Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.mft
File: sr7EG9LzsXneCVFDBlML0_uscHs.mft (raw, json)
Hash identifier: WD/XP+27ZxyDCRv2voqRHpcGqa3qQbDMLe8rd+fLom0=
Subject key identifier: 81:48:BA:96:20:65:CC:E4:57:7E:3C:0E:CE:90:98:D2:3D:05:7B:0D
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018FAA81C67B47AF8C5A9663E113BD9C5D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.mft
Manifest number: 0682
Signing time: Fri 24 May 2024 12:09:42 +0000
Manifest this update: Fri 24 May 2024 12:09:42 +0000
Manifest next update: Sat 25 May 2024 12:09:42 +0000
Files and hashes: 1: ZxOXHDUXUXvB5-ZmN6L21HH5e8U.roa (hash: 6NVVlCCNCoVurvt8ade+l9e5CumL0SXXC3xrEdyJxaw=)
2: sr7EG9LzsXneCVFDBlML0_uscHs.crl (hash: etuUTXYRQd6Msc6gd4tRLuXnWqGD/9EthNb3HrVXdxs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:aa:81:c6:7b:47:af:8c:5a:96:63:e1:13:bd:9c:5d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 24 12:09:42 2024 GMT
Not After : May 25 12:09:42 2024 GMT
Subject: CN=8148ba962065cce4577e3c0ece9098d23d057b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dd:60:1a:e8:e9:84:f1:f6:2e:6b:ee:ba:bb:
9c:87:1a:bd:72:0a:04:56:0d:08:c8:1d:73:08:de:
0b:22:67:d8:1c:de:e3:f0:12:2d:14:0b:70:c8:ed:
d9:1d:56:dd:8f:3f:d7:91:d7:a8:75:b6:11:d9:44:
11:4e:a2:09:53:f5:b3:81:63:08:76:10:bf:1d:14:
50:28:ec:79:0f:ac:42:d4:a4:35:3a:eb:d2:a6:72:
33:ef:42:d6:81:14:b8:b5:18:e7:0f:fc:c2:b6:e2:
2b:37:32:eb:4f:5d:ea:77:53:75:99:52:ec:4b:66:
3d:53:03:d1:83:15:8e:fd:2e:32:fe:a7:d8:e6:22:
4b:41:f6:e2:0e:7d:5a:aa:5b:22:4b:96:06:76:06:
d7:89:dd:55:f5:db:44:4d:d3:0d:7d:54:05:87:11:
77:2d:2f:a9:59:51:1f:3c:39:5e:e3:74:c0:dd:f0:
0c:75:fe:45:25:b4:4a:cf:14:9a:8d:d5:c5:4a:9d:
fb:a8:b4:66:d2:c6:52:fb:38:2a:a8:4c:d5:ba:64:
f5:4c:ed:f1:26:c7:ce:0c:a3:26:a0:54:17:08:9b:
7f:76:d2:f1:57:dd:d7:91:7a:01:96:a8:bc:a3:f2:
4b:20:7c:11:5d:a5:96:6a:82:35:1b:a5:7c:a9:e5:
28:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:48:BA:96:20:65:CC:E4:57:7E:3C:0E:CE:90:98:D2:3D:05:7B:0D
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5b:da:b3:35:5f:8c:85:f4:5d:21:a6:d6:18:5b:65:1e:d3:
f0:a7:57:61:42:57:fa:ad:07:55:6a:8f:9b:0c:d0:a2:e5:6b:
91:b5:5a:6b:96:bb:3a:54:91:4f:a0:59:cf:a3:a0:9d:4f:75:
6f:37:4d:19:7a:ed:18:38:25:b5:5a:02:f6:c3:63:b9:45:ff:
11:9d:b2:7f:99:1c:d5:94:f0:45:bc:7a:99:8f:3a:74:35:3a:
3b:e5:44:cf:7f:92:05:71:3b:40:a9:c3:c6:55:04:21:fb:9b:
95:73:5c:13:76:57:df:c0:ad:4b:86:81:15:b4:7a:c0:2e:82:
d1:cf:67:3a:c0:f4:67:67:e5:2d:e6:35:22:f1:bc:21:d4:35:
53:09:a4:04:aa:bd:c4:d6:bd:f1:ff:4a:61:4b:f9:7e:42:d8:
e2:c9:ec:86:09:0c:ad:7c:50:14:c6:f7:ab:79:41:32:8d:a7:
dc:1e:a9:e2:f6:f8:81:bf:b7:42:e6:86:89:1e:f2:ea:6f:1f:
62:8e:d4:85:5c:9e:b7:de:4f:b4:60:e3:ef:65:f1:85:f8:d3:
6b:af:af:a4:72:2e:b0:1c:8c:84:6f:22:1c:52:bc:76:2b:f8:
dc:76:6e:c4:cb:ae:e1:49:86:af:47:5f:54:1e:bb:d7:fe:1c:
83:ad:d3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:21:08 2025 by rpki-client