Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
File: Hsub1e2W5p3aj8Kh_gIUetro9xM.mft (raw, json)
Hash identifier: YfOFfeXLzkmaaCAIy1hIKQl08aliD2gs348LSdDKLgs=
Subject key identifier: 89:7D:84:B2:91:A4:FF:56:BA:52:8E:B0:F5:F2:EF:1D:6B:CB:04:8B
Authority key identifier: 1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
Certificate issuer: /CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Certificate serial: 0194BD17EDB6654D4B820A75A931E7E0173B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
Manifest number: 02A7
Signing time: Fri 31 Jan 2025 16:00:49 +0000
Manifest this update: Fri 31 Jan 2025 16:00:49 +0000
Manifest next update: Sat 01 Feb 2025 16:00:49 +0000
Files and hashes: 1: 2IUVrUcX57wEcebuPBNhbM7rtII.roa (hash: xFARryMWCZ7xJebZzJ48q6NyTNbF+EONupkOj48G4Zc=)
2: 3mgL5kmPTE1KzgmolBjYNrOCQw4.roa (hash: 4p0hGsG00DucWMHppeS8f+vIw114RVg7ok5Btqh+zyQ=)
3: Hsub1e2W5p3aj8Kh_gIUetro9xM.crl (hash: H89LGgpMIk7ZMTg1IKq1amcxwhOEl9U/E0zEr0klX3k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ed:b6:65:4d:4b:82:0a:75:a9:31:e7:e0:17:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Validity
Not Before: Jan 31 16:00:49 2025 GMT
Not After : Feb 1 16:00:49 2025 GMT
Subject: CN=897d84b291a4ff56ba528eb0f5f2ef1d6bcb048b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1e:57:71:f4:10:5b:75:ca:96:57:61:8a:2a:
36:15:f8:73:d8:80:2f:0f:c8:d3:14:4a:56:47:2a:
88:df:33:4c:92:2b:39:ed:f2:24:70:2d:45:2d:f7:
38:15:23:ad:cd:50:8f:fd:dd:2a:bb:29:bf:04:4a:
23:d8:34:36:f5:95:ad:c5:18:ce:ef:57:49:fb:6a:
40:e1:3e:3d:90:ba:31:cd:7e:33:64:32:2f:e8:f6:
bf:4f:5f:aa:87:d5:0a:ed:75:52:3d:a7:f2:8b:78:
8c:09:d2:2a:bc:31:b9:45:a6:44:4d:67:d4:d1:9f:
92:78:dc:d0:a7:bd:cf:79:60:6f:54:2e:47:68:fa:
3a:e3:06:69:e2:d4:85:f2:d9:75:3b:ab:f2:00:81:
6d:13:28:95:38:ea:64:61:89:2c:c6:7d:1a:7b:4f:
20:5f:52:51:77:79:ff:dd:16:ad:8b:36:04:d2:30:
5a:11:43:f7:fa:99:a5:d1:24:e5:7c:dc:21:46:6b:
17:3a:bc:2f:2e:10:aa:64:ae:f0:13:c9:04:c6:7f:
32:d7:88:67:6a:87:2a:d4:94:73:61:1f:98:d2:d6:
1b:8a:57:23:7b:90:f9:2b:ec:19:9f:87:a4:c4:ef:
72:bd:09:5a:0b:7e:2b:82:f5:ab:8f:2e:cf:ee:40:
34:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7D:84:B2:91:A4:FF:56:BA:52:8E:B0:F5:F2:EF:1D:6B:CB:04:8B
X509v3 Authority Key Identifier:
keyid:1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5f:83:23:8d:0a:73:e4:01:55:b4:f4:2e:d6:ad:8f:10:a4:
f5:4b:ce:d3:c7:e7:31:5e:ae:0b:49:2c:61:ab:3b:7b:b0:f9:
13:0f:f3:15:6f:99:dc:40:6f:8f:38:a8:8f:ae:94:42:1c:82:
95:e7:1e:6b:15:58:ac:de:95:bb:5b:be:e9:34:4b:93:83:51:
68:5c:87:ad:61:79:4d:02:5d:2b:d2:be:a2:ec:fc:34:1c:df:
04:ab:f1:48:9d:25:61:98:f5:40:ac:a9:09:e7:0d:46:da:85:
4c:a5:6f:1c:51:fa:4b:7b:ac:8b:79:2b:30:ce:f3:85:72:02:
54:95:89:bf:55:db:ed:4d:7b:cd:07:69:50:53:b8:5a:1d:20:
a5:b4:d5:81:2a:88:93:49:00:84:73:5e:08:cd:b5:19:19:90:
62:c8:9a:77:ea:d4:a9:7f:80:2d:a8:1e:22:87:e1:a5:63:e1:
6a:cd:3d:38:aa:44:8b:03:9b:b2:1a:d4:d2:92:ca:6f:44:d4:
71:b7:34:73:b0:86:fe:35:de:77:18:ff:fb:3b:d2:98:a4:58:
51:8d:fc:24:3f:86:bd:ac:e1:f3:ed:38:f4:3b:8f:32:40:63:
47:f0:e4:9a:a2:51:70:4f:c1:2a:ee:25:c7:14:fa:ce:6b:25:
97:ee:33:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:51 2025 by rpki-client