Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
File: HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft (raw, json)
Hash identifier: +hCbUrUOKWRmSOtC75OkZPX/sS4OsV6mggLaVWzOgwI=
Subject key identifier: E0:6A:C4:78:04:67:C7:60:5D:A0:5B:45:84:9C:37:AC:5F:E9:25:54
Authority key identifier: 1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
Certificate issuer: /CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Certificate serial: 0194BD4E8795F93B36F0E690CE8862FAC2B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
Manifest number: 116B
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl (hash: Z8fR0uInYDhKqZpjq5K3o8smgSuCXBZkmXO5ICb+nDc=)
2: aW4RufV84k31ipqteYJMKE-MWns.roa (hash: TaIvFNKhSLJsRmqi1+QKHEIHNXDSbVD+wo6DE/PVLR4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:87:95:f9:3b:36:f0:e6:90:ce:88:62:fa:c2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=e06ac4780467c7605da05b45849c37ac5fe92554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:31:d9:4d:31:d8:83:12:47:ea:99:67:a0:4d:
63:bd:3a:c5:ac:d7:1f:8d:02:dc:f8:da:6c:1c:08:
2d:6b:e1:73:69:10:80:5e:14:24:de:3e:c6:40:a9:
d7:9a:a8:3b:63:6b:72:f2:16:e3:01:4f:c3:7c:7c:
25:bb:01:24:13:72:d9:a9:7c:b1:09:fb:95:00:f1:
eb:f7:a4:0a:f0:5d:8d:08:6a:71:25:07:0e:b1:70:
7c:d6:2d:24:51:ef:4d:72:22:ea:9d:c0:8e:49:ed:
7e:df:52:07:7c:4f:dd:77:64:07:98:f2:d1:c3:f3:
cc:a8:8f:5e:5e:78:c5:79:6a:94:fe:29:21:8b:57:
3f:24:15:1d:f3:6a:96:d2:de:ed:75:77:62:20:8c:
47:f1:02:db:2a:4c:6d:55:40:82:d5:e9:af:e3:4c:
80:94:30:1e:bb:f0:7a:aa:3b:ff:4d:a4:f9:93:5c:
cd:a5:d2:81:58:ca:80:7f:44:af:11:37:d5:32:28:
27:49:df:8b:4d:05:8d:dc:43:6e:b7:a0:d8:99:9c:
5f:cf:ac:d6:3f:59:11:28:6f:4f:62:cc:56:19:99:
59:49:ee:d6:eb:a1:04:84:1f:c3:42:f4:3a:3b:b1:
a6:f5:de:22:b6:17:d7:2c:56:29:48:61:0c:f0:fb:
c8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6A:C4:78:04:67:C7:60:5D:A0:5B:45:84:9C:37:AC:5F:E9:25:54
X509v3 Authority Key Identifier:
keyid:1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1c:f7:c9:e1:d9:f9:84:95:e7:ab:d4:01:8d:f3:dc:76:38:
60:bc:84:f6:94:ec:a1:30:9e:98:fa:0a:c5:4a:78:a4:03:f8:
dd:d1:ec:a2:e9:94:31:41:13:63:e6:64:29:7d:5a:21:0a:d1:
4b:88:08:ad:dd:fc:cd:69:24:15:2f:c1:b3:3e:fe:2f:42:65:
e5:d3:fe:6b:3b:bc:26:88:82:3b:f6:5c:59:68:c1:40:a8:e5:
dd:f4:e0:2a:27:c6:7d:fb:ff:74:f7:62:cc:89:ac:7b:62:ff:
28:b8:31:9d:0b:b9:55:1f:ee:b7:e4:ba:b7:02:7b:48:11:c9:
86:e3:54:69:3d:15:7f:9e:e2:14:12:03:d2:85:d3:15:11:ae:
8b:86:5c:e5:08:dc:24:e4:77:ab:84:09:9a:37:4a:f9:61:28:
c8:a5:3b:55:ab:f9:2d:ca:f0:0a:ba:f8:d8:d9:8f:2c:eb:f9:
b8:cd:74:0a:96:3e:ad:f1:80:15:5b:21:ee:0b:f9:1a:b1:f7:
8f:e1:b4:71:92:e3:52:c2:03:09:59:87:a0:11:06:73:42:3a:
06:92:12:be:fe:1d:5b:1e:37:35:a0:c4:00:82:2a:17:e8:1b:
42:0b:5b:46:d9:fb:60:0f:7e:87:8c:49:ff:61:37:35:c0:97:
8c:00:43:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:32:41 2025 by rpki-client