Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
File: HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json)
Hash identifier: Z/xEBebM07kO5r4Gr/LSbTpyl1IfOvfJJiTC6CYK9rw=
Subject key identifier: 32:CA:C2:DC:CD:4C:47:F4:6E:65:FD:71:77:CA:5B:09:4E:8D:A1:2D
Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Certificate serial: 0194BD4E9A1E8916C8AE443171FF21CE9CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
Manifest number: 1294
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: pc3+GmCk0wH9tTM6u8bkCyI2KSmgXfaTttngzEf14Ic=)
2: tgyZkzPX7bihftRh5146EqjAV6A.roa (hash: L1eC4dA0U4fTfxsmRjGD9jUtXUFmiIJqlEhkJQO47Ck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9a:1e:89:16:c8:ae:44:31:71:ff:21:ce:9c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=32cac2dccd4c47f46e65fd7177ca5b094e8da12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:4d:b9:23:24:e4:a4:6c:18:36:e1:6a:c5:
a7:1e:95:4c:75:11:11:1b:29:f0:8d:74:73:70:8e:
3b:8e:65:25:d5:15:ed:5d:c0:31:56:69:7e:46:92:
5f:eb:6f:0c:5d:4f:4d:1d:75:43:16:95:23:eb:03:
d4:63:af:fd:16:2c:75:c5:49:bd:76:f3:e4:73:42:
b0:66:c3:c3:9c:96:34:ea:c8:ff:4c:ff:31:dd:34:
e9:e8:b5:8e:ac:78:82:85:40:69:82:44:a2:df:22:
dd:02:26:b0:e2:9d:c7:a1:9f:c5:8f:20:c0:bf:2f:
52:da:5d:2e:cf:b8:ae:a2:92:87:91:a5:74:86:eb:
80:d6:cd:94:51:8e:ac:e8:de:ed:3a:63:39:58:07:
c8:25:81:7d:f6:3d:64:ce:d5:15:de:0b:dc:61:ae:
d9:ca:e3:da:37:04:db:56:c3:39:de:97:e9:f8:6f:
d7:24:74:46:b9:17:bf:68:5c:01:7b:19:e3:8e:eb:
55:a5:6e:0a:8b:21:15:fb:89:6d:ce:f5:b9:e1:fa:
34:1d:64:4d:1c:9b:de:b3:72:91:f6:e8:ed:4e:fd:
66:a2:c8:e9:de:03:19:9c:67:9a:b9:34:94:71:7b:
cd:b2:1d:5c:73:eb:23:d8:3b:c5:7c:de:cf:2b:0c:
ff:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CA:C2:DC:CD:4C:47:F4:6E:65:FD:71:77:CA:5B:09:4E:8D:A1:2D
X509v3 Authority Key Identifier:
keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:cc:eb:8b:2c:7a:c0:52:44:a9:9b:4e:75:52:ee:89:41:fd:
b3:cc:09:06:bc:12:9d:d2:e9:6f:4c:73:ee:e0:09:4c:84:52:
8f:7b:32:0e:04:8a:45:52:ff:73:96:ce:24:4c:d7:f2:ea:91:
7c:9f:14:89:a9:b0:71:ca:ea:0c:1a:f5:11:2f:f8:c0:0f:17:
1f:98:0b:dd:2a:30:62:9c:b6:17:82:f8:b7:5d:71:c2:5f:b6:
f6:08:3f:61:8a:71:07:bf:ed:b1:79:51:15:20:fd:b8:5e:65:
e6:de:a5:49:cf:f8:85:a7:24:02:02:f0:75:38:ad:b5:26:f8:
bc:fd:d4:6d:cb:2a:36:60:05:c5:96:ec:47:30:40:d2:b4:db:
15:d5:77:04:15:a8:47:90:c8:3b:a4:0c:c3:bb:c8:00:b9:89:
4c:5f:35:de:5d:c7:6b:80:7c:0d:1a:47:b9:af:d5:a6:ec:5f:
2b:6a:9e:05:cb:a4:b4:7b:98:8f:12:27:0f:5c:7a:4b:fb:96:
44:57:70:08:ce:ab:ea:a7:a6:c4:81:22:bd:b3:8e:c5:10:0a:
1f:f3:45:b1:8c:96:77:a9:23:50:22:27:c6:95:48:62:c2:67:
a1:da:f4:04:5f:f0:0c:48:72:df:bb:e8:0b:30:6f:2c:81:05:
58:7c:c3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:28 2025 by rpki-client