Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json)
Hash identifier: NvPxEYoEz/aDTTDZTGzpQ948z6UVoBQ888is+eZPTVA=
Subject key identifier: AB:BD:68:82:5F:5B:3B:6B:F5:A4:80:06:98:D3:06:6C:9D:39:AE:96
Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500
Certificate serial: 0194BCE0ACC2AD2A02542393A56F0C9AA4BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
Manifest number: 10B7
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: sMGAcCqsaVOlhctWknJ/AmovBVtFVKK+n4p8vFxq5Wg=)
2: vOY7PB5NDzFxhVih037o9jJ1bUc.roa (hash: 8OCsn1+9HWmViC4NQ7DEHa7bN4pK4rZb0B/Nsp5g6gw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ac:c2:ad:2a:02:54:23:93:a5:6f:0c:9a:a4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=abbd68825f5b3b6bf5a4800698d3066c9d39ae96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:54:70:c5:9b:cb:49:63:39:00:8e:3e:2a:47:
02:a2:31:db:1c:de:5e:e1:59:1c:d1:cb:91:91:00:
e8:23:92:0f:53:bc:72:4c:e2:06:1d:0c:f8:ed:bb:
b4:1d:c3:6b:b8:50:75:11:2c:b6:ab:83:d5:ec:b4:
5d:cd:21:51:37:84:6f:a7:aa:3d:94:53:9b:7d:7c:
55:eb:ed:e2:b1:7e:6d:33:60:a9:56:b8:f1:90:dd:
40:cf:56:ee:f5:8c:f2:e9:1c:c3:1f:16:fd:28:ad:
e1:a2:13:b8:e8:ba:3b:3c:25:be:f0:f7:73:09:ea:
f2:b3:5a:de:0a:bd:1d:f0:3a:c7:09:98:52:32:a2:
8b:a8:78:1c:3e:8c:cd:6c:67:24:85:84:8c:24:e9:
45:b7:70:88:5c:4c:ae:74:eb:c6:5b:50:9f:ba:eb:
a2:23:03:49:25:09:7d:fb:02:0e:42:be:ea:1d:51:
0c:6d:dc:d4:7f:55:2f:6d:59:01:94:00:d6:f9:64:
7e:e4:41:b2:32:c3:11:7c:8b:1f:5e:41:63:3c:9f:
6d:7a:45:5d:69:61:f0:88:2e:7e:3d:c0:18:fa:77:
a3:19:46:ef:6a:2c:f2:02:89:33:db:15:23:06:8c:
cd:7d:8d:4b:2f:1e:d1:34:e4:73:3c:57:ce:8a:b4:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BD:68:82:5F:5B:3B:6B:F5:A4:80:06:98:D3:06:6C:9D:39:AE:96
X509v3 Authority Key Identifier:
keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a5:c9:ea:5a:5c:46:e3:10:03:9c:b8:f7:69:99:e5:82:7c:
65:b0:9e:e1:d5:aa:7c:e2:4a:55:e7:9f:6c:b2:8c:ce:4d:47:
03:85:c6:b3:71:a7:c0:07:c0:50:87:c8:8d:8f:49:63:e1:48:
b6:e9:0e:69:c3:22:b4:66:2d:dc:88:94:8f:d1:ca:6f:27:54:
03:6a:91:41:be:ea:58:fe:a5:d8:b7:76:c4:88:d9:09:cb:f2:
dd:bd:3f:02:5a:f3:d6:e6:46:ba:04:08:2b:e8:6f:00:f3:eb:
ea:cb:38:b2:b5:ce:70:72:f3:2b:11:1f:da:3c:8b:c0:c2:8f:
41:2d:09:4e:93:d7:8c:7d:57:aa:25:de:ff:b9:28:71:cc:6d:
eb:12:8f:c1:60:13:e9:96:0b:b7:c0:18:36:24:89:b4:e3:24:
45:99:12:b0:7e:3f:15:83:08:fb:5b:96:b3:bd:8a:6c:f1:62:
a7:de:6c:28:c3:bc:d6:cf:42:74:b5:97:28:a1:e5:8b:5f:43:
00:64:23:b5:40:0a:bd:0f:2a:3b:28:1d:c9:c2:5b:f7:b2:50:
e7:8e:e8:89:bf:a1:fa:f4:c7:1d:7b:2b:16:cc:6d:7f:cf:26:
47:b3:42:0a:88:47:c5:b4:d3:01:33:c3:1a:d2:70:63:4c:44:
36:d8:1d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:53 2025 by rpki-client