Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
File: HKy3fiC3gUfUf4OUKU8Re1yE714.mft (raw, json)
Hash identifier: kl0L54bfl2OXNihZ7nBkPdgeEdUcsnAu+ZqBYPAQA4A=
Subject key identifier: DA:2B:42:7F:D5:4B:83:63:F3:B0:3F:12:20:A1:F6:3A:37:74:19:73
Authority key identifier: 1C:AC:B7:7E:20:B7:81:47:D4:7F:83:94:29:4F:11:7B:5C:84:EF:5E
Certificate issuer: /CN=1cacb77e20b78147d47f8394294f117b5c84ef5e
Certificate serial: 0194BD8523088793D0DE18A90D0315F10B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
Manifest number: 0EDD
Signing time: Fri 31 Jan 2025 18:00:06 +0000
Manifest this update: Fri 31 Jan 2025 18:00:06 +0000
Manifest next update: Sat 01 Feb 2025 18:00:06 +0000
Files and hashes: 1: HKy3fiC3gUfUf4OUKU8Re1yE714.crl (hash: Ry2GdFSpaU84uUszWFshHJUqb5ME9TKMe6FJumt8h14=)
2: OoGFPfomo3cQZiCz4qsidreDjCc.roa (hash: nmvopa2kUZd9MIXgbeUNiD86irOgkmmL30is65pmYug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:23:08:87:93:d0:de:18:a9:0d:03:15:f1:0b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cacb77e20b78147d47f8394294f117b5c84ef5e
Validity
Not Before: Jan 31 18:00:06 2025 GMT
Not After : Feb 1 18:00:06 2025 GMT
Subject: CN=da2b427fd54b8363f3b03f1220a1f63a37741973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:e8:28:b8:14:47:6f:06:93:40:87:ae:69:
61:45:8b:9b:09:f3:dd:3f:e7:2a:29:82:bc:0a:dd:
37:46:18:23:fa:4d:7b:c1:1e:df:78:55:31:9c:8e:
40:dc:07:a1:14:d5:21:ec:61:82:d7:af:af:6f:95:
d2:ee:7a:71:7a:95:3f:aa:2a:ae:9b:bb:06:aa:c6:
ed:81:ea:73:52:b0:9c:69:fa:71:2f:16:d6:7d:0e:
14:d2:8b:50:5d:80:55:1d:57:f2:33:9d:5c:13:80:
f1:aa:61:0a:39:4b:64:c2:c4:3e:f2:eb:2b:93:48:
79:df:c0:35:7e:32:87:07:2e:95:60:17:4b:ce:42:
8d:69:eb:06:b4:85:0a:cc:28:70:c0:29:14:c9:ff:
c1:91:ae:ca:79:dc:24:d7:07:2b:72:c6:74:49:9c:
cb:4f:6e:67:a8:34:24:b9:5a:4f:a3:65:36:41:96:
60:11:3a:77:33:fb:ff:b7:c3:27:2f:1d:ba:bd:7e:
37:d2:b5:19:ea:ee:d8:f6:0f:f3:10:a7:a6:88:97:
f5:c9:9f:19:4e:8a:f7:a0:37:a9:9a:0a:09:bb:93:
49:33:c4:92:cc:f6:49:7b:91:86:fd:01:65:dc:fb:
2d:78:86:d0:9a:06:26:ce:55:b7:95:1e:46:d8:c7:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2B:42:7F:D5:4B:83:63:F3:B0:3F:12:20:A1:F6:3A:37:74:19:73
X509v3 Authority Key Identifier:
keyid:1C:AC:B7:7E:20:B7:81:47:D4:7F:83:94:29:4F:11:7B:5C:84:EF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6a:6d:74:92:2b:dd:f9:5c:aa:54:e1:2d:f1:8e:9e:22:b4:
61:8e:77:39:06:4a:fd:a4:f6:e0:f2:8f:41:21:88:c3:a4:9b:
bb:ec:6e:68:89:a8:5a:ae:8a:7f:81:38:c9:13:ef:1a:c2:08:
e8:74:42:a4:4e:67:05:bd:c8:c9:b0:fa:3c:9c:9b:fe:42:ee:
6e:8f:5e:b5:b2:1f:0c:d2:56:32:6d:7b:a3:2a:8d:7d:5f:62:
89:97:f4:2a:a9:b7:c6:59:5d:1b:36:1b:37:b3:35:e1:dd:ac:
96:e7:79:6d:f0:ff:3c:ca:55:9b:36:0e:d5:4d:55:ca:38:d8:
8a:39:44:81:ee:1c:ba:97:15:04:ac:e3:c4:77:03:a4:40:a3:
66:43:3a:24:b4:db:2d:ba:76:d3:8d:4e:6a:c8:c5:1f:cd:c2:
94:08:44:a7:f6:d0:fc:11:48:a5:c8:ad:ee:73:c9:cd:a9:7e:
e3:e1:e1:18:8e:ab:78:0e:0e:75:f7:b6:cc:98:c6:02:1a:dd:
93:84:01:dd:9b:ed:51:5c:80:cb:b9:89:c7:48:55:d8:80:15:
43:bb:b7:3b:d7:ef:33:eb:84:0a:bb:b0:27:e4:ab:bd:0b:e4:
f7:77:4a:84:47:d2:78:19:7a:aa:f6:f8:3f:dd:de:56:88:e6:
c8:a1:6f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:19:54 2025 by rpki-client