Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
File: HlqvPQaD3IoNWMZDgm4WbTwozKk.mft (raw, json)
Hash identifier: Qtyw6hP7ed2OYb0g5UJpNT29QwOYCxoAtn7BeO071ag=
Subject key identifier: 2D:2F:C9:4E:51:8A:BA:AB:16:EA:C2:0A:12:34:CF:15:32:98:7E:9A
Authority key identifier: 1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
Certificate issuer: /CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Certificate serial: 0194BC7327BCA9F8290BEE0C470F6BAB5E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: HlqvPQaD3IoNWMZDgm4WbTwozKk.crl (hash: tu4mJ6S4khuO6+u3WETPqBufVuT1XTJ163Yt6UOQuic=)
2: MCvxtXhDv-4sOFSG3-70es9IbCc.roa (hash: zG6t5oGWGri6Roj7Zds9875D3+Pp2Gk1iyyfA9Fh0BU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:27:bc:a9:f8:29:0b:ee:0c:47:0f:6b:ab:5e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=2d2fc94e518abaab16eac20a1234cf1532987e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:ca:1d:78:fe:8e:42:0d:83:f3:6a:d8:60:
0d:4e:53:17:26:b2:9b:74:52:66:e2:0f:5a:16:68:
c2:59:b6:30:48:75:52:dd:2e:64:0b:7f:f4:95:20:
ad:ad:eb:1e:08:6d:ce:25:34:96:51:f4:c3:bb:c2:
a0:0c:72:7e:cf:d1:f9:04:42:ff:56:2e:5a:48:d2:
0a:51:9b:0a:c8:ea:0c:0b:e2:b8:4c:e8:b3:e0:00:
4d:1b:e2:b6:c8:a9:9b:ea:b4:df:3c:a6:3b:c0:23:
4c:2a:c5:50:b7:2e:45:50:bc:e7:fc:4e:e0:49:55:
46:1f:cd:05:ab:bd:31:e3:3f:47:82:79:37:2c:23:
44:a9:78:09:6a:0a:fc:3a:1b:32:3b:31:8b:50:02:
fc:85:68:e8:a5:93:51:14:b1:ed:17:bb:3f:9b:93:
c3:84:f6:7d:ef:4f:6c:e9:5e:78:ee:e2:f0:89:f1:
b3:c6:3b:ce:21:bf:6a:8d:c0:a6:a6:50:bf:3f:be:
90:bc:3b:4d:bd:9e:cf:2a:fb:69:98:63:77:14:14:
77:34:66:75:fa:6d:06:74:4d:ae:cd:02:51:19:b1:
cf:a8:2c:8f:88:b4:34:57:9f:29:d6:36:9f:6f:bd:
8c:9d:cd:95:74:d0:c7:cc:f1:04:f9:ee:fe:09:7d:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2F:C9:4E:51:8A:BA:AB:16:EA:C2:0A:12:34:CF:15:32:98:7E:9A
X509v3 Authority Key Identifier:
keyid:1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:be:0e:f3:53:27:15:d1:3a:78:fd:74:66:df:01:ec:ed:00:
a5:35:7b:86:43:01:47:fb:e5:5a:cd:d1:56:f8:fd:f3:a0:5f:
8a:2e:a4:9d:5c:74:fb:7d:d1:65:b9:8b:cc:12:ab:6c:f7:2d:
b1:40:28:d3:a7:73:55:79:8d:26:5e:79:03:3c:94:6f:26:89:
65:6c:75:86:a1:82:e4:af:04:bd:99:8d:e3:d0:49:65:60:eb:
27:66:ac:47:d2:38:69:a1:f5:be:f2:4c:3f:f3:21:1c:84:69:
08:2b:2b:51:59:04:5d:c4:5b:0c:d8:37:a2:14:9f:b2:94:01:
0a:5b:af:19:e7:32:2f:fe:22:45:0f:40:04:b4:71:4f:64:02:
05:0a:3a:ce:9a:ba:2a:42:5d:34:b1:c0:1c:e9:68:dc:39:b4:
4a:a5:40:60:e1:e8:33:73:c9:f8:e6:53:97:b0:1a:3e:fc:1e:
e7:1c:35:70:8a:c9:8c:c8:fa:43:09:05:94:3c:68:69:40:c7:
18:f8:80:04:6a:2f:41:34:b2:7e:d4:44:f7:6b:cd:cb:09:47:
f2:d6:35:3a:91:3e:bd:d5:90:37:09:74:de:9f:22:d0:00:4c:
78:50:70:29:47:5e:b6:46:95:a7:7b:ad:f4:34:f7:67:a3:e4:
99:21:1f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:54 2025 by rpki-client