Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
File: HH3TyBbYWWCARyBUNICV7SuFUeU.mft (raw, json)
Hash identifier: HpAxpY/P7+DHlsokbW+DipLbM9Il3PfkGvwFz7GTkCY=
Subject key identifier: 69:05:D0:44:E0:17:24:25:41:44:1C:6B:97:6F:88:2C:FC:D0:1C:3B
Authority key identifier: 1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
Certificate issuer: /CN=1c7dd3c816d8596080472054348095ed2b8551e5
Certificate serial: 0194BC04D2372B7520FF7AC400D03174602B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
Manifest number: 119D
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: HH3TyBbYWWCARyBUNICV7SuFUeU.crl (hash: uETyW+TEzrJLHzWt0lS7VCTiDnjMklbBtsA46HDl4PM=)
2: lUApR8rVpWyDLR1GadE8v1PzIFI.roa (hash: SjTc2RPVxxZZujKF5tyIKpHPh6Uad/TapUg1uEd/j6M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d2:37:2b:75:20:ff:7a:c4:00:d0:31:74:60:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7dd3c816d8596080472054348095ed2b8551e5
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=6905d044e017242541441c6b976f882cfcd01c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:2f:05:df:c1:b3:3a:82:a2:1b:c8:33:a1:
d6:54:e6:a1:c4:32:70:64:b1:de:cd:96:f9:2e:f9:
ce:01:d8:42:9f:e5:bb:0c:0d:42:14:23:e2:25:4f:
44:d3:d2:ee:e8:04:44:a0:56:1a:58:82:b3:2f:a2:
e5:e6:e0:fe:c8:72:38:07:0b:97:2f:2a:45:02:4a:
67:ba:dd:a2:15:20:b1:e8:0e:d2:3c:da:6f:4b:15:
55:1e:a2:67:31:84:9d:38:c6:a5:e6:f8:59:ab:51:
c4:2a:fa:f2:53:3c:48:96:85:44:07:18:a1:5c:b8:
de:ef:5e:96:0d:d0:b0:7e:d2:89:0e:78:13:e8:80:
5f:f5:85:e0:1a:21:9e:7a:ba:7d:8c:97:6a:dc:ae:
6c:00:db:db:09:8f:36:09:6f:c8:bd:83:4a:ee:28:
78:19:90:ff:f3:c5:bc:12:b1:3d:a9:25:02:54:c4:
85:b2:ec:ad:19:99:88:27:47:2b:b3:bc:ee:96:a4:
a4:4c:74:f0:db:70:c7:e7:44:a8:8d:19:ea:d0:e5:
5f:da:be:72:89:44:1a:ad:c6:dc:fb:c6:59:d6:24:
c7:bd:c7:f7:ab:98:55:8f:a3:bf:84:c8:5d:35:6f:
94:2e:c8:22:3f:da:03:23:28:ff:df:0d:2d:a3:03:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:05:D0:44:E0:17:24:25:41:44:1C:6B:97:6F:88:2C:FC:D0:1C:3B
X509v3 Authority Key Identifier:
keyid:1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a0:07:2a:3b:f8:71:18:44:b3:6c:c2:5d:e0:c1:c5:87:86:
f4:a8:6a:20:fb:34:e1:7e:51:27:23:34:c0:41:7f:f9:11:cf:
6c:9a:d6:2d:63:cf:1a:e6:fc:57:9b:13:77:b8:63:93:57:25:
68:a8:fb:a2:5a:83:dc:30:c6:a7:95:65:51:f5:31:b4:df:c3:
ea:9d:23:99:5a:65:21:fe:5b:e9:2d:58:16:3a:64:87:be:14:
ae:fd:11:4d:cf:32:fa:94:67:92:72:c6:ab:c2:57:73:ef:3a:
35:fd:89:e4:18:4f:3a:6d:e8:14:85:fe:e2:ba:92:ce:5c:33:
00:9f:70:2f:4b:ae:47:fc:b2:3f:1f:86:67:62:a2:1d:0e:d6:
93:28:bc:29:96:e7:b2:cb:47:e0:76:b6:5c:0d:26:a6:26:23:
b8:2f:fb:82:88:e0:a1:55:f4:08:30:7c:da:f0:1d:59:af:6f:
53:01:ed:4b:65:bc:16:68:10:04:fa:cf:67:e6:ac:e7:f2:cb:
cb:b3:0b:90:42:c6:f8:fb:50:6e:ef:09:11:07:19:d2:34:ae:
c6:d7:07:dc:8f:1c:8e:ff:5c:55:d0:e5:99:b2:08:d4:76:d1:
10:15:3b:58:6e:57:b7:cd:27:ee:5e:90:2e:a7:c5:df:29:cf:
c5:e4:54:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:11 2025 by rpki-client