Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft
File: HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft (raw, json)
Hash identifier: oqt1o1kjp/Ka+ziHtCjZIwAt0G6P7+h/3QHvFWjvNW8=
Subject key identifier: AA:81:2A:99:E9:D5:A1:C3:9C:AE:97:64:6C:A5:EC:07:26:3D:75:A1
Authority key identifier: 1F:21:C5:43:84:4C:41:7F:61:AD:79:39:24:4D:3B:75:9C:2A:43:ED
Certificate issuer: /CN=1f21c543844c417f61ad7939244d3b759c2a43ed
Certificate serial: 0194BD17E4A24F1C3C3D3FE0A29F4F68C771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft
Manifest number: 1439
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: DeQFcAAznRKaWbjYYwtHWvAu_JE.roa (hash: GnVFGXqZ+Ydt6iYpHsJ9f6xgYMJ7ccNl+9bHKUUsU+w=)
2: HyHFQ4RMQX9hrXk5JE07dZwqQ-0.crl (hash: Mlp7hFdI2S5h648No2NS1U7649bn0rLscgxZuQyaxqg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e4:a2:4f:1c:3c:3d:3f:e0:a2:9f:4f:68:c7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f21c543844c417f61ad7939244d3b759c2a43ed
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=aa812a99e9d5a1c39cae97646ca5ec07263d75a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:9a:a8:0c:e1:ec:53:3d:42:46:e9:8d:83:
26:71:79:fb:b8:80:0f:9f:11:fd:df:c6:ba:f0:8e:
5d:58:5b:63:bd:4c:aa:44:b1:30:b7:be:ca:e6:87:
8b:e3:ee:e0:91:d0:3e:6d:af:62:36:7d:68:cc:b4:
83:b9:83:b4:3b:85:72:8f:71:44:76:7b:4b:3d:bb:
16:d1:db:9b:16:82:7d:92:8e:09:67:71:6d:e9:f3:
bf:68:97:77:e0:43:ad:83:44:13:0e:8c:e2:12:42:
e7:90:d6:7b:1c:27:2a:f8:88:41:71:2e:0a:8b:20:
53:02:b0:13:c1:c3:1b:b3:d1:01:84:be:cb:ff:e1:
8f:ea:57:84:06:93:4e:6a:09:20:9a:2a:f5:7b:d7:
9c:b8:56:5e:27:14:98:33:b9:d6:c2:a4:36:10:9a:
c9:d0:14:3a:5a:8a:dc:18:64:be:41:4d:86:7f:e5:
64:3a:b9:07:27:f1:ab:59:9e:b7:7f:d0:d0:14:f6:
39:47:dd:ed:a6:d6:34:16:35:25:6e:e1:dd:33:8c:
29:bf:a4:04:e7:ce:cd:56:d6:36:62:a8:43:ec:7b:
76:bb:af:5e:a1:27:06:ad:cc:57:a7:a1:8d:72:40:
9d:be:2e:ee:bf:35:d5:86:b1:25:db:67:08:e0:b8:
df:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:81:2A:99:E9:D5:A1:C3:9C:AE:97:64:6C:A5:EC:07:26:3D:75:A1
X509v3 Authority Key Identifier:
keyid:1F:21:C5:43:84:4C:41:7F:61:AD:79:39:24:4D:3B:75:9C:2A:43:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:bc:35:08:9f:a6:94:67:5f:4b:43:14:96:d1:83:54:25:1b:
2e:31:7d:b8:e7:a4:81:5d:b8:79:b2:a2:fb:ba:1f:3b:94:dd:
c7:d7:af:89:56:c5:5f:3c:17:cb:37:eb:76:63:27:28:60:e3:
0e:0a:d1:ad:0f:da:9d:98:63:94:a6:d7:24:a5:f0:2e:77:61:
9b:e9:3b:5c:b3:e9:39:62:5b:42:ac:0a:2f:c9:59:46:98:d9:
b9:77:7c:78:b7:9c:06:44:e0:64:be:96:55:29:a0:92:a0:ca:
4f:5f:13:44:82:4a:55:47:69:fc:1e:38:f1:b2:28:e6:c6:19:
49:af:97:f0:a7:d4:5a:aa:94:99:19:8c:fb:e0:ba:99:44:b6:
fd:52:37:4a:f5:2d:e5:7e:a1:92:22:62:0a:9e:ae:27:ec:11:
02:a5:fe:49:1b:40:73:35:22:cd:10:b7:9d:91:16:85:49:42:
8d:9e:b8:8a:85:2b:f8:68:dc:7a:5d:73:39:19:d9:4f:9f:cc:
7c:1c:41:a8:7d:08:d7:bc:bd:20:9f:06:ef:c3:96:98:8e:1d:
71:c6:fa:e4:48:66:a5:9f:b8:8b:fa:ec:9e:2e:7f:08:17:f2:
b1:3d:ac:af:d9:c7:dd:46:37:7b:04:46:20:f1:c9:6a:05:a3:
66:42:59:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:17:59 2025 by rpki-client