Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
File: hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json)
Hash identifier: iZmE99QA2As7kvMRDayVKVc2b6ZOUeUSNG8V8pNA/pQ=
Subject key identifier: 2B:82:77:EA:0D:07:41:D7:B9:E3:23:74:9C:7B:9C:D7:3B:E1:E6:B5
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial: 0194BC04E0C4430DDDB88E794551A7CB1E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
Manifest number: 0318
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: tfnKSH03k2o0TPxPopbY74k15M+HTWfoJJVt+jrodSE=)
2: kbsmCVo1MuAxbWK2Mk_FNqJ4o-Q.roa (hash: FxGgyIXbAaHbajTUZb5rQl/upi6b8yc9JYqmBZ7HbLE=)
3: mCquFh2XBWkg-YOpmNb3-W_LQ_o.roa (hash: 6gQDaDFUWcD/jv1rl9eJBOecJII0xNwqHgOM59i+hCw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e0:c4:43:0d:dd:b8:8e:79:45:51:a7:cb:1e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=2b8277ea0d0741d7b9e323749c7b9cd73be1e6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cd:47:d4:c5:62:97:21:27:ba:7c:9a:9a:97:
40:ea:bf:64:b8:f1:c9:26:fc:d5:39:ff:31:cf:eb:
11:db:3d:0f:0c:1f:95:b4:70:9c:88:c5:bb:f6:2a:
67:2a:ea:46:76:85:55:6a:12:81:b3:09:15:15:7b:
a1:d6:11:b6:32:c4:5a:88:f3:81:9c:19:24:60:e2:
2c:8a:9b:46:02:45:f3:e7:ed:dd:be:d5:d4:23:53:
f8:b7:b3:3a:3c:e5:0e:39:9a:e6:af:a4:53:a1:a2:
f8:eb:8a:19:8c:19:0c:ec:73:fb:31:7c:33:8b:af:
57:bb:8a:c4:a2:c9:be:1d:a5:f7:18:a4:90:b2:38:
81:cc:e5:af:f9:a5:54:42:0d:d8:2a:02:68:f9:17:
40:98:45:3d:73:2c:e7:89:7a:f3:3b:ca:ba:27:91:
4b:85:4a:fe:59:88:86:c3:17:d3:60:fa:51:72:62:
4a:cb:86:ed:8b:5a:df:e8:c0:8a:71:d1:f2:b2:24:
33:bc:6d:37:f8:82:c5:89:4d:de:fe:cb:b4:08:19:
78:c5:6f:6d:03:c8:a9:99:97:e5:28:22:00:a4:24:
35:88:f6:52:d8:fd:8a:83:17:0c:9f:00:26:18:3d:
e0:81:d0:e7:42:cd:e2:28:d2:90:6d:00:17:3c:45:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:82:77:EA:0D:07:41:D7:B9:E3:23:74:9C:7B:9C:D7:3B:E1:E6:B5
X509v3 Authority Key Identifier:
keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:20:41:a9:da:70:87:30:c3:51:64:2e:18:1a:7b:f4:a9:79:
be:e4:49:34:c9:6e:01:74:e5:8f:08:a8:1f:0e:5e:6c:99:d1:
f2:4d:07:ef:88:6e:50:93:a6:f3:23:4b:df:20:4a:41:cc:c5:
97:1e:a3:bd:d5:4b:a3:06:90:28:05:cc:fa:27:2e:4b:b4:6c:
70:1f:4c:15:ea:d4:95:1f:b0:64:db:cd:73:ba:1b:9f:b5:a9:
0e:c7:51:79:0f:83:e9:b8:72:94:8f:f9:57:e3:01:68:09:85:
18:e2:45:ff:a9:a4:0b:92:93:7b:c5:26:24:37:9c:8a:af:42:
e0:3c:cc:75:61:dd:ff:b5:5b:e3:c2:14:38:44:12:ef:75:74:
06:b7:ba:4b:4c:05:6a:2e:e8:00:c9:2a:60:67:e9:6f:33:31:
d7:6c:05:ae:3d:7b:a7:0b:a0:8f:65:52:5d:e5:76:9d:19:2d:
8a:0a:1f:4d:9a:60:8d:fa:69:96:d2:21:3a:af:d8:5b:c0:ca:
9c:63:0c:df:ee:8c:37:ac:6c:55:69:fe:96:a3:c3:06:f7:69:
7d:7f:72:e8:d0:a5:76:3e:e4:01:c7:56:7d:a5:4c:e6:ba:52:
38:a7:b1:35:6c:bd:18:83:aa:fe:9a:92:a4:79:b6:73:b1:41:
6d:9c:67:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:08 2025 by rpki-client