Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
File: HiNCQpV7sb4SloFyH5ws0I3we6o.mft (raw, json)
Hash identifier: TkupPUQpnK3aahxjvkQnh+HDqGoEDuyMiu95ZR2afog=
Subject key identifier: 18:2D:D8:F7:FC:6A:E8:74:81:38:81:38:89:CC:57:A4:F0:FB:47:18
Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
Certificate issuer: /CN=1e234242957bb1be129681721f9c2cd08df07baa
Certificate serial: 0194BC7307CFE8B83A2E6FF45D7797D19FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: HiNCQpV7sb4SloFyH5ws0I3we6o.crl (hash: iMq5kCLBqJyVRbFMia22KMFjAkvvdRSLm3yDvdryha4=)
2: LrQvGSWjZ1_u3gVVuPLp2WxRk1k.roa (hash: ZcyQD8WEBHUW25dO4BlMcUXBz86xnVBSf9fbKGrRMB8=)
3: _reFuWE8F3Q1MCsGcykhYwVBWKM.roa (hash: O++vwJ85mD5AXwmEuMpGVw7mWSimyoQ3mta9DBkVsW4=)
4: dbWbArxAw26iNluKXUrcW4Vg-TI.roa (hash: btYEfLq8/9yx4IhA4v1IAzOkYKFAL79qzcrLbl8TnGs=)
5: t3uSAegbFXAgvcMRKArmSOOjc88.roa (hash: 4JXslF6DFYbC7wM1C83bbrfYplmPiSougkSoNLfd1xU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:07:cf:e8:b8:3a:2e:6f:f4:5d:77:97:d1:9f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=182dd8f7fc6ae8748138813889cc57a4f0fb4718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:ff:f8:6a:c0:89:96:04:da:c5:97:fa:8f:
89:5b:dc:91:62:9a:7f:5b:f6:7f:9e:02:84:dc:a8:
40:07:f4:37:f3:e2:ce:e6:26:4e:47:86:40:d1:2b:
24:bf:79:5c:79:21:93:17:03:d1:bb:0a:fd:d6:7c:
d3:bc:33:70:53:a1:e4:1c:3d:48:0f:75:f0:d0:34:
ea:35:b6:50:f9:3a:9c:fa:12:3d:02:5c:4a:6f:c1:
ca:57:90:6c:20:b4:40:9f:5f:57:73:47:ef:bb:ec:
c9:58:b7:86:60:ce:5d:74:7a:f8:c0:0d:24:9e:94:
24:d2:51:2d:4e:7e:ec:77:e8:23:fa:91:75:25:96:
d1:33:b9:89:20:ee:3b:56:3a:d9:89:25:9b:ce:d1:
52:99:9f:0b:79:9b:57:30:c9:85:3b:1a:45:1e:36:
a0:1a:c8:60:4f:5d:bb:a2:c3:b0:5f:6a:8d:97:ad:
18:88:92:89:be:56:b4:7b:21:04:85:a4:5f:a3:d1:
7d:63:58:5f:ac:9d:57:85:95:0e:19:7f:80:6d:49:
e4:18:7b:4a:21:67:29:1e:e5:7b:d4:c3:6b:cf:61:
ce:bc:77:b5:2c:3b:06:6d:ba:78:c0:4c:a2:d4:4a:
ab:32:09:c1:b3:44:09:df:78:29:83:36:49:40:14:
4c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2D:D8:F7:FC:6A:E8:74:81:38:81:38:89:CC:57:A4:F0:FB:47:18
X509v3 Authority Key Identifier:
keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:42:20:0e:49:db:59:75:cf:38:24:bb:4b:e0:3b:97:c0:17:
41:a0:af:35:04:0c:5f:4f:b5:c8:1d:51:f4:31:ae:6a:bf:0e:
ae:6c:76:18:00:81:2a:db:72:45:bc:b6:10:98:fa:1d:3a:8a:
90:a4:e4:06:58:a9:ad:52:92:b2:94:a0:03:de:16:78:a1:af:
28:51:26:fb:98:cb:11:47:18:0f:5e:30:bc:a9:94:91:4c:59:
ec:76:fb:dc:29:6f:47:35:3b:d2:85:98:9b:c7:d4:58:e4:df:
99:28:ff:98:dc:dd:70:74:03:6a:1b:6f:94:23:fc:b1:20:fd:
c5:a3:24:77:f2:8d:bb:c3:1d:ed:06:f2:0a:84:50:ee:76:b2:
33:d9:29:e8:66:b5:ff:89:23:a8:87:f7:41:bb:cd:81:34:cb:
0d:66:f1:6d:7e:ef:f7:cd:d2:34:39:18:14:59:2f:29:47:fc:
ea:31:fc:97:b7:87:3d:73:ca:11:f8:a8:6d:1b:a5:13:6c:d7:
4e:af:03:44:e4:81:6d:cb:b0:55:72:d0:91:2a:00:71:3e:2f:
c9:74:0e:79:10:dc:3f:b0:3a:2f:00:1b:77:ee:d3:5c:80:ff:
88:4d:e6:2d:b3:99:c4:d1:a8:04:4e:2c:2a:84:94:ee:f6:fb:
ea:11:c2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:12 2025 by rpki-client