Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
File: hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft (raw, json)
Hash identifier: sRhrqxqgQa09oph3mrPba6sjF6jNBZuBdzzM4ps9rgo=
Subject key identifier: 60:64:2F:13:E7:81:EF:AA:21:87:76:73:7C:0A:9F:B3:E9:B6:8E:2A
Authority key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
Certificate issuer: /CN=8466a5dde27f911da8be73c261ff55b5881198a9
Certificate serial: 0194BD853C11575F15CF2B1275D247629B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: P7kra4ub5VF3YEJjz3ym8CwbAXA.roa (hash: AJEYR0xnzVy6utllNh8R4LIoanjGY6stnMXm+hMmUEo=)
2: hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl (hash: jUkauKkqYgJr7atzjGnfjfT+TdEZEsbjLjCCgWbiWNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3c:11:57:5f:15:cf:2b:12:75:d2:47:62:9b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466a5dde27f911da8be73c261ff55b5881198a9
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=60642f13e781efaa218776737c0a9fb3e9b68e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1e:f7:63:bd:42:db:33:11:6d:ce:95:70:10:
93:cd:ba:7a:df:68:28:2c:b0:5f:ed:79:0c:0e:56:
ef:a9:1e:4d:00:a8:95:02:fe:d3:b5:9e:50:ae:8e:
f6:b0:cd:be:d4:af:91:d6:b9:55:9f:64:d6:17:66:
64:a6:ed:65:c6:33:75:68:11:91:09:86:c3:3f:9c:
d3:d9:28:7e:b8:8f:a3:1f:0b:43:7d:06:cb:69:e1:
19:ce:a6:7a:91:52:ec:1e:9e:ac:40:d7:52:e2:05:
a4:9d:03:38:9c:99:2a:a7:02:1d:b8:69:67:07:6d:
ce:cb:69:91:33:55:c8:e3:45:75:de:6f:37:b2:91:
39:35:2e:4c:02:1a:a3:41:37:8e:2a:1e:f6:0f:4e:
8a:94:94:25:a7:f4:93:a3:a9:ca:93:95:ab:dc:60:
85:39:e7:30:a7:61:e9:89:ab:a0:1d:c2:26:88:15:
74:d1:eb:58:46:d4:86:10:88:df:da:b3:81:ca:39:
5a:69:1d:96:f2:2d:9a:57:4b:79:d7:53:50:1d:bd:
20:41:a0:b5:51:fd:20:bf:39:0b:a0:1d:f4:89:98:
b6:c0:0a:ad:cb:cd:ca:95:10:9b:21:b2:bc:66:34:
cc:1f:35:93:f6:c2:ff:cb:b5:0c:47:af:39:3c:31:
09:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:64:2F:13:E7:81:EF:AA:21:87:76:73:7C:0A:9F:B3:E9:B6:8E:2A
X509v3 Authority Key Identifier:
keyid:84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0f:4e:e3:05:fa:9c:63:94:5b:f2:c5:de:b7:62:d5:5a:6f:
f6:66:30:55:53:dd:56:82:f7:58:dd:ca:8e:bd:d8:29:07:d2:
57:4b:ed:8b:3d:10:10:42:47:ce:32:fb:f3:53:0e:04:b5:36:
20:b5:1d:8e:60:68:19:97:4b:ef:61:7c:6e:ec:6a:9e:07:24:
df:81:85:a6:96:70:3a:30:9a:d0:2b:e3:73:47:5f:60:16:18:
e7:de:a2:6d:6b:9f:73:23:3d:ec:3e:30:b9:df:bd:9a:46:99:
1d:31:0a:46:2d:5b:51:1a:95:7d:f2:0f:67:23:8f:e3:2d:b7:
d1:15:71:8b:20:7b:58:95:2c:70:68:4c:d6:63:5d:cc:8d:13:
db:01:4b:9a:0e:36:48:c1:d5:fe:85:56:2c:78:c6:07:1c:40:
0a:c3:aa:7d:f7:e5:aa:31:20:55:ae:3a:82:97:de:eb:ce:b7:
94:60:58:a2:d2:eb:0a:3e:64:b3:b3:bc:fb:fd:62:f8:a9:ad:
9a:01:08:45:3f:fa:e8:05:c8:8e:90:38:42:b6:ca:93:0b:b7:
7b:45:0b:2e:9c:88:bf:df:da:1c:a0:b1:c9:5a:61:bd:44:eb:
06:26:4a:e1:ab:d2:25:31:6c:8a:74:e4:6c:de:1f:3b:79:2b:
3d:22:1a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:06 2025 by rpki-client