Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
File: HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json)
Hash identifier: IRMlmWGxBuVJLeNGG7BWN1wn1lMDISBbPxr87D8GsrU=
Subject key identifier: 05:33:FE:B9:2A:75:FA:E2:FA:6A:EF:EE:DD:98:8B:2E:E4:80:97:57
Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Certificate issuer: /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Certificate serial: 0194BD4E4CAB6631B152CAE8C29169B5FA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
Manifest number: 02BE
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: bZb+fWjkEidFJmzI5r1ZalwxL7db+N5RlZuxfZN09g0=)
2: KnSUOMU4LVOd-681gUpAeZxW9tU.roa (hash: T8JMOCVoClcG2l35uDfqB6bKR7EcaF1TmNNZKykQwnk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4c:ab:66:31:b1:52:ca:e8:c2:91:69:b5:fa:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=0533feb92a75fae2fa6aefeedd988b2ee4809757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:70:44:a7:ec:17:bf:e4:0f:38:67:67:b6:
51:3c:1c:fe:db:f8:18:8e:47:e7:0d:2e:12:cb:8c:
26:49:bb:c3:97:54:0f:66:87:d4:f9:9f:c9:77:53:
98:c0:6c:4c:41:00:e7:99:09:4b:bf:e0:4d:82:97:
9f:63:b8:24:57:ed:51:77:3a:dd:ec:1c:29:8e:92:
fb:b3:e0:02:6b:69:62:fc:6e:45:73:1b:89:0f:8e:
90:d5:16:24:ce:77:d5:4e:ea:c6:d6:d3:9a:b9:b5:
da:f9:0e:41:9b:8f:fc:ac:53:c9:5d:7c:60:83:15:
7f:77:0d:bc:14:90:b2:71:ef:54:0f:21:6d:51:3e:
77:4d:25:94:f6:17:26:b3:f5:a4:31:90:0c:a9:a7:
8d:0b:f2:31:8b:6b:a0:81:61:89:f7:66:da:17:3b:
65:bd:91:7b:fe:47:fa:17:0f:d9:95:68:f7:8f:90:
c2:bf:be:bc:14:ff:63:0a:f0:64:cb:dc:63:5e:3e:
14:7e:d6:00:24:16:2c:91:82:a3:c1:08:cf:7d:a7:
c9:fe:bb:6e:e7:88:cc:23:0e:9d:16:e0:ac:55:e2:
8f:60:3e:a5:dc:ce:25:22:99:43:20:9f:45:a8:38:
9d:0a:3b:c9:70:6c:54:1c:51:a2:b6:d1:1f:af:ed:
bc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:33:FE:B9:2A:75:FA:E2:FA:6A:EF:EE:DD:98:8B:2E:E4:80:97:57
X509v3 Authority Key Identifier:
keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:63:78:95:78:50:96:6b:63:2d:0d:f6:2b:fa:c1:4a:5c:86:
34:82:c6:89:46:d6:40:f6:61:f9:98:52:d1:9b:9e:27:f0:68:
f3:da:75:3d:8a:7c:d0:27:f7:0a:6d:1d:35:95:a2:99:6f:84:
a4:46:8a:2b:68:46:e5:62:12:10:fd:a2:35:a0:a5:d0:e8:cc:
bc:80:f4:f7:e3:f7:92:b5:84:5f:81:6b:70:ca:8d:ad:57:b2:
b8:6d:96:81:7c:20:67:2f:d8:59:ef:59:82:9e:30:3a:cd:ab:
09:6c:e0:e3:9e:aa:3c:31:74:7c:6f:8b:05:b8:67:92:b4:3e:
07:32:73:65:60:1a:7a:f4:f0:0a:62:a5:92:28:01:a0:28:9a:
5a:87:74:dc:2d:a1:9d:96:79:23:1a:70:a5:1f:be:b8:a7:8a:
1e:ad:23:c1:5b:9e:f9:04:50:cd:b6:9e:56:94:0b:6f:46:49:
e6:27:62:8b:29:b9:52:d4:f9:44:44:51:b4:07:9f:d4:f7:dd:
21:39:bd:23:7f:3e:08:0a:40:b1:7d:8b:25:08:01:b9:06:4e:
b8:9f:82:6f:b6:31:e4:e4:88:7d:d2:5e:ce:d0:86:1e:53:ec:
01:1d:90:de:6e:fb:ce:16:27:e7:df:59:85:cf:19:58:a6:53:
bb:85:6a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:58 2025 by rpki-client