Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier: w9ttGYMMSCKAXnf3uSk7JVAgsgymqfGF8p1yO1Yk4UY=
Subject key identifier: AD:58:DB:E4:D2:08:82:8E:3E:E9:CF:9D:9A:AB:42:34:38:F9:7D:DE
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 0195E0463745DDE908272FFA3FE84F4D3901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number: 0A38
Signing time: Sat 29 Mar 2025 05:00:52 +0000
Manifest this update: Sat 29 Mar 2025 05:00:52 +0000
Manifest next update: Sun 30 Mar 2025 05:00:52 +0000
Files and hashes: 1: KNngLPUEeJfGeGvW_sjNLwrjlmo.roa (hash: VdgpRYVhUpsamPtzdnV+HbncE6iEYGQS6JyumMp2yn8=)
2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: 2FAhE3RF0MfAkf0uSLymBV4qScHdP8NYfN7Psl2XN+A=)
3: XrZ7_VYsTjVO1Hdr6lTXBYRHdDM.roa (hash: /HTMnGOuDTUdEjSKAx29mQcK6o1vmtlFHqUYC092xGg=)
4: aJuKlK4Eyd-5-SWqzCamWBjJAOA.roa (hash: JqxrD9CIJNSFvb9h8lx5ybgaqxfxBBfuz3mHyoez/iE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:37:45:dd:e9:08:27:2f:fa:3f:e8:4f:4d:39:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Mar 29 05:00:52 2025 GMT
Not After : Mar 30 05:00:52 2025 GMT
Subject: CN=ad58dbe4d208828e3ee9cf9d9aab423438f97dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5d:87:5e:75:30:49:91:e7:64:c7:33:2e:60:
67:77:37:af:7e:3c:95:06:2e:25:3d:de:89:b5:40:
ee:4f:e5:3c:1e:33:41:a4:12:48:90:7e:35:d8:27:
8a:71:9b:0f:af:d7:7d:56:32:7d:1c:42:38:ca:db:
13:ea:65:82:55:be:f2:60:4e:21:27:6c:20:73:fc:
24:70:59:ec:36:3b:5d:ff:28:6c:4f:77:93:13:53:
0b:78:8d:ae:6e:ff:fe:36:c9:fd:76:bb:f2:a4:78:
84:cc:27:5a:22:49:35:99:f1:35:ce:4a:c6:74:e5:
6e:eb:07:2e:55:83:dd:7e:9d:36:89:33:d7:52:b1:
2d:ca:5f:32:af:c2:4e:4d:b5:6c:f5:db:fe:ae:16:
77:74:3c:66:5f:ca:88:92:aa:40:8a:77:7c:28:1e:
e6:b9:90:ce:82:a1:fc:19:ad:df:57:af:e5:31:cf:
b7:5d:ab:1b:ae:e2:f8:17:59:eb:76:49:79:b6:5a:
94:a0:33:90:4e:6b:29:58:85:2a:f3:5b:bc:46:10:
ab:e5:d2:22:34:1f:ad:16:fb:58:68:d0:f5:be:88:
ec:65:4c:f9:65:d6:f6:94:4c:fc:34:d0:a9:4c:2b:
79:90:46:9c:4c:74:14:94:45:21:1e:2f:64:bd:ec:
9e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:58:DB:E4:D2:08:82:8E:3E:E9:CF:9D:9A:AB:42:34:38:F9:7D:DE
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3e:f6:d8:01:a7:20:07:4e:3d:e0:47:00:62:75:db:4f:3a:
1e:28:03:b3:5a:15:d9:5c:f2:3f:ac:7f:3b:3c:43:cf:b6:1e:
a8:6f:28:61:67:b9:78:89:0d:e3:9d:a9:2d:58:6e:9e:94:ac:
f2:09:43:a2:95:5d:a7:b5:70:c5:78:29:99:41:6d:1c:69:6f:
91:34:cf:37:df:c8:b4:dc:b3:23:79:95:46:18:85:41:be:38:
ec:22:35:c8:64:35:47:b4:6a:e5:ff:e5:49:3e:b3:b7:5f:c6:
a7:2c:0c:77:a3:9b:ff:cc:74:4a:91:0b:b0:bb:6f:aa:51:b2:
9f:0b:da:1d:1f:27:c6:b1:91:88:f3:5e:93:94:35:67:2e:fd:
ea:36:c9:86:ea:d3:3b:0f:c7:7f:10:3e:02:85:2e:40:cf:cf:
82:33:66:7a:85:e0:65:c5:28:76:0d:cb:f3:39:7b:fa:a1:b2:
af:ff:9c:0c:bc:2c:e2:6e:d8:53:1b:c4:23:fa:fa:7e:b7:ff:
57:69:b3:ff:32:8a:5a:a9:45:ba:9c:92:3a:0d:60:64:6d:d5:
34:21:95:5d:df:cc:dc:55:b5:c0:12:51:ca:b1:62:a3:91:f1:
6c:bb:7b:5d:88:23:8d:5c:42:c9:45:65:b4:cc:ca:07:ca:66:
c9:98:4e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:18:12 2025 by rpki-client