Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
File: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft (raw, json)
Hash identifier: eOPWZS7IcfiBVILzZ9J7icCgoEKgwYi3CxsD60VeR00=
Subject key identifier: 88:99:AF:F3:DF:FB:01:7F:44:8A:34:A5:6C:3D:9D:54:E7:42:54:C4
Authority key identifier: 1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
Certificate issuer: /CN=1e54b80723921cdd51da53325f12b3dbc6782664
Certificate serial: 0194BC72D3EF59C66F4D8F1914F343D7DC2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
Manifest number: 01EF
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl (hash: srmLAl2BGhOV6Kch+cFHO1B0Vnv5L0tP2bYxRO8fJhg=)
2: o3Nghoyrq0VU_9LJuoCR7_VhfaU.roa (hash: zzahS3EyrX+jIVg6yGR2kDs1UzlqtPtkB9ukn8PHDT4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d3:ef:59:c6:6f:4d:8f:19:14:f3:43:d7:dc:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e54b80723921cdd51da53325f12b3dbc6782664
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=8899aff3dffb017f448a34a56c3d9d54e74254c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a7:f5:d0:40:50:e0:bb:68:ca:a1:96:ab:f1:
5c:1d:b7:92:53:9e:10:46:9e:64:07:0a:c7:b9:db:
be:df:c1:96:1c:8a:85:93:61:a3:8f:21:f7:6b:11:
2e:da:24:b6:fe:ae:7d:c9:83:77:56:35:82:94:15:
aa:ad:82:c6:74:01:9d:43:3f:da:d1:63:49:54:66:
34:43:1a:ea:39:f8:f7:5d:f8:47:d2:74:2f:11:1d:
84:72:26:d7:38:39:25:ec:e5:f6:aa:59:ba:28:98:
c2:da:be:86:b0:a6:3b:e6:7f:86:48:ba:13:f5:92:
fa:ee:19:b9:80:0d:d9:87:42:68:7f:dc:1e:e3:e6:
ba:1b:21:89:89:03:fa:1b:75:fa:a2:83:c4:f6:07:
fe:48:a7:b8:5f:99:2a:af:f0:01:a8:4f:1d:d4:ce:
ec:87:6c:41:c7:de:ad:8b:26:ce:75:3c:79:33:cc:
dc:43:36:52:c3:bf:37:f5:d9:de:3a:cb:4a:23:e8:
75:3d:35:73:9b:8a:11:67:9d:78:72:67:48:97:7e:
7e:af:e7:98:21:3d:dc:36:a0:ed:2d:71:f1:e6:c3:
c5:8c:6b:dc:e4:99:67:f9:05:01:49:8c:b5:1c:aa:
5a:32:4d:97:26:fa:1d:f4:8e:66:f1:c5:1b:22:65:
55:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:99:AF:F3:DF:FB:01:7F:44:8A:34:A5:6C:3D:9D:54:E7:42:54:C4
X509v3 Authority Key Identifier:
keyid:1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2f:7d:41:e0:38:ab:92:f5:7b:9c:df:97:e4:46:12:ab:8e:
f8:b5:d3:31:ca:e4:f5:a6:68:0e:3b:6f:63:55:61:0c:fc:75:
b5:82:c9:ee:ba:ee:71:94:31:7f:6f:d9:09:00:20:21:84:bc:
62:21:aa:cb:02:a3:eb:ef:1f:f7:ff:70:3e:da:65:53:3a:4e:
65:ed:9f:1b:37:5f:f2:11:16:20:57:0c:f6:94:3b:74:7e:13:
27:40:59:23:64:79:1d:f5:1c:4d:3e:13:46:8b:25:76:7a:32:
fb:2a:e4:0b:38:ed:85:8f:ad:81:bb:40:dc:f9:36:ff:47:80:
9e:e3:05:d3:93:0f:c4:04:a1:4e:75:d7:1f:3e:18:b9:3b:d5:
ec:6a:c5:56:0a:b4:c7:da:af:d7:53:d9:99:eb:55:bf:01:f8:
c2:a8:0b:65:d0:9f:a4:0a:6b:11:7b:6f:87:0e:04:8f:ef:b2:
76:b5:d1:17:eb:e2:5b:52:05:92:d5:a5:bb:27:d9:1f:bd:28:
cf:d2:0b:ba:f4:07:c1:8d:19:3e:f3:06:9d:40:69:17:56:08:
db:85:89:b9:6f:f3:ba:be:86:23:f3:d8:4e:c9:25:02:66:13:
72:f7:9a:d3:49:b7:0a:d6:09:24:5a:fd:1d:12:c5:d9:8c:fc:
f4:9d:ac:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:35 2025 by rpki-client