Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
File: HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft (raw, json)
Hash identifier: onmFwA4EiurZ8kn91RedvoswLLZUe7flEKpN788lbL0=
Subject key identifier: CE:26:D6:23:33:54:32:65:73:0D:A8:E1:09:57:93:2E:FA:3C:C9:46
Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
Certificate issuer: /CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Certificate serial: 0194BBCDCC52FD888A34D8EC8145DA989337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
Manifest number: 0F56
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: 1-R53mn60mfPO-u9ytNS9sF0TLSo.roa (hash: hjhxCMJ1jfwhmqAtl0YKwQAHdXKCM1yF5oO2syQVRSw=)
2: 1-f8__C0CK7ranFsqDLcjoSQhylg.roa (hash: hbKNngdHLrh0EUf98Vi5DxR2S25rV2PBVU8eQvk6JUo=)
3: HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl (hash: URdw15qARpHd0ledDj5z99x8ElzvkA7tJbQdrIbk/zw=)
4: ya8trGCL644z-VHQPggSk9_LO-E.roa (hash: s6+H/S7quTkaw3wLyBlxCmsBjkvG8cEYcGq0toHuVSc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cc:52:fd:88:8a:34:d8:ec:81:45:da:98:93:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=ce26d62333543265730da8e10957932efa3cc946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9d:f7:1b:31:0d:c2:37:50:fd:ef:58:49:2e:
b4:53:82:49:0b:35:b2:ce:ce:ed:b3:d9:c1:b0:71:
62:ad:58:34:8c:80:1a:cf:33:1a:6f:27:ef:ba:44:
be:99:d3:b2:52:df:fb:5f:39:34:df:bd:bd:d3:27:
d8:83:81:e9:b9:5b:24:6c:fe:6a:4f:48:3c:1f:39:
b1:c6:2f:9c:17:b3:49:c8:7f:de:29:8d:ba:01:27:
40:91:16:34:10:88:8f:97:a0:3e:0c:5b:5e:6f:e0:
0a:0b:a6:d0:75:38:cb:5f:8c:95:0a:e9:1d:e3:79:
e5:04:96:50:93:c6:10:5a:e0:90:33:ee:0b:89:0c:
bd:c9:5c:8d:ed:ae:10:08:22:c0:e7:96:24:62:b8:
c6:d3:84:75:18:83:41:72:be:32:e2:38:3c:43:2b:
9f:44:4e:f5:c2:2c:e3:d1:9c:27:55:d2:45:d7:44:
1e:d9:8c:18:c3:cd:36:ff:f5:ca:81:55:fd:0f:8f:
12:4a:41:c5:7b:d4:28:ae:10:0c:b1:0a:26:ad:4c:
a4:ce:3f:0f:e1:db:e9:86:a8:8d:35:3a:ca:b1:60:
27:7d:5e:99:6a:d9:8d:c8:58:23:38:fa:bd:d8:4f:
a4:d7:eb:01:ba:19:1e:c7:1f:51:b5:ce:06:ec:6e:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:26:D6:23:33:54:32:65:73:0D:A8:E1:09:57:93:2E:FA:3C:C9:46
X509v3 Authority Key Identifier:
keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:40:d0:5d:5e:c2:83:71:5a:8d:0d:7f:7c:64:b5:05:79:2a:
54:79:01:b2:05:e8:7a:44:e6:02:8e:18:4c:cd:2d:c7:4c:b1:
37:10:b5:ca:1e:38:d8:62:62:37:0e:8d:70:7d:86:d7:8a:97:
c5:9b:f8:9b:8a:06:2a:94:8d:ba:e7:36:45:c4:d5:d4:49:b7:
88:ab:3a:bd:e5:e1:93:9b:ec:be:04:09:1e:27:8c:8d:a6:9b:
b4:53:15:01:0c:2a:f3:1b:36:9f:6e:6c:fb:61:4a:45:2e:da:
9a:14:d4:96:0d:40:fc:19:03:70:03:a9:2a:84:d9:58:11:0e:
12:90:b1:42:af:1e:75:c3:51:82:be:b9:d1:4f:83:c2:67:e7:
1e:52:cf:fd:6d:4e:0c:44:13:55:36:cf:e8:13:0a:c5:ee:e1:
63:58:d4:6c:3d:15:ee:a5:84:65:91:42:39:bc:99:a2:3e:83:
ee:72:06:4f:34:f3:e7:f4:d0:29:1c:f8:ce:b9:ad:7c:1a:4c:
77:fe:d2:b0:d8:f5:f3:0d:6c:06:74:1f:db:81:e0:8f:3b:18:
d6:31:67:44:ea:87:84:38:31:67:bf:74:55:42:c4:91:b3:93:
dd:da:91:07:4e:e5:07:08:9b:c4:57:10:22:57:1e:85:c7:79:
18:6e:8b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:03:38 2025 by rpki-client