Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
File: HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft (raw, json)
Hash identifier: pAdyOscUn2EDqBAS75a3N2dJFInt///YiTUobv+A/gA=
Subject key identifier: 48:38:34:7C:30:C8:52:F7:C8:68:F5:34:71:DB:EF:64:A0:62:6E:C5
Authority key identifier: 1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE
Certificate issuer: /CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
Certificate serial: 0194BBCE77EC43BC92146EAFD2D5D2081DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
Manifest number: 0D86
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: 5pynZFAsqvPIGH5-PXLgAGK58mA.roa (hash: fBc4s8OOq/rbaknM5GE/ZQ9xYBiAMIuTqJlNTn46D0Y=)
2: HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl (hash: PpH/4PwVgTE/FzJyU8Ocgzi6MWK4x6wBAY750DL9mEw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:77:ec:43:bc:92:14:6e:af:d2:d5:d2:08:1d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=4838347c30c852f7c868f53471dbef64a0626ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:ec:39:ef:63:73:d3:5c:a0:d9:a0:5a:34:
30:8c:69:fd:1e:7f:d2:01:fc:0a:ba:9c:2c:f3:69:
2a:54:b2:ea:ef:a3:d6:bc:d6:ab:02:e5:0d:0b:60:
13:69:db:51:fb:fa:84:72:99:6e:22:08:33:c0:d8:
74:d5:fa:72:fa:65:8c:3a:63:fa:a2:83:d5:8e:cb:
95:df:88:58:aa:a5:34:51:6d:b4:64:46:b3:0f:1b:
ad:d4:8b:b0:64:62:f9:03:73:e5:fa:d5:4a:20:da:
33:ca:77:1f:85:c8:3f:69:d9:da:2b:d6:74:be:06:
75:2c:3a:25:cb:c4:64:d6:4a:ee:5c:99:29:ae:7d:
74:2d:c6:05:73:63:b2:89:28:28:a1:c0:4a:ab:00:
4e:82:a6:8a:70:cb:d0:92:63:9c:23:31:17:4e:94:
8e:b7:ba:57:6c:2a:eb:8d:5d:6a:b8:52:31:9e:6a:
48:a5:db:b3:61:e4:62:31:0a:c7:cb:61:c9:f0:34:
6c:97:6b:fe:06:03:ad:00:29:4f:bd:66:b6:a4:60:
9e:4c:a2:b2:74:94:58:1b:58:59:42:7d:90:cf:15:
4a:ab:1a:dc:ac:fe:2b:7a:ce:b9:58:8f:9e:c2:da:
e1:7d:83:5d:ec:1f:e0:64:22:3d:ba:54:4e:b2:36:
87:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:38:34:7C:30:C8:52:F7:C8:68:F5:34:71:DB:EF:64:A0:62:6E:C5
X509v3 Authority Key Identifier:
keyid:1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:19:b1:25:22:bf:d3:20:45:c7:54:60:f7:61:3b:d7:7d:37:
8a:70:57:f3:9c:d4:67:bd:37:9a:9e:c1:68:5e:a8:0f:f4:1e:
ef:fb:9a:8f:fb:06:58:10:cb:92:10:47:10:4b:51:3a:fc:2f:
a4:58:2e:e3:c8:21:1e:bf:e7:d5:10:eb:11:d9:ac:89:73:d4:
e6:74:d0:3a:4b:ca:cb:0b:11:18:1c:50:c2:1c:58:7b:d2:b2:
71:3e:0b:30:9e:fe:eb:59:73:ab:5c:2e:b4:27:06:0e:48:ec:
56:e1:93:73:62:88:db:9f:1e:c6:4d:fe:c1:7c:73:f9:93:fe:
f0:4c:3b:fa:e4:9a:64:7c:26:11:24:99:7e:ac:c0:34:81:dd:
48:41:c7:7c:95:fa:68:e2:8d:ca:f2:8b:37:0d:93:17:8f:68:
a7:c0:44:8e:36:46:34:2c:7b:c2:c9:83:1d:43:df:c9:2a:d5:
9f:96:4a:68:47:b3:b6:5b:d8:a5:65:6a:55:04:cf:1c:35:08:
71:34:97:2c:33:aa:c3:c5:ad:b7:9c:ce:c9:c8:90:c2:23:b9:
6e:a8:b9:5c:52:f4:03:13:11:ed:75:85:b9:59:a6:55:54:34:
bd:7a:6c:a0:a7:bd:f1:61:5d:21:3c:7b:56:03:dc:d4:01:38:
a3:52:72:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:30 2025 by rpki-client