Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
File: HRV4JMY4xxige1NeDYJMskr8Bww.mft (raw, json)
Hash identifier: rY7xe4RH8XHtnkUgAyY/nd/JcVsq7lzvJyA1Npp83n4=
Subject key identifier: D2:04:07:74:71:06:10:F1:B2:E9:CB:83:EF:E7:00:6E:78:32:F2:7B
Authority key identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
Certificate issuer: /CN=1d157824c638c718a07b535e0d824cb24afc070c
Certificate serial: 0194BBCE2701500CB7D860A4F99C82F0817F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: DQA5wbdLSEm4_F0k0CrcOYfl8nk.roa (hash: nSw+Z2r+tEaSc2AQgef90FTr8oKptJDQ2v6jPAQnhGM=)
2: HRV4JMY4xxige1NeDYJMskr8Bww.crl (hash: oKhLJeZy+fMN1yMNzmauN5P7cKn8XMOz24RQSdMEjM0=)
3: HuQWl8CvzbCRxNpw5HY0jCj3ToQ.roa (hash: XR9eo2BAwqzrJQjS2GXKNqFXgZew/uNp0g76elzf6UI=)
4: q-KsgHc87yurkiTPrGB6_ENn-Sg.roa (hash: cFavBWqarVDA4XfAipmh7/d8krk6AEiGb/atvWyd1pQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:27:01:50:0c:b7:d8:60:a4:f9:9c:82:f0:81:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d157824c638c718a07b535e0d824cb24afc070c
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=d2040774710610f1b2e9cb83efe7006e7832f27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7b:55:cc:a6:c9:50:ca:60:20:38:b3:25:6d:
10:c8:b9:c6:17:f2:bb:27:ba:0e:70:58:f5:40:c9:
3f:04:b4:45:8c:16:88:32:4e:d7:20:24:08:4c:c3:
48:83:c8:a1:78:04:84:af:59:31:f2:1d:92:3c:ab:
d4:67:21:11:89:a7:5c:25:c5:37:a2:bd:81:85:2f:
25:73:a3:70:50:cf:a4:6a:ef:22:ad:c0:9d:8b:76:
e6:c7:19:23:a4:fc:35:98:2e:e8:00:1b:e8:e8:f0:
87:f0:eb:0d:59:53:29:83:24:10:7a:35:3e:b7:36:
61:91:96:3c:ed:78:d6:2a:c5:18:70:d6:de:1d:0e:
9f:de:0b:50:25:29:54:10:59:55:06:96:69:a8:ad:
6a:f2:ec:84:e6:64:c1:16:fc:c8:69:d7:99:c1:cb:
0a:47:d9:4b:eb:da:aa:ff:61:2e:66:e8:6d:5a:60:
41:9a:3d:56:87:68:75:d4:c7:e7:85:c8:7b:ba:bf:
cd:e0:c9:25:8c:7d:40:39:0d:34:dc:1e:fe:9a:7d:
ca:04:f8:54:00:2a:eb:f6:90:36:55:8b:a4:ad:ff:
55:e1:f1:ff:fa:86:39:99:20:6c:17:3d:67:11:97:
6f:50:05:4e:94:7d:eb:fd:d0:d9:28:ca:a3:0b:12:
cb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:04:07:74:71:06:10:F1:B2:E9:CB:83:EF:E7:00:6E:78:32:F2:7B
X509v3 Authority Key Identifier:
keyid:1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:20:00:07:9f:00:42:55:ef:cb:c6:43:8e:c0:2f:47:39:95:
ab:66:82:57:f1:f8:61:ac:c8:a6:df:7b:58:45:12:5f:08:d1:
40:0a:c1:de:61:c7:06:9a:9a:aa:3c:2a:99:a3:be:71:e1:2f:
9f:10:21:de:0b:0e:97:3a:54:58:a3:22:45:4e:e4:6d:95:6f:
5e:1c:0d:51:dd:40:7c:4c:55:06:83:de:38:8d:76:86:2d:f7:
74:da:d2:f9:b3:7a:8d:fe:37:61:c4:cf:6f:34:9e:c3:48:6b:
e4:1f:7b:b2:31:8d:19:64:d6:3c:ec:f2:fc:a5:22:56:0b:86:
28:19:7e:27:a6:e2:56:48:22:07:c1:d8:73:e4:3a:6f:6a:8d:
8d:aa:12:5c:f1:44:9d:75:cf:c0:fd:21:43:2b:85:1e:a7:6a:
80:42:df:bb:55:03:5e:4b:e0:8e:47:4b:bc:c2:5f:9b:99:e9:
f7:ae:78:68:a7:4c:51:1c:90:22:33:56:86:91:91:a1:81:3a:
46:28:05:cf:8e:65:23:bc:24:3b:ab:2b:01:ed:6d:fd:3e:7d:
86:14:9e:43:d1:9b:37:08:b6:49:38:5a:22:e8:ee:ce:56:f9:
de:c1:dc:f8:a7:03:46:c3:2c:fd:98:9b:63:43:4a:80:33:ed:
42:f9:0e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:52:20 2025 by rpki-client