Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
File: Hi6q16hwZhXRyENtzgGVSV8hSoc.mft (raw, json)
Hash identifier: hhn5v3qkuh/x/qVMHNy7jCtCMWt/60eY7A2heXoSw64=
Subject key identifier: C1:E7:10:81:96:3B:5E:22:A1:47:A7:66:F1:8D:47:FB:C8:16:8B:4D
Authority key identifier: 1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
Certificate issuer: /CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Certificate serial: 0194BC72B3ECA9388A933DA23A94E84819C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
Manifest number: 07C2
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: 1qUuzp1BSb73YBxt2G1-L71RBo0.roa (hash: RsoVHiN4hMhxH5nMDIM8Pr6yKP0XCEu41kBjnTbcTNQ=)
2: Hi6q16hwZhXRyENtzgGVSV8hSoc.crl (hash: cF0Wgx0TebdC2ezeqHkguylAVKMCnEcUe1/yek/6YJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b3:ec:a9:38:8a:93:3d:a2:3a:94:e8:48:19:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=c1e71081963b5e22a147a766f18d47fbc8168b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:9a:4f:10:1f:df:5d:47:3f:d1:b2:d4:f7:
d3:d9:c4:b9:81:a5:5f:1b:eb:36:a0:19:67:9d:7a:
09:f9:6f:a0:a2:a0:b8:6f:94:a4:42:a2:7c:28:cd:
bd:92:a8:7a:a6:01:46:d8:97:59:a8:3c:80:9a:80:
8f:6e:91:dc:a2:3e:38:45:d7:9f:e1:83:34:fc:3e:
af:9f:9f:c3:9e:2f:47:9c:da:71:f0:fe:db:b8:bb:
04:a8:ef:35:df:09:d2:f7:44:3d:90:d4:72:25:5b:
4c:d1:db:b1:fd:eb:9a:e3:a3:d1:47:ed:ba:15:dc:
11:2e:c9:86:77:5a:c2:62:8f:5f:1b:d4:ff:40:bc:
85:b8:ef:51:34:84:20:d9:23:c9:e7:dd:79:73:9a:
07:d1:d9:ad:7f:1f:a3:6c:c1:d8:6c:fc:30:14:6a:
fa:31:3e:a8:e8:2c:4d:39:e4:62:fa:a3:6b:12:84:
ee:95:6f:85:f2:18:77:53:13:dd:50:9c:cf:9d:68:
8a:89:3a:dc:69:f9:9e:25:98:34:d1:27:d5:36:c9:
0d:f3:13:fb:70:8b:d4:25:8f:80:0c:9a:d6:a1:be:
94:f0:78:bf:73:a6:a2:22:28:f0:87:f8:0d:d8:f8:
31:28:0b:52:a0:37:8c:3a:bd:4c:a9:56:3d:61:b1:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E7:10:81:96:3B:5E:22:A1:47:A7:66:F1:8D:47:FB:C8:16:8B:4D
X509v3 Authority Key Identifier:
keyid:1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e5:b7:61:91:40:c2:c0:19:8b:96:d9:c0:fb:3b:80:76:a7:
de:9a:71:aa:89:d0:a9:e5:1c:24:3a:d1:f7:af:7e:47:15:fc:
0e:bb:a4:82:a3:20:d8:6f:df:1d:ed:6a:d1:70:2b:f7:58:e3:
99:7c:61:e4:92:79:fe:60:ac:49:21:b6:31:94:26:4c:79:95:
0d:80:e3:58:13:77:55:c6:d2:8f:a6:40:db:24:47:9f:cd:c7:
4b:2c:14:02:e5:3f:31:4b:ac:b2:6c:a5:2f:66:f0:7e:5b:00:
db:e2:0b:69:fe:23:80:c0:f0:43:c3:81:03:44:d4:a6:84:58:
62:2a:b1:df:6b:77:3a:52:5e:6a:8b:6a:8b:86:b8:ff:cc:9d:
5c:f8:8c:ae:a9:39:06:d2:b9:76:f0:4a:7a:e4:15:e8:c0:14:
90:c2:29:f4:16:fa:4d:8f:6f:7b:42:64:f5:a3:6e:a9:ad:5d:
02:8b:a4:b4:ab:c0:50:1d:09:f2:97:02:62:62:dc:ae:2c:26:
03:72:a1:f4:3c:9c:5b:2e:38:2c:1b:5d:d4:0d:b0:f5:bb:f3:
99:4c:ba:b3:a9:83:89:0a:c6:c3:57:9e:fe:68:a3:c1:d1:eb:
47:b9:35:0d:42:28:fc:d7:1e:44:5f:80:89:6e:c4:16:2f:ec:
8e:31:6e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:42 2025 by rpki-client