Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
File: HqsBKTydvRqdatyGGCtSDNF2wAc.mft (raw, json)
Hash identifier: AgvjaUGq0HlFJM5bNGtgHnqLiYbyVjNdd2qa6ww2QVk=
Subject key identifier: 3E:F3:8A:FE:F7:06:35:DF:70:AC:AA:9A:F7:46:A7:11:AB:8A:9D:73
Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
Certificate issuer: /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Certificate serial: 0194BBCE717E52384D3367B7C6990202FFDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
Manifest number: 11DC
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: HqsBKTydvRqdatyGGCtSDNF2wAc.crl (hash: 8iluk+LF3PP0Usk4aaCTo3NqEQ5ige+Xq7C6SvJa4dE=)
2: ub3jhWL8KmU55QyzLWlOgggBar8.roa (hash: uMoRi+7KkYToPIHx+yE4FpiPieRkes7ACBQfGkW0VCM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:71:7e:52:38:4d:33:67:b7:c6:99:02:02:ff:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=3ef38afef70635df70acaa9af746a711ab8a9d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f3:07:dc:d5:67:15:8a:19:ab:77:ab:d9:d6:
63:83:20:c1:b0:47:aa:14:39:93:58:a5:18:bd:7d:
42:90:ee:93:5e:ee:71:e4:99:37:cb:bc:21:b2:0a:
4e:b8:5f:a6:78:4d:d3:3e:c3:b9:8f:42:02:a7:5e:
67:de:4b:32:a3:32:88:9c:41:0f:27:6c:34:8d:86:
08:f4:bd:59:0e:a7:fa:80:76:de:f3:b4:a3:8c:15:
f8:fd:28:49:ab:4e:10:92:11:e5:65:11:47:d6:18:
5e:66:81:17:ad:2b:a0:5d:63:42:38:77:80:93:43:
43:a7:2b:c3:0e:50:e8:62:b4:45:6d:bd:ba:6f:55:
bd:44:90:6a:c8:ad:86:2e:98:7b:36:bd:57:4b:22:
2d:2f:5b:e1:a5:8b:ad:88:3d:6a:13:7e:40:c1:92:
44:3c:9d:ec:7b:34:59:6e:5f:d7:d5:e1:92:60:3b:
20:39:9a:47:f3:39:7c:e1:ae:8f:24:1b:d7:ed:45:
ef:76:ab:9a:79:d5:60:59:2c:2b:3f:07:04:4a:d5:
ed:be:e2:7d:93:ac:07:67:06:24:e6:27:1c:3a:43:
b2:d5:56:ec:ae:f2:18:27:b9:32:a6:13:d6:a5:3c:
39:26:36:64:6d:74:ce:35:cc:29:78:44:f5:c8:22:
12:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F3:8A:FE:F7:06:35:DF:70:AC:AA:9A:F7:46:A7:11:AB:8A:9D:73
X509v3 Authority Key Identifier:
keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0d:f6:3a:44:7a:12:75:3b:f2:5f:cf:06:15:21:21:e0:c6:
01:63:41:30:6d:23:d5:28:4b:c7:3f:4e:c1:d0:cf:1d:ce:96:
4c:9c:d3:f8:d6:b8:38:34:a7:8b:85:d0:c8:6b:26:53:e7:6a:
d6:19:8d:b2:de:b0:33:a8:80:b7:08:b0:3b:87:a7:c2:d1:5f:
dc:ca:19:c9:37:7a:ed:bb:14:92:d7:bb:db:c5:a5:8a:6c:41:
81:9c:f1:83:32:e6:b7:c5:c4:d0:8b:68:92:e5:40:51:9d:39:
87:e2:cc:2b:19:bb:f1:86:dc:c0:5b:a4:cd:d7:62:2c:70:60:
71:07:5a:88:b8:f5:96:eb:4e:0d:79:8a:55:82:00:4f:36:d2:
c7:6e:3a:73:84:ed:9e:38:6c:49:01:c9:ce:9f:b8:1d:cc:77:
9f:7d:48:a7:8f:06:f9:33:45:6f:44:a9:6e:d0:91:3f:16:54:
b1:5c:79:63:67:5d:2f:69:75:9c:69:ef:7d:25:e4:e0:e8:69:
d9:91:8e:4b:41:d2:75:b0:aa:83:47:56:f5:d8:57:14:77:7d:
1c:07:b2:42:22:dc:c2:ac:72:13:90:53:aa:d5:3c:0e:1c:48:
f7:f5:81:8d:ea:49:9b:66:20:6d:84:45:15:5c:09:48:05:f1:
eb:f4:4f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:05 2025 by rpki-client