Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft
File: HwCwqokkw3eInj07mWCTuHpz0OE.mft (raw, json)
Hash identifier: 3E7Ff8+f0yP0m4FX93TvXbhF39wccpFc0dRjT3U8Tcs=
Subject key identifier: 15:3C:4A:3C:82:3F:09:D8:61:E5:29:C1:32:54:9D:5F:E3:AC:05:C6
Authority key identifier: 1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1
Certificate issuer: /CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1
Certificate serial: 0194BC3C22A026B1207888B32A1ED5470739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft
Manifest number: 0D83
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: HwCwqokkw3eInj07mWCTuHpz0OE.crl (hash: zv3lI3xXthRnId/ppCAm7ZvLaraJYrV6FVfOvs+CGmI=)
2: V9AZTNgU1d002QfKUotGNDSDtvk.roa (hash: x3l+fuQjKQuMTqxTAI/mH6BtVLnUzYs7euSSf0MTbRg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:22:a0:26:b1:20:78:88:b3:2a:1e:d5:47:07:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=153c4a3c823f09d861e529c132549d5fe3ac05c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dd:b2:ab:59:2d:aa:ba:39:2e:c7:09:aa:f8:
f8:55:4d:88:c0:16:2b:07:14:b1:f6:34:0b:dc:6c:
43:b2:0b:e9:66:e7:53:f3:25:d4:41:8b:52:cc:7a:
e4:c0:a9:8f:8c:1f:10:a2:3d:04:fd:ad:10:5c:25:
f7:41:28:52:fa:10:61:8f:6c:b0:1f:c6:9f:a9:95:
36:d6:4b:70:17:bd:6e:7a:9e:43:aa:04:d4:ff:44:
44:28:a8:2c:c9:36:ab:a7:26:09:4a:f5:64:cb:42:
32:13:ac:f7:8a:10:76:97:90:95:4e:f2:ec:00:83:
29:2c:9e:c3:5e:eb:24:3b:85:c9:f9:90:11:63:63:
80:62:ab:7f:44:33:18:21:d4:1a:55:f2:4e:8e:fd:
9c:7c:aa:db:37:96:22:37:82:e8:9c:eb:58:1f:a2:
ba:54:8d:c0:7d:35:94:2b:0e:a8:4c:8a:e6:a8:4d:
49:d3:50:c3:6a:06:f5:83:27:31:ff:54:79:7c:68:
9c:ed:86:06:8a:29:7b:a7:33:2d:7a:f3:2c:18:8b:
d2:c9:73:4b:ab:73:60:64:0f:a4:f6:d8:ae:e8:74:
b6:c2:d3:4d:97:ee:01:e9:9d:0a:c3:14:ba:34:18:
16:cb:da:0f:3d:0b:0e:ff:ff:29:81:5c:8b:d1:20:
50:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3C:4A:3C:82:3F:09:D8:61:E5:29:C1:32:54:9D:5F:E3:AC:05:C6
X509v3 Authority Key Identifier:
keyid:1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:32:f8:59:19:39:e5:5f:57:91:00:f4:9b:c3:49:c8:c9:6a:
84:d8:64:e8:69:87:14:3d:4b:db:bb:c2:ce:65:49:00:97:4d:
40:3b:1a:58:c8:f2:37:9f:2d:a8:0f:cd:23:79:ff:1b:af:66:
58:1a:7b:ce:58:02:af:02:b1:a1:5f:c3:1f:42:a2:17:46:ca:
e1:61:b0:ff:8d:64:72:ba:60:06:35:60:bb:7c:26:07:03:d9:
9e:df:67:26:d3:5d:32:f1:6d:1a:92:18:0f:38:d8:f8:94:5f:
08:d5:1e:a4:70:af:7c:e5:52:92:e3:92:5b:ac:8a:ab:c0:1d:
96:3d:d1:43:b6:04:3e:84:51:0a:52:0a:8e:32:51:36:3e:16:
07:8a:96:ed:9d:d2:02:8f:70:99:59:70:e0:3e:92:cf:57:cf:
87:e7:f0:df:56:14:6e:96:a0:e6:c6:67:92:1d:24:b1:38:99:
14:a4:ea:60:f6:6e:a2:c6:39:cb:d0:eb:79:b6:a8:35:6d:a1:
45:9d:9d:20:5c:a8:23:a3:9b:5e:ea:76:9d:15:db:36:59:9d:
e4:00:62:42:91:ae:0b:f4:40:35:bf:2e:26:b9:b9:5b:17:66:
b9:2f:b5:8f:15:41:f8:87:f5:41:84:7e:af:34:1e:d1:39:53:
31:98:a4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:00 2025 by rpki-client