Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
File: HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft (raw, json)
Hash identifier: wd8Hs9ueKNDUHyRGl9nyLhXn3nZow1EZs1UoaBTzXMs=
Subject key identifier: 3D:E8:48:B9:D1:C5:01:1D:89:FE:80:B2:94:23:08:58:42:9B:2D:55
Authority key identifier: 1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
Certificate issuer: /CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Certificate serial: 0194BC04D8CD491441121A264394DDA651CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl (hash: p8Ber9v1WnPr90CY48NMb/LXfmde2cbNH8Azg0Mtuqw=)
2: S8E-qbm1BXEqIdetmmA1nZNgj7U.roa (hash: 3uwA4cyu+agvPaXd967UOebPOsNVk53AsWpnmfz8XsE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d8:cd:49:14:41:12:1a:26:43:94:dd:a6:51:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=3de848b9d1c5011d89fe80b294230858429b2d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d7:65:34:40:5f:08:c5:e4:1b:2c:f6:d9:47:
9e:39:97:5d:e9:50:2f:c3:40:f6:2b:ed:9a:46:fe:
07:f2:6c:92:e8:50:b7:f1:cd:cb:7b:f4:ef:2b:12:
64:ef:3e:55:d7:df:ea:8b:8e:58:94:a5:f1:60:0f:
ab:59:3b:ee:61:05:0f:74:99:42:3d:0d:cf:0d:16:
fe:60:a5:d5:f1:70:dc:8c:b5:b1:18:df:2d:63:59:
d1:3c:64:50:92:77:42:85:8f:5c:38:ae:34:a8:f2:
62:11:a5:00:5b:5f:72:f9:94:fc:16:42:e2:f5:fa:
bb:97:86:74:57:ee:46:c7:a1:f2:24:19:92:75:15:
a8:79:b6:f9:82:c2:ae:00:05:4f:b0:82:7d:68:f5:
9b:eb:8b:61:a2:48:f8:6d:b7:0d:28:58:77:35:84:
67:ed:08:9c:b9:d5:4e:03:aa:67:d8:aa:bf:a7:69:
7f:b8:f4:43:4e:fa:a2:ca:3d:6e:4a:f8:d1:79:9f:
41:94:3e:eb:eb:19:84:6e:fb:fe:44:73:be:1e:67:
06:30:3f:2b:96:bf:8f:c7:6a:4f:37:d3:ca:2b:ae:
44:fd:f0:2e:cd:2f:78:5c:cf:57:0a:32:ec:60:ec:
d2:22:51:66:b9:c2:b6:54:2e:5a:6b:eb:0c:fe:3c:
c6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E8:48:B9:D1:C5:01:1D:89:FE:80:B2:94:23:08:58:42:9B:2D:55
X509v3 Authority Key Identifier:
keyid:1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9e:6f:fe:2d:56:1d:0e:2c:75:26:85:62:34:96:21:a3:7c:
48:1e:8b:d6:6e:14:1d:30:04:6a:aa:be:a8:c7:08:fb:50:43:
cb:8c:05:a1:6c:bc:06:2c:c0:56:af:33:01:1c:5a:b0:79:bd:
b3:c8:7a:1c:21:22:50:36:0b:2a:8d:15:1e:14:5a:45:db:d7:
bd:9c:31:2a:31:7c:a5:03:52:7e:ef:ff:28:90:49:25:9c:e4:
5e:7a:27:98:86:60:ac:68:24:c0:53:a3:f2:35:87:cd:4e:32:
43:d2:98:a3:ce:77:0f:74:e9:de:ff:8e:aa:c4:4e:c0:e8:df:
91:76:f7:9c:54:22:22:52:af:5f:6c:e7:e9:b6:8f:46:3d:d3:
e8:06:85:61:6c:8d:5f:04:82:86:df:13:7f:5a:30:cd:a3:13:
97:4a:8b:62:4e:78:b1:c6:a6:b8:9c:a8:cd:00:16:04:21:00:
b6:32:fd:b3:23:b9:57:ec:18:ee:5b:31:a3:cb:c5:ff:5c:e9:
b8:a5:55:b9:49:3b:3e:7a:1f:90:12:2c:f7:f0:f0:5b:2f:ea:
be:c9:5b:cb:45:56:6f:d9:68:3b:b0:9c:93:25:9c:f2:9c:05:
00:a5:56:2d:2e:36:ea:dc:c1:ad:7f:c0:e4:ff:c1:50:34:75:
1e:0b:c8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:24 2025 by rpki-client