Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
File: HCQvLpRcanLuKPjIDoDUiEM-N6M.mft (raw, json)
Hash identifier: jIu1TJbkx5A2okGdCKKTVIVS0YNTWDGFZ5k+q4Wya7o=
Subject key identifier: 5A:92:D3:7C:AA:BC:33:C5:63:8A:FA:6E:6D:E3:8F:3B:40:C0:85:AB
Authority key identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
Certificate issuer: /CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Certificate serial: 0194BD17BF8C4B8B36B55E9164CB324BA075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
Manifest number: 076E
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: HCQvLpRcanLuKPjIDoDUiEM-N6M.crl (hash: FIepjBGXS3DEpD1S2F0MU71B/wfUsV+gGldznHbU6+k=)
2: lyeOPA3Hi3kUGDVfoF3VE8weizo.roa (hash: SK0Hu8MdGQh3m28Nprb3+ZaMXzQS8vnNx8UerT7YIyM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bf:8c:4b:8b:36:b5:5e:91:64:cb:32:4b:a0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=5a92d37caabc33c5638afa6e6de38f3b40c085ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8b:31:bf:68:09:b3:c0:bc:1d:df:37:c0:65:
af:b7:61:06:a7:14:f9:25:d7:d5:10:22:f2:56:a0:
69:97:60:7e:e2:c2:40:6b:dc:66:ea:44:85:04:b7:
7d:d3:b1:23:6d:11:b4:61:2d:14:d3:ae:a6:78:bd:
23:95:53:71:0e:a5:ef:5c:a4:ad:c3:de:d0:36:95:
47:39:f9:d2:44:9c:0d:1a:85:dd:db:c8:fd:d3:af:
c2:d2:a4:f4:4f:01:28:df:d1:64:3b:2a:24:85:48:
2d:d1:a5:3c:2d:8d:bd:fe:65:37:78:a1:af:60:bc:
07:7c:b6:95:b4:4b:5d:63:dc:0a:c4:11:ec:eb:4a:
35:ea:2c:3a:b7:43:14:e3:a7:63:9a:61:35:1c:14:
2c:db:40:44:98:35:81:76:1e:7f:24:d5:36:9c:27:
f5:c8:82:81:bf:9c:ed:05:e5:e5:17:bd:30:d7:6b:
f9:76:1a:31:7f:1c:e1:6e:ea:78:c3:18:b6:82:ac:
ef:92:cb:a6:b6:26:77:e2:7b:60:b2:88:7a:2d:80:
80:91:bc:82:9b:f6:a3:25:c3:4c:77:92:4b:33:f3:
db:ea:8e:02:99:c4:43:0a:8a:25:0f:57:65:c2:81:
1d:56:af:5a:c7:25:04:4c:3a:6a:f6:9e:7a:19:50:
43:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:92:D3:7C:AA:BC:33:C5:63:8A:FA:6E:6D:E3:8F:3B:40:C0:85:AB
X509v3 Authority Key Identifier:
keyid:1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e9:df:8a:d4:a8:cb:e6:4c:62:68:d2:78:e2:1f:9a:24:e4:
c1:8f:e2:ff:1d:44:ef:e1:b8:0d:b5:40:e2:4c:10:2a:99:4f:
02:a0:30:c2:58:81:5e:51:a6:b9:1f:57:41:96:aa:21:27:3e:
e0:66:78:79:33:70:eb:9c:25:66:bc:43:9f:ac:16:10:58:32:
43:87:5a:4b:67:7b:71:7b:23:0c:b9:4f:7e:37:51:f1:bc:ed:
f9:4e:c4:60:ff:5b:96:b4:3a:96:f0:79:c0:92:93:53:ac:64:
77:ba:de:67:fb:56:cb:a7:d4:b8:af:be:a1:94:1e:93:2f:37:
22:af:84:02:b9:ce:27:b3:7e:f2:3e:bc:30:64:0e:12:58:d9:
0a:eb:10:d2:e4:16:00:9e:8e:ad:5c:b1:b2:c2:11:8d:20:c0:
6d:5a:3c:01:64:74:c2:a7:f7:69:d8:8b:34:20:bc:d4:e0:e2:
b5:fd:ec:94:38:4c:13:e9:83:85:dc:85:71:cc:4e:80:b1:3d:
50:65:33:57:77:d8:c4:ca:f2:a9:4e:35:25:8b:0d:ce:8d:e5:
eb:ff:69:38:9a:8e:8e:b1:93:cd:4a:7a:cc:93:e1:a0:99:d8:
9d:eb:e8:68:8d:ef:34:c6:2b:25:1f:ef:9b:e1:dd:79:68:63:
2a:6e:ac:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:59:52 2025 by rpki-client