:19:c9:30:68:dc:eb:9b:ce:64:
42:73:b7:08:1a:4d:1b:1e:78:ef:47:86:b3:1a:d2:ef:91:f3:
91:dd:40:da:fa:8a:c2:7f:76:7a:47:ba:99:22:4d:64:9c:59:
e0:a5:88:05:ba:f6:c3:94:38:c7:9f:99:6a:d2:05:53:bf:a4:
fd:0a:f6:28:b0:5c:bc:65:78:79:7d:9b:06:bd:8c:ac:a6:07:
8d:c4:7b:40:a9:b6:8b:be:3b:01:a3:0b:83:cc:25:09:98:16:
51:8b:47:ce:62:9f:d0:ce:db:37:ce:fd:92:9d:be:9a:c7:da:
0d:06:6b:4f:23:18:00:5b:20:be:f2:7c:be:c3:12:61:1a:39:
10:78:8d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:23 2025 by rpki-client