Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/HzESD-Ild161MVLUkg6cVz_ytl4.mft
File: HzESD-Ild161MVLUkg6cVz_ytl4.mft (raw, json)
Hash identifier: qxCZ2APa7migsgcx9UBi39Q/uu2Nu04ob47ueUMW5Bc=
Subject key identifier: 72:61:AA:C2:AC:74:C1:C3:A9:6D:64:BF:5E:82:E1:50:52:5F:1A:85
Authority key identifier: 1F:31:12:0F:E2:25:77:5E:B5:31:52:D4:92:0E:9C:57:3F:F2:B6:5E
Certificate issuer: /CN=1f31120fe225775eb53152d4920e9c573ff2b65e
Certificate serial: 0194BC72E33D22E0D4DE72865036D3AED8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzESD-Ild161MVLUkg6cVz_ytl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/HzESD-Ild161MVLUkg6cVz_ytl4.mft
Manifest number: 04B6
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: 6lWYbK8jnsQYkYc7T4zN_V6coK8.roa (hash: oD2ZLdtxObPkY+WJWRT30l3VTvZxC8dmopiLiRBmA6M=)
2: HzESD-Ild161MVLUkg6cVz_ytl4.crl (hash: WOvG3cNP79JkfmhgMgx9zaDiLy3FFEwZAzio72eTgKA=)
3: fleie-GXSaWqx7f-vmugkjqZDRc.roa (hash: /sQTlxWlihiXPSEnXwcQEmisZgo+vZC9vBk2kctuvnQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e3:3d:22:e0:d4:de:72:86:50:36:d3:ae:d8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31120fe225775eb53152d4920e9c573ff2b65e
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=7261aac2ac74c1c3a96d64bf5e82e150525f1a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:71:26:e8:ae:0c:42:80:47:a0:1d:03:0a:17:
88:6f:a4:95:06:ba:2c:39:5a:98:68:78:f3:db:e3:
7d:fd:f2:37:ff:a5:f2:86:42:47:d4:3c:32:df:08:
35:9a:04:3d:35:bd:d1:3a:e8:ea:9f:01:f7:e8:95:
da:7c:a3:f7:8a:be:d9:a3:5e:cf:bd:04:0d:61:30:
69:a2:53:37:31:55:15:29:79:1f:bb:79:37:c1:43:
71:3f:06:2d:02:04:94:0d:14:31:a2:ad:b5:cb:c0:
fb:f4:1a:11:28:e3:6f:63:ba:7a:83:db:c4:01:92:
36:84:77:e3:72:0d:e6:46:f5:d3:8a:a3:2a:b3:94:
4a:60:1b:7b:3e:0e:6b:08:07:33:a3:35:3b:4e:dc:
36:58:4f:fe:9e:32:eb:6a:e3:de:57:03:eb:74:b3:
c8:0a:5c:28:1c:43:e1:d2:ba:3f:bc:50:f3:6f:b1:
69:f3:c8:c5:c9:72:ba:43:f9:c1:1d:ce:a7:dc:cc:
4d:82:fc:b7:bb:48:d1:b1:7f:9f:20:06:c2:d2:11:
b7:c9:e7:fc:55:3e:b2:dd:20:a7:8c:43:f2:cf:1d:
b1:1c:38:6e:f5:70:97:1a:17:06:1f:95:4d:cf:84:
ec:d6:6d:da:9a:98:b8:cb:6a:d1:9c:e6:92:b3:0b:
66:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:61:AA:C2:AC:74:C1:C3:A9:6D:64:BF:5E:82:E1:50:52:5F:1A:85
X509v3 Authority Key Identifier:
keyid:1F:31:12:0F:E2:25:77:5E:B5:31:52:D4:92:0E:9C:57:3F:F2:B6:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzESD-Ild161MVLUkg6cVz_ytl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/HzESD-Ild161MVLUkg6cVz_ytl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/HzESD-Ild161MVLUkg6cVz_ytl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:81:95:a3:5e:11:c2:97:81:07:c9:ee:08:7c:f7:6f:eb:a4:
a0:47:6f:1f:0e:0d:c6:58:9a:a1:34:a8:a9:2f:20:5e:5e:c1:
c6:8b:ab:fb:96:39:f8:c7:a4:eb:85:e3:00:74:e9:32:9f:db:
af:c9:e2:09:83:95:1e:85:47:fd:56:28:60:df:2a:80:90:ea:
46:e5:f6:fa:71:37:a9:4a:0b:53:b2:ca:a1:aa:96:d6:f8:bc:
e2:87:cd:c7:81:d8:a8:d5:40:fe:2d:1e:cb:7f:20:b0:bd:be:
9c:d1:c2:83:64:17:50:04:0e:91:07:a8:95:d1:12:e5:d5:70:
49:a8:da:bf:80:34:6a:24:ed:4e:b8:5b:7e:69:7c:3e:e8:7b:
b1:37:12:0a:76:34:77:86:62:4e:49:68:22:8b:c8:b5:da:27:
e4:4d:4c:f5:7a:6f:5b:a2:42:1b:d7:4d:f4:2d:83:4a:72:73:
7b:a2:a3:08:d5:f1:2b:27:ba:00:4a:8e:f4:6f:24:c0:d5:20:
88:1d:de:74:7a:e2:07:5e:7a:37:d0:9a:7c:4b:00:9f:72:b6:
cc:76:9b:50:bf:6f:45:b3:29:ce:fd:dd:81:f1:1e:6c:6c:94:
82:7e:2e:a2:0f:3d:8c:18:3d:7f:4f:ef:d5:4c:7d:c0:67:2a:
64:87:e5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:24 2025 by rpki-client