Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json)
Hash identifier: TMg7s1RltcCwGlgqbosZTVlcdvhtDKWywKx20i3Zp+s=
Subject key identifier: 72:3E:6A:34:E3:BB:84:DC:9B:47:95:7E:53:DB:6B:43:40:C0:D5:A8
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 0195E0B457ECFAD51898D654A38F00CA431A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
Manifest number: 1542
Signing time: Sat 29 Mar 2025 07:01:09 +0000
Manifest this update: Sat 29 Mar 2025 07:01:09 +0000
Manifest next update: Sun 30 Mar 2025 07:01:09 +0000
Files and hashes: 1: 1-ULSrC7qERPJ5s0LHG6wQSokzXA.roa (hash: M565zMsE8K/YoAfcIK7Sfb56kLhbnQFGZfCJXZeA4+c=)
2: 4CDpfs04Q6BhM73eRs3ynYW0oqc.roa (hash: SptP34QoXw99zxxZStKLiJW4s4aN8DzBBvEgnUw9cUs=)
3: PNjb4X8kJscwHMXMiyuXtbGZX5o.roa (hash: t6ZmoP2V9ihNwE35xzcIYI2VvpWaOI2bhHX5db7NWXc=)
4: SNFt0lB0U4IpDK2M6jbg0nixPuw.roa (hash: ZkAQcXTk1wy7KfuKPlx7eg9LZ93/MdGfH+lnC1SNvbA=)
5: ZpIOx5_wULQ6fk_u3FoWz7KE0YQ.roa (hash: xlJGrnQ3RAzHyUU8Evq1z4uBR31JBslascWxforueJ0=)
6: c39OdSugEhhkTfEPcCwd1BnFeWg.roa (hash: D3rVYMF6ZEkgIoR+XLBvFbt0BnRz80lo8KFUojO0nhs=)
7: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: rN7agDJkniQ2JD0WJneRda9fORnjfZR8IewArGXm7hI=)
8: jZZQ117MrYD6QSdQsNATRgEh9Js.roa (hash: F74W3mlUaYmiXG4eRCyJ8iNyFuD8U//X0zL2pTBsPr0=)
9: kSIH-t1YlaXWMTafK3y9G8k2BtE.roa (hash: u8I0qLPnotq4HtUH8xPoZUCuSzCQZnlgK1v3TzivBbU=)
10: sMCSmLssLrgia16zJI5XE9yo4Pc.roa (hash: PFtIIur3mQmVxOsLtK02cY2okE4kZ+3bYDiOKr8hnFU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:57:ec:fa:d5:18:98:d6:54:a3:8f:00:ca:43:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Mar 29 07:01:09 2025 GMT
Not After : Mar 30 07:01:09 2025 GMT
Subject: CN=723e6a34e3bb84dc9b47957e53db6b4340c0d5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c7:26:43:2f:73:c0:b2:c0:64:32:b4:b7:c0:
fe:fa:96:9c:c4:ed:ac:88:11:04:c1:7d:b8:3d:d4:
23:ad:2c:cf:1d:24:52:55:4b:2e:55:a0:8c:34:58:
64:8d:0b:31:2f:ac:d0:b4:99:e8:71:e4:b6:ca:5e:
44:5c:93:f3:c0:58:c8:08:f9:81:40:15:28:e9:81:
10:48:af:a2:84:4e:83:d9:62:3d:7e:39:af:a9:c0:
de:0f:6c:10:72:21:07:eb:c0:ea:3b:5a:f1:87:a3:
18:20:b8:44:9b:2d:cd:0f:26:9c:7e:a6:f1:54:4f:
e9:8a:5b:d4:df:94:a1:27:98:24:9a:68:c1:ff:c2:
9b:05:5f:41:9d:7f:7f:c7:3f:9b:81:e3:25:a8:07:
1c:ee:e2:4f:69:4e:dc:bc:44:eb:e6:2a:5e:02:70:
f5:03:0c:15:e7:8a:07:b3:62:24:d9:ba:62:44:b1:
60:30:5e:11:ad:23:20:70:ba:ff:49:b4:1d:52:ca:
03:58:b2:94:24:18:3e:a6:62:80:46:fa:d7:60:05:
4a:51:3f:4e:d4:7c:d2:43:ce:ee:bd:f4:66:b1:09:
79:24:84:87:c4:ee:50:22:f3:b9:81:c6:13:0d:b6:
c5:fc:9e:00:ae:c7:63:fe:10:4f:db:56:6e:60:f9:
62:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3E:6A:34:E3:BB:84:DC:9B:47:95:7E:53:DB:6B:43:40:C0:D5:A8
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:08:e8:e1:a4:8d:65:0a:a5:8f:83:92:db:52:3e:3c:18:92:
ec:99:be:20:10:0d:bf:fc:0b:28:8d:99:49:75:87:5d:f5:e5:
d2:e6:95:10:1d:ba:99:2e:3e:90:55:d6:63:58:32:3e:a6:40:
36:ed:86:35:4c:8c:a4:90:b4:1e:a6:80:7f:bd:3f:40:c9:69:
dc:bb:c0:fe:ad:fe:64:0b:9b:9a:d1:9e:c7:74:64:ac:1f:8e:
1b:f7:eb:28:40:3f:e0:b0:4f:38:38:97:9d:04:3c:88:83:12:
03:f4:2f:3d:56:1e:52:4e:ae:d7:d2:c8:e1:f9:d3:7e:35:92:
62:cf:b2:e7:3b:e9:47:5f:5d:12:43:82:b7:ee:d6:39:91:07:
7d:4e:9a:d0:09:a1:ed:c0:27:12:82:70:55:67:40:32:ea:0e:
b5:27:1f:f6:ce:95:f5:72:50:4b:a3:ea:0c:63:c7:46:b7:de:
3b:88:dd:cc:80:22:0f:5b:8a:4a:36:6c:1e:f1:a5:e6:60:bf:
1a:3e:e0:5b:e3:f1:fd:c8:ce:03:21:39:12:b4:27:8e:fa:a9:
d3:1a:31:5d:be:2c:cb:4a:94:51:af:09:50:0c:75:4a:82:11:
04:90:f6:3e:30:f7:62:a4:03:e7:e8:90:b4:f4:24:3a:ce:4f:
f7:ed:38:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:01 2025 by rpki-client