Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
File: Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft (raw, json)
Hash identifier: d/ubRjLBxqA/HtvvItJLVWrv2wV2TqMbs5nqnHuV+0Q=
Subject key identifier: 51:85:28:AE:F9:C6:E6:02:79:44:2E:6A:C3:3C:49:C8:A5:EE:61:BC
Authority key identifier: 1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
Certificate issuer: /CN=1db93b83bafad7bfd94f676c021baab5187007f0
Certificate serial: 0194BC04C99B3DCA222ADDB82D9B5164974E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
Manifest number: 0BEF
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl (hash: Q5rNNV6gVNYGyGAdcAJ+PoV87lMBnpP8FZpzoENOakg=)
2: aRJc7_o9XgAW9PPEgC1zuufULQk.roa (hash: aNwMxPIgMebl0KXeBZmaqOEDWlNAdOizWVRuMjJ0OEY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c9:9b:3d:ca:22:2a:dd:b8:2d:9b:51:64:97:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db93b83bafad7bfd94f676c021baab5187007f0
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=518528aef9c6e60279442e6ac33c49c8a5ee61bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:6b:df:f5:78:9f:58:db:8c:6a:39:67:da:
61:d1:db:04:a6:28:e0:b3:78:24:83:e6:c5:5b:24:
30:db:4c:7b:0a:7b:8a:d8:19:2e:be:a0:59:d0:40:
c0:16:32:bf:16:07:16:6d:41:8d:46:36:03:e9:98:
40:94:a9:b6:e8:d6:b2:e6:9b:5e:55:cc:eb:26:e1:
8f:64:84:56:b9:5a:85:06:76:e3:c1:a2:76:90:8e:
c1:60:9d:6a:b3:22:f7:02:88:46:e7:10:7f:5d:aa:
ec:be:65:63:c0:d3:43:f9:a1:51:88:b4:a3:0c:7e:
9f:33:3a:ff:0c:60:04:c6:98:3d:21:2e:f7:7d:a4:
69:d4:9f:e0:f4:1f:81:3d:09:78:a3:e9:c7:e8:d5:
29:61:5c:fc:c5:de:8c:d3:23:4d:f7:2e:f4:47:6a:
33:82:f2:71:e3:4f:44:b0:20:9c:f0:2c:e6:de:ce:
95:d6:5a:93:b4:e9:b3:d9:a7:55:eb:dc:d6:a0:ed:
c3:e8:92:9b:3c:36:c8:f8:c9:71:a4:63:cf:94:a3:
2e:65:4c:6b:79:c9:ce:e9:7b:10:0c:37:f8:c7:ce:
42:e4:cc:85:9c:09:44:1f:30:f5:32:ac:6a:81:01:
2c:3e:f9:6e:35:1a:cb:c9:f5:36:39:62:b8:14:5b:
fd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:85:28:AE:F9:C6:E6:02:79:44:2E:6A:C3:3C:49:C8:A5:EE:61:BC
X509v3 Authority Key Identifier:
keyid:1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e4:ba:a5:a1:b8:c8:2c:56:a0:ba:37:77:23:7c:98:55:f0:
63:23:e7:fe:2a:81:63:4b:c1:69:44:03:dd:11:2a:69:e9:36:
04:60:b5:ef:96:f4:b9:4d:44:75:48:95:89:b2:ba:27:30:e8:
e1:f0:cc:9d:38:f2:6c:6b:2a:55:cc:09:09:d7:05:a0:3f:81:
70:25:ce:1d:5a:14:90:38:21:5d:9e:af:b5:0c:b2:24:dd:69:
ff:32:43:86:85:a1:e2:31:a6:a2:fd:97:bb:83:0f:2e:54:ed:
35:f9:1d:e2:45:e5:e0:d2:52:19:82:09:a6:74:5e:ca:09:00:
12:e9:ed:5b:52:c4:d5:52:df:3d:61:35:98:c3:dd:e3:d8:50:
82:81:da:0f:32:50:1a:1c:33:d3:ae:ab:75:db:dc:b2:14:c5:
42:25:c3:f7:d8:95:55:14:87:20:fa:8d:f0:8a:c3:03:e7:12:
2c:53:bb:ea:27:05:ee:d3:b9:79:6a:49:ab:4a:9b:c3:bb:09:
f6:0e:2f:54:49:8d:8c:64:c7:4b:70:cb:a2:ef:17:bf:7b:bb:
4d:c8:3c:17:d9:90:1a:4d:6c:25:c5:47:6b:25:47:89:87:20:
91:83:7b:6f:87:dc:56:28:81:59:d7:92:59:02:77:d2:39:22:
32:1d:61:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:54 2025 by rpki-client