Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.mft
File: HVceK9tBEuxdazpkuxe_CygP5uE.mft (raw, json)
Hash identifier: KwKNeE0LeTpxQktBLLEdifXzN6BsgSuPky4vr6kO2yo=
Subject key identifier: 2B:A9:E6:90:42:A0:06:A4:D9:2F:AE:A6:9C:FF:A7:5C:20:EA:2F:26
Authority key identifier: 1D:57:1E:2B:DB:41:12:EC:5D:6B:3A:64:BB:17:BF:0B:28:0F:E6:E1
Certificate issuer: /CN=1d571e2bdb4112ec5d6b3a64bb17bf0b280fe6e1
Certificate serial: 0194BC04C8C5EFDC0470D30CEC0290FA009F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVceK9tBEuxdazpkuxe_CygP5uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.mft
Manifest number: 0BAF
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: HVceK9tBEuxdazpkuxe_CygP5uE.crl (hash: uc6w6y0bLSTRSSqP/FU7bGgNIu08LjkTyc5rDh305D4=)
2: h7CHzkBnlnsCPZHhaVmBEiptsJU.roa (hash: EbCVP8Yz7oXyf9jeo4iTmjzKKTktTCeVwJmVIt/iZmE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c8:c5:ef:dc:04:70:d3:0c:ec:02:90:fa:00:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d571e2bdb4112ec5d6b3a64bb17bf0b280fe6e1
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=2ba9e69042a006a4d92faea69cffa75c20ea2f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a9:6b:15:fe:98:c6:a6:fc:6f:96:06:c2:fa:
d2:2c:67:ea:21:04:b3:0d:f1:12:58:60:d2:58:26:
56:b3:e3:14:b0:3a:c5:cb:4e:2e:8c:af:a1:e0:87:
f5:46:2b:3f:32:09:f1:b0:54:cf:c2:43:2b:34:3b:
be:4b:98:5c:c7:84:2e:7a:dd:50:c3:96:3b:88:24:
65:5a:95:af:17:24:aa:4e:d2:df:2d:ea:a2:81:ac:
7f:08:2a:a8:2b:66:be:08:56:a6:4c:be:0d:3f:8e:
8e:6d:7e:f9:34:57:c6:df:a6:03:69:81:94:00:45:
7e:2d:6b:65:64:1c:f1:78:b1:60:2d:a5:88:a5:56:
99:a4:1d:81:7d:de:2c:43:2a:85:67:41:26:22:ba:
95:1d:78:4f:a2:b6:6a:63:2d:82:77:92:5e:19:b9:
31:ec:1f:85:cf:4e:40:9d:e7:11:ca:6d:83:88:05:
aa:c5:54:71:d2:77:2f:4e:91:97:2a:e5:e3:1e:a2:
22:32:40:23:da:09:c6:c3:95:d7:40:4c:f7:f6:2f:
9b:e3:8e:9b:40:78:51:3b:ab:62:a1:43:92:61:88:
bc:67:1e:b1:34:a3:02:da:a1:f2:3c:06:98:c7:72:
40:3e:86:b7:3c:b5:c2:db:4d:b9:34:98:7b:b3:e4:
7d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A9:E6:90:42:A0:06:A4:D9:2F:AE:A6:9C:FF:A7:5C:20:EA:2F:26
X509v3 Authority Key Identifier:
keyid:1D:57:1E:2B:DB:41:12:EC:5D:6B:3A:64:BB:17:BF:0B:28:0F:E6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVceK9tBEuxdazpkuxe_CygP5uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:85:07:8b:8e:40:1a:d3:65:70:d0:8d:45:de:2e:12:91:8e:
ad:ba:9c:d4:8f:75:de:a8:9e:f3:34:1d:c4:a8:e4:9a:a5:45:
74:f7:29:36:d7:3f:82:71:1f:b8:67:02:75:6a:cd:b3:92:63:
c2:0e:95:05:ad:0c:32:27:96:fb:02:ac:19:19:3b:26:ee:1f:
da:b2:f3:af:d3:2d:0e:f2:2f:01:e3:4b:72:89:35:0f:86:63:
fe:fa:23:86:a2:e5:1e:e0:ef:fd:28:17:a8:df:9c:41:db:ef:
27:da:b7:5b:5c:87:8b:8f:56:dd:33:18:2d:80:82:c4:ed:aa:
d1:10:57:0c:9e:ec:af:bc:0c:28:c4:ce:f2:9a:05:7e:80:70:
76:2e:93:27:37:63:c3:8b:36:77:54:f1:88:56:b4:c3:1c:02:
d0:4a:52:fe:48:05:1d:a7:35:37:d2:18:9c:0a:72:a0:5c:8a:
e6:5c:78:dc:98:96:99:4a:d6:6a:65:2f:13:77:a1:e5:17:cb:
13:8d:88:6b:e1:10:fc:55:a5:f8:82:ea:93:4f:6d:1d:88:4f:
f6:a5:96:60:b5:cc:2f:7a:13:1e:41:b1:3c:d6:41:5a:9b:1e:
03:9c:6d:f0:66:78:6f:a2:bd:c2:fe:f6:41:7f:27:ac:03:be:
16:12:4a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:45 2025 by rpki-client