Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: Uxgp5tDeiTpOvaTh4higl+NOte6tk6NFRup1rxLGo5o=
Subject key identifier: 3A:E1:51:D4:C6:0D:3D:D3:E3:D7:89:BC:32:EF:B5:A3:4E:4A:9C:46
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 0194BC3CB5F661E228660325AC4FCC4C08BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 1327
Signing time: Fri 31 Jan 2025 12:01:22 +0000
Manifest this update: Fri 31 Jan 2025 12:01:22 +0000
Manifest next update: Sat 01 Feb 2025 12:01:22 +0000
Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: x1eQZq/dy4ZLpa1Zp1hLI3DVuIzbPRjUD3qRT+CPYPA=)
2: UQWiGVcgQBfpwcuKo7fbJa4RaEE.roa (hash: ZgT0t6kUhUht6heJI0SpC59LD5/+nffxYQMEyobuM6Y=)
3: vld0ebErMCPKI9Y4LD8_cLIWaOM.roa (hash: wzpFx+k2Gs1HYxiCiFKxLWQewXLLyvLVnzEmKOsRn8M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:b5:f6:61:e2:28:66:03:25:ac:4f:cc:4c:08:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: Jan 31 12:01:22 2025 GMT
Not After : Feb 1 12:01:22 2025 GMT
Subject: CN=3ae151d4c60d3dd3e3d789bc32efb5a34e4a9c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:2f:06:ca:5c:7e:63:86:22:1f:d8:07:76:
c3:41:ca:03:76:4d:e7:26:b6:3a:6d:c1:cb:b3:7d:
fb:18:72:69:96:9e:d8:44:35:60:1f:1e:12:2e:17:
3e:5b:29:ff:f6:95:a9:fa:6e:86:a0:ad:14:20:85:
81:1a:c2:98:7c:c9:aa:df:cc:af:6c:69:b6:f9:88:
aa:98:8a:a3:8a:c6:9c:8b:69:24:99:a9:8f:82:3d:
46:3c:38:b0:0d:f0:a2:7b:f1:99:a6:7d:55:6c:2a:
b3:3e:a0:f3:8a:c9:04:c4:64:36:97:f1:7c:9c:0a:
73:d6:bf:69:8f:0b:b6:72:ab:90:9d:5b:d9:c8:a0:
ed:b9:1e:ab:78:78:1a:89:6a:5c:b8:69:ac:10:ac:
86:a6:65:43:e6:92:b5:46:71:88:2d:5f:22:38:36:
32:d6:d7:36:05:ad:4f:0c:fa:ed:37:71:38:35:fd:
4b:68:9e:fc:bf:98:08:4e:bd:5b:2f:74:2d:76:27:
7b:a7:3b:bb:c1:56:c3:13:8d:b5:10:59:61:ac:73:
7b:33:b6:d1:94:c3:8c:e3:da:47:56:a6:55:aa:f6:
8c:77:58:71:86:9d:6f:23:9e:aa:b7:09:e0:a3:ec:
cd:10:2f:05:67:18:ca:65:ea:00:c1:f6:7b:b7:a1:
91:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E1:51:D4:C6:0D:3D:D3:E3:D7:89:BC:32:EF:B5:A3:4E:4A:9C:46
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:20:7b:3c:85:67:84:87:60:01:b0:0e:01:4b:2c:b9:42:b1:
ed:39:56:fc:2e:ac:7f:9d:d6:41:ce:9e:ad:68:c9:1f:08:e9:
b1:e8:88:c9:a0:37:4c:80:15:58:f0:65:d5:e1:47:a0:08:71:
36:39:21:e3:14:2e:d9:ad:5d:7f:77:d6:16:45:08:23:59:16:
98:46:97:97:9f:2b:47:d7:c7:d1:16:89:25:d2:e8:c6:53:99:
9b:ee:ba:39:68:2b:b9:66:c1:f7:76:6f:ad:e0:cd:a6:86:41:
44:3d:f1:cf:76:40:03:53:df:6e:e1:67:77:dd:ec:b5:35:8b:
d3:49:02:83:72:65:da:0e:4c:49:82:c9:23:60:e8:c9:b4:7d:
89:4e:30:59:af:ce:9b:a6:1e:86:91:a7:32:86:db:84:29:fa:
99:2b:59:ab:4f:99:dd:cd:db:f7:4d:b1:0f:be:44:ce:d8:5d:
e8:3b:9e:32:60:21:04:a7:fd:cf:a3:24:3d:9e:04:16:96:f3:
d7:b9:7a:f4:21:70:28:06:2f:ab:f0:43:36:67:8b:fd:8a:de:
b5:1c:b3:f5:c2:75:d7:f0:6d:bc:db:93:90:e7:11:d8:36:6e:
ff:69:80:bc:3d:59:ef:d0:3e:88:af:ae:d8:7a:d0:bb:3e:22:
8a:2b:3b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:27:58 2025 by rpki-client