Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
File: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft (raw, json)
Hash identifier: 7rgpQkdqUvhElJSuU7b5AcQ4f+aoCrtebNzti0J1Oj0=
Subject key identifier: 8D:0A:C3:81:65:4B:AA:EA:00:AC:01:23:87:DC:AB:D7:15:A4:5A:08
Authority key identifier: 1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
Certificate issuer: /CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Certificate serial: 0194BC3C22E780D2EEAF3C80BC13377B961B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
Manifest number: 04BB
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: 2kfAKgS6rtPxOokQdgiQcFW0Sbc.roa (hash: midqdd826AD6+dmyiJS8kWbnJkkjvvshmNXqoFoo9/0=)
2: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl (hash: nNoUCcLK5m0J6WMqQ4ZaxeJ8+KFTJQekmxGeYh/02aw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:22:e7:80:d2:ee:af:3c:80:bc:13:37:7b:96:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=8d0ac381654baaea00ac012387dcabd715a45a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:5d:9d:92:35:18:69:b5:3d:43:af:4d:3a:
f9:04:92:d5:e2:e3:51:cc:b2:e8:81:18:b1:0b:f1:
4c:6d:a9:b0:67:72:e5:32:d1:8e:ae:f9:b7:31:89:
1a:56:62:b1:8d:0a:24:54:8f:c0:7c:3a:d0:93:1e:
56:85:a3:fa:f2:c1:96:ec:30:7b:10:13:a9:ea:37:
a7:51:f4:37:44:00:67:60:ac:47:72:21:72:1f:00:
71:24:d8:ba:01:e1:92:3e:fe:46:4e:db:7f:67:5c:
df:87:c1:4e:0e:69:63:26:00:bf:5b:f2:10:49:b6:
f3:15:ff:74:40:b0:04:b5:29:bc:b6:7d:b2:18:44:
88:09:d3:5e:71:7a:3b:36:6a:05:c6:fc:b9:b7:ff:
e1:08:98:2f:75:c2:8d:3c:63:f2:54:88:cf:c7:a3:
4b:ee:46:ca:7b:24:a5:d2:81:21:52:00:c4:35:6f:
25:cd:01:7f:f2:1e:11:1d:66:ac:2b:43:6f:8f:7c:
54:e2:16:2d:c1:23:f3:8b:fd:9e:99:84:77:3d:68:
da:a3:54:f3:9f:46:1d:50:08:66:1f:c7:34:f3:ee:
03:d8:37:17:11:e7:d5:08:cc:32:fa:70:32:ca:a5:
60:29:89:f1:0f:81:04:3d:76:14:84:88:85:ac:84:
93:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0A:C3:81:65:4B:AA:EA:00:AC:01:23:87:DC:AB:D7:15:A4:5A:08
X509v3 Authority Key Identifier:
keyid:1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:16:3d:4e:f6:76:95:e2:51:58:47:9f:82:26:89:89:cf:05:
82:c1:2d:06:26:f7:f5:04:77:36:ef:0c:6e:7a:d0:3a:e3:db:
5c:72:43:af:7d:aa:ad:f1:54:20:e5:d3:49:46:4d:67:dd:aa:
d1:8f:76:87:fa:3d:e4:60:d0:04:c8:3e:bf:a3:42:00:c9:0c:
07:da:7c:3c:05:a7:05:f0:af:d5:e2:a7:1c:8c:e0:7e:59:0a:
bb:56:43:ad:3f:76:e8:3b:af:dd:82:d3:ef:85:cf:ee:f8:f1:
2e:59:a5:56:bd:b2:77:cb:42:c0:9d:e1:37:71:be:18:f8:04:
ed:3d:5b:fe:22:de:d9:31:32:60:b2:5e:79:18:bb:2e:95:a4:
5e:99:16:f4:10:b2:74:ff:75:53:cf:b6:72:11:8a:6c:7b:ff:
cb:1c:aa:e2:9e:e6:56:85:cb:98:74:e1:fb:b1:e7:55:15:bb:
23:15:61:8b:d7:7d:3a:01:97:aa:50:0a:93:a1:64:a7:d5:27:
66:ff:b4:f3:33:cc:9e:59:e9:83:82:f8:cf:6c:fc:53:5c:4d:
2e:2d:64:47:89:27:ed:00:33:91:f5:50:63:d8:f6:60:df:8f:
a6:4b:06:a4:7e:2d:1c:c6:9b:6e:77:89:30:db:b2:52:53:6b:
91:c8:18:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:49 2025 by rpki-client