Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
File: HgUGRdac54HkkMDzxJle5tTmB4s.mft (raw, json)
Hash identifier: ZUi6r5rfz/Szeu9M0r+pz6xlUwAUtX0RmPFuG6gugoU=
Subject key identifier: 31:F2:98:F5:13:D7:15:42:4D:76:1C:27:3B:76:94:34:F5:D9:D7:E7
Authority key identifier: 1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
Certificate issuer: /CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Certificate serial: 0194BC3BDDA9C61FD9ABCFBFF38782E111E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
Manifest number: 0604
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: Cng8TcnIXSMG5gaf3EVbnwwbQjk.roa (hash: SlPAu0/v+q9AU8NTLPmY4PB0nlmzfGz86P4I7oW5+Ns=)
2: HgUGRdac54HkkMDzxJle5tTmB4s.crl (hash: OXnpVoBV1PxA7dhazD1kPbynut3t1xx/PLJpkQoRGDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:dd:a9:c6:1f:d9:ab:cf:bf:f3:87:82:e1:11:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=31f298f513d715424d761c273b769434f5d9d7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a2:7a:a5:33:09:0d:26:8b:2b:2f:49:35:6d:
4c:43:bc:46:30:d0:37:54:bf:72:86:2e:a4:9e:44:
2f:a6:40:51:49:d2:d7:5b:91:4e:54:bf:ee:a0:15:
e5:96:30:02:87:89:30:95:83:2e:9f:fb:e7:17:db:
ca:74:f0:b3:0f:01:58:59:2a:53:37:eb:f4:2f:21:
1d:69:0f:e8:19:08:95:0f:13:1f:22:b1:4c:b9:38:
b8:b4:1d:ff:16:ae:71:4c:3b:8a:0f:cf:b0:a7:a7:
a7:47:4a:4c:ce:79:79:72:63:75:f8:47:9d:07:12:
4e:8e:7c:7b:ae:72:33:f2:15:3b:eb:6f:c1:e5:83:
a1:8f:a6:5b:fc:2c:ec:5a:1c:07:ad:66:ef:4a:a5:
ab:cd:ff:fe:9b:52:26:6e:83:de:14:a0:38:35:71:
d0:4e:51:4b:1d:fe:d3:92:04:17:12:9d:62:9a:df:
70:1d:89:be:0e:d5:5c:ae:ba:59:8f:14:54:02:6b:
e6:9b:d1:e1:96:f5:e8:f1:7a:d9:fd:4f:d8:f0:76:
fa:15:a6:d6:cc:79:42:fe:ef:0b:65:d8:0d:06:b4:
f0:40:09:91:4f:04:53:14:4e:97:4b:89:53:68:f5:
0d:84:c4:b1:15:75:f3:4f:38:87:ae:70:21:4c:7f:
34:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F2:98:F5:13:D7:15:42:4D:76:1C:27:3B:76:94:34:F5:D9:D7:E7
X509v3 Authority Key Identifier:
keyid:1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fe:96:a8:d3:69:8d:46:80:1d:88:e2:51:94:16:2b:71:29:
9c:a3:6f:f4:82:5d:8f:79:f9:cd:78:9b:a1:2b:fb:d2:6e:35:
cf:a8:39:92:24:8f:5e:6f:c2:20:6e:24:3a:72:95:d8:14:fc:
a7:96:ed:cd:8a:45:b3:a2:33:62:db:a3:44:9c:66:73:f4:b6:
79:7f:50:d0:a2:f8:7c:44:e9:d0:01:5b:ca:86:dc:52:d1:de:
29:70:45:f6:62:c7:59:34:c9:83:1c:5d:84:28:55:b9:bc:54:
6c:a1:87:9d:e2:da:80:cb:ff:5a:de:3e:b3:86:d4:6d:0e:f2:
3c:e4:9d:47:ba:51:7b:1b:c0:df:29:1e:c2:bd:5b:24:c0:10:
b8:3a:ae:97:8d:e5:91:cb:2a:68:1c:f5:79:60:61:09:c1:65:
65:13:7c:2f:4c:e5:8a:38:f7:a2:33:1f:a9:cd:fe:31:03:a7:
7c:7e:de:e4:7f:33:60:9f:28:ae:e7:94:44:d1:10:9b:9a:18:
1f:01:cb:0e:2b:50:78:43:e7:9c:84:5a:83:39:ac:53:35:ed:
dc:b1:e1:2c:64:54:48:bc:fc:14:78:ba:ac:79:0f:eb:c4:9d:
f5:7c:27:69:60:5e:73:ba:29:8f:db:c2:be:8c:e1:9f:55:31:
9d:c3:00:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:13 2025 by rpki-client