Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
File: HyLAhI0wWeWuVfaMBwecuaksJ54.mft (raw, json)
Hash identifier: QKEhBr4zNqBOqGFj9vR/ibeU+r3SMZYq2hsKU9qDOHk=
Subject key identifier: 2A:54:E3:58:1A:40:6A:C8:82:FB:E1:78:9E:27:53:9D:7D:D9:DA:E3
Authority key identifier: 1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
Certificate issuer: /CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Certificate serial: 0194BC72C8DDED7B65CD9FD71DFB41EAEC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
Manifest number: 1116
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: 42BfRq7Uq2Z4S_hnedC1PWND5eY.roa (hash: SUpoA58huBIRfI1PcJohNyNQhenW9V0GmIZXcKZjs0I=)
2: HyLAhI0wWeWuVfaMBwecuaksJ54.crl (hash: CrSVp3OINAU7+memOdd+oKaYaA338JqVg6AzeLMawqc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c8:dd:ed:7b:65:cd:9f:d7:1d:fb:41:ea:ec:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=2a54e3581a406ac882fbe1789e27539d7dd9dae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:fd:48:5d:d8:02:b7:d8:d8:b8:72:f8:6f:
3c:94:85:59:53:3b:01:0f:52:f8:69:3f:65:ed:fc:
59:6b:f5:7c:af:2a:5d:0e:f0:ee:ae:1b:ea:66:52:
a9:50:cb:e9:56:a5:27:c4:46:ba:ea:ce:aa:ef:cc:
95:86:42:2b:d0:18:8d:70:8e:bf:5f:76:6e:d0:c0:
a1:6d:a6:7e:45:0f:06:e3:e5:a2:c7:77:3b:ea:23:
84:b0:1e:86:49:e0:4f:fa:af:c8:25:bf:37:f6:4d:
5a:e2:59:8a:17:a9:2f:96:90:da:4e:24:52:53:7f:
05:5f:45:b3:32:d0:70:eb:4b:99:e5:af:a4:ad:33:
2a:17:0a:7f:25:60:c6:93:18:0c:f0:a5:11:79:2b:
ad:df:d1:88:8d:93:38:d0:11:d4:19:df:35:8c:ad:
0c:79:b9:f0:a8:5e:aa:7c:68:d3:08:1c:65:ce:75:
f2:9d:1e:f8:e7:cb:1f:9f:3a:1b:0f:f2:0d:05:57:
fb:4f:89:c7:78:88:6d:15:6d:77:d9:6b:67:88:ec:
f2:11:20:3a:ce:15:16:9d:aa:fa:fd:02:86:dc:03:
42:b0:54:44:d7:69:5c:ee:9e:7e:55:a5:8c:c6:a2:
2a:94:2a:9c:3e:a3:5e:3e:6e:cc:38:cf:b3:5b:11:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:54:E3:58:1A:40:6A:C8:82:FB:E1:78:9E:27:53:9D:7D:D9:DA:E3
X509v3 Authority Key Identifier:
keyid:1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:58:6a:dd:3b:61:5c:f0:ca:7f:e5:96:7c:c6:b1:63:70:33:
bd:f9:91:75:18:a3:66:7e:71:0d:f1:08:dc:8a:5f:20:be:34:
95:b6:60:a9:09:44:ea:3f:4b:a7:0d:f3:45:76:b9:ff:31:57:
fa:f4:dc:47:99:7c:bd:c1:d7:81:e6:9b:78:4b:d7:08:5e:af:
00:f9:10:4c:1a:aa:e3:34:3d:7c:19:ab:3f:45:94:4a:91:bd:
7a:b5:95:23:4f:58:6d:dd:ce:81:04:c4:7a:95:6a:9b:07:7e:
7a:87:d3:0c:39:fa:c4:3c:fb:10:d1:c6:4f:31:70:47:e5:b6:
c0:cc:6f:82:12:79:c8:95:db:ec:0d:82:53:dc:6b:87:ba:6b:
e0:6c:77:5e:34:c8:43:0d:24:af:2e:31:ac:d7:49:92:da:a7:
84:58:21:c1:58:a1:4b:6b:2c:86:4f:5f:1f:17:ca:7a:8f:8c:
73:f1:35:9d:c7:24:dc:6b:6a:57:cf:23:65:8e:da:cf:88:44:
de:46:7f:b2:42:f2:25:fa:1d:52:98:5a:20:c4:a3:9a:f1:eb:
43:a8:19:74:65:de:fe:64:f8:93:c3:12:b3:a6:fa:27:f5:75:
24:39:d3:08:85:ac:e9:4a:a6:25:e8:c7:75:1a:2e:b7:b3:1c:
f4:d4:cb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:47 2025 by rpki-client