Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
File: Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft (raw, json)
Hash identifier: HyH/vmdS1hx6aLiFVFX3q3al5SSaIhFLqzZVL6RQbiU=
Subject key identifier: 17:67:1F:04:AF:8F:4B:DA:89:C2:B1:11:EB:18:20:A3:DE:B0:BE:E0
Authority key identifier: 1E:47:E2:BF:39:74:72:1E:AF:BF:B8:C3:1F:C5:27:30:39:D5:05:F3
Certificate issuer: /CN=1e47e2bf3974721eafbfb8c31fc5273039d505f3
Certificate serial: 0194BC3BC83CA00F420CEA9AD24AAA9ED1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
Manifest number: 0A58
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl (hash: Rs3aEHkSpUkyjG6+u4Yv53FZiXjR7deSYohzwafQsFo=)
2: oaQkn5zr2sFy17og-aVMkuLXdds.roa (hash: VtZ3pTO5W1yzA+ps5HMSQhypm611YNtn0vckyLuCUAI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c8:3c:a0:0f:42:0c:ea:9a:d2:4a:aa:9e:d1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e47e2bf3974721eafbfb8c31fc5273039d505f3
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=17671f04af8f4bda89c2b111eb1820a3deb0bee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cd:ae:a3:a7:da:91:2c:09:f1:d3:a3:9f:98:
a0:1d:01:aa:6b:e7:b1:fb:e5:03:fa:09:45:63:af:
1b:e8:14:75:5a:1b:f0:4d:da:9a:62:9d:77:ed:03:
db:6a:0c:c4:96:49:f3:c2:92:b6:98:df:6b:26:0b:
1f:fd:3b:bc:a2:58:39:f1:cd:c7:5d:be:b7:b3:01:
15:61:7d:43:85:a9:f9:c7:1d:7f:b8:d0:b3:d9:01:
5e:9d:d9:36:20:1e:b0:8a:46:07:b8:61:96:d9:96:
49:0e:c5:2e:3d:f2:54:6f:4b:66:54:29:59:0e:99:
96:1a:cf:04:87:87:38:f3:6c:80:68:cd:56:ab:b8:
e2:8f:f4:5c:44:ef:f6:f5:e1:67:95:58:37:be:fc:
7e:79:51:2f:8e:03:18:4b:09:14:39:7e:33:c6:b3:
c3:07:db:40:f6:0f:4f:0e:b0:57:bc:ee:0c:5a:dc:
57:53:d4:38:05:a9:fc:91:05:11:b4:32:ef:13:5d:
c5:6a:0b:4b:14:31:b4:31:07:0e:9f:ba:44:7f:90:
34:71:e0:4f:64:9f:38:35:5d:52:1c:e9:bf:67:df:
aa:7c:c6:15:ac:ee:ed:0c:b0:57:e8:4b:b1:68:28:
15:12:ff:18:90:15:8b:92:e6:03:e0:35:35:6c:c3:
19:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:67:1F:04:AF:8F:4B:DA:89:C2:B1:11:EB:18:20:A3:DE:B0:BE:E0
X509v3 Authority Key Identifier:
keyid:1E:47:E2:BF:39:74:72:1E:AF:BF:B8:C3:1F:C5:27:30:39:D5:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7e:f9:ff:98:64:26:6c:31:e3:f4:5b:b2:dc:af:50:92:e3:
59:89:f4:b8:f0:c0:75:9a:9d:66:6d:fd:38:b0:af:ff:73:20:
79:e4:cf:76:8d:41:e1:44:3d:40:b3:6e:94:5b:58:96:5c:63:
44:4f:87:ea:bd:ec:67:4a:db:0d:a6:bf:23:1e:e6:b1:f1:18:
37:03:95:9b:09:70:17:99:c2:dd:6f:01:af:d3:12:7e:94:c2:
a4:fb:9e:df:b8:b4:4a:5f:a5:14:fa:ff:a3:d3:e3:6b:7c:2d:
39:20:e8:bc:43:87:55:c8:0c:9c:dc:98:f4:87:e9:34:f6:27:
24:e0:07:1d:33:82:b5:02:ed:0c:c0:60:04:3c:39:de:8b:f7:
88:9e:40:64:c7:13:67:39:a1:ac:7d:fd:c8:84:77:91:16:f7:
b5:4f:f3:33:ad:e6:a9:33:a8:a4:2c:4b:f3:c5:de:8e:3c:9d:
24:f0:9e:f7:28:2a:18:a1:ae:de:11:94:e5:10:7c:ec:61:2c:
1c:35:7a:d3:11:f6:da:a9:dc:74:fb:8e:24:3c:a7:1f:34:5e:
74:83:3e:97:88:6a:a7:65:24:48:3e:3d:4c:5e:b5:eb:37:50:
c2:ae:b5:d0:e9:58:18:21:c4:b9:cb:d0:9f:59:1f:c1:f0:fc:
69:2a:40:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:19 2025 by rpki-client