Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
File: HQrO6hf1PecI-ac6vAyHFk0gfQg.mft (raw, json)
Hash identifier: gq+g1geQZ3sVn7rzpnlhNjgg0Qwvl/jgW4IMRPm19Oo=
Subject key identifier: FE:41:C2:48:93:BD:76:0F:8D:36:19:36:6B:8C:F4:92:ED:8E:4A:C2
Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Certificate issuer: /CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Certificate serial: 0194BBCDEA2C589E08BF987C0EF4972D9672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
Manifest number: 114D
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: 9zhTOpiuNqKnk778yI8rOgQQ8-A.roa (hash: ABWXF/FnYjdj8H9UnlqrtLWEbBYpls+daSI459eMuZM=)
2: HQrO6hf1PecI-ac6vAyHFk0gfQg.crl (hash: YpVOeU7j/8QTmVG2QLKODnJlYfD24Q+0cxY71PKdyDc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ea:2c:58:9e:08:bf:98:7c:0e:f4:97:2d:96:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=fe41c24893bd760f8d3619366b8cf492ed8e4ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:b1:ff:f2:a4:25:0f:65:7f:c7:30:04:56:
09:75:0b:1f:07:7b:a1:ad:d6:25:7b:7b:ac:35:97:
b4:92:3f:06:28:96:c9:f0:fe:a1:10:f4:b7:e2:24:
7f:16:39:3a:72:2f:77:6c:c0:6d:79:37:79:91:fb:
63:b7:21:b4:66:e2:d3:3b:06:2f:8d:60:53:fd:d6:
1e:29:b0:28:56:a0:a3:80:11:6f:d1:a8:3e:ef:5d:
ed:96:cf:60:9c:ac:4a:17:95:0a:9d:4c:0a:e3:4c:
f8:3e:60:3a:84:c9:07:9e:8b:4c:63:3c:bf:ec:7c:
71:c6:6c:bb:5f:ec:82:55:d7:87:f9:92:b3:97:80:
b6:bb:28:b3:1e:a7:5a:04:ee:48:c2:b1:3f:ed:e6:
33:a7:e9:4d:89:e2:26:a0:68:b2:90:26:86:e5:a6:
0a:72:c6:d0:6a:00:c7:54:ff:5e:c6:84:5f:10:51:
d6:c3:8f:be:1f:cb:84:f6:41:7a:27:00:8e:b5:23:
76:bb:cd:a2:25:d7:17:38:62:bf:07:90:c3:dc:a4:
1c:a8:c5:a0:e1:77:30:11:71:a1:a3:59:8e:79:33:
7d:98:5a:58:89:96:b7:8f:e2:c8:8c:06:55:25:34:
b3:ae:29:85:54:fb:3d:e6:34:1a:54:80:c6:22:06:
82:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:41:C2:48:93:BD:76:0F:8D:36:19:36:6B:8C:F4:92:ED:8E:4A:C2
X509v3 Authority Key Identifier:
keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:06:24:a8:6e:c7:94:2a:c5:92:83:84:ee:9d:9e:1c:16:cc:
47:5d:2e:00:fb:22:14:45:2c:41:a6:21:45:6f:d4:59:50:f1:
21:48:e0:0b:4d:3e:8a:ac:0a:72:c6:44:b4:3d:65:a9:52:cb:
be:7c:4d:4c:f5:a9:a8:26:d6:42:23:2b:c8:73:07:d4:e9:4f:
c5:c1:2c:49:e5:a0:58:89:4e:01:a9:78:6a:d3:07:a6:8a:e8:
12:03:d6:27:9c:d0:7b:4e:e9:48:06:99:85:22:67:07:15:a4:
fc:2e:71:47:f1:60:dc:cb:7a:76:42:63:0f:0b:28:6f:6b:ee:
58:99:af:22:39:13:a3:ed:ad:3e:e3:d3:53:34:7e:bd:4c:33:
b0:7e:7a:76:a6:f4:57:1e:7b:47:f3:9a:44:77:ed:ad:37:0f:
78:78:f4:70:a0:b2:12:4f:93:13:96:8f:6b:c6:0a:0e:c8:f2:
d9:41:79:5c:1f:06:8e:a4:dd:9a:c9:9d:89:67:57:22:84:61:
27:96:37:ac:58:8a:1f:c9:89:cb:29:f1:c6:ee:d6:ab:42:92:
46:ed:cf:51:88:19:13:e8:c8:34:68:e4:4f:10:42:fd:5e:af:
8e:31:d9:32:38:4c:bf:c7:a0:4b:21:0e:62:67:db:f0:43:37:
d2:9d:0c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:14 2025 by rpki-client