Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
File: HU6VkgCuqPuSkVi3PowOaaiNxek.mft (raw, json)
Hash identifier: CxP2Meq9y+0JPhtpWINujOg0Z3vJ6a4aSTOPvVUDAsg=
Subject key identifier: 13:BC:0F:23:C7:25:B7:29:17:7B:18:29:82:34:5C:67:DB:E5:78:3F
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Certificate issuer: /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial: 0194BCAA4030707471125400B18D7F57F604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
Manifest number: 13DA
Signing time: Fri 31 Jan 2025 14:01:01 +0000
Manifest this update: Fri 31 Jan 2025 14:01:01 +0000
Manifest next update: Sat 01 Feb 2025 14:01:01 +0000
Files and hashes: 1: HU6VkgCuqPuSkVi3PowOaaiNxek.crl (hash: JMRi47X7l7eEEi6mVYnubajV8SJ4TBTD9PztMpH8GOI=)
2: PqAYbce5ZFtorWDJm1IoXprDpjE.roa (hash: tbDVPuUEiQGmvMdLsr4Uj3a9EoVRDD7cfOnaPg9V/Lo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:40:30:70:74:71:12:54:00:b1:8d:7f:57:f6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Validity
Not Before: Jan 31 14:01:01 2025 GMT
Not After : Feb 1 14:01:01 2025 GMT
Subject: CN=13bc0f23c725b729177b182982345c67dbe5783f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ff:72:bb:17:80:5a:e7:0e:ef:64:3b:1d:5e:
3e:6a:b2:90:e3:dd:63:f4:21:e7:ac:66:84:ff:c8:
df:fe:26:78:d3:44:2b:f1:56:3d:67:8f:d5:ae:2c:
c9:2c:99:1a:1d:12:18:29:82:b9:af:29:8c:12:18:
24:41:2d:28:af:0e:d4:96:ec:84:48:43:56:f0:6e:
a3:25:83:eb:7e:78:b3:64:22:9c:97:e7:97:e4:73:
55:38:6a:3b:68:9b:29:67:62:cb:ac:e6:57:77:c4:
d4:88:e0:19:a5:68:1c:72:88:8e:85:49:0d:97:d1:
d4:99:45:e5:7c:70:f8:7a:06:e2:f8:e2:36:c8:a3:
7e:fe:93:db:7f:61:d6:b1:6e:fa:18:be:fc:b7:1c:
ca:d3:b8:ed:35:71:52:8a:37:e6:9e:fa:64:6d:77:
78:fa:7c:db:82:5e:be:fb:3b:49:cc:1e:e4:81:44:
95:27:04:1f:9e:36:8a:a4:98:3f:54:a7:df:7e:ff:
4b:9d:06:43:9f:de:5f:c1:8e:f7:0e:4f:e7:93:15:
b9:c7:a3:1e:47:08:ed:e5:c5:ba:1c:35:be:c2:d6:
01:08:23:da:b5:c2:12:31:05:ee:e3:af:58:d1:ed:
77:97:1a:3d:21:70:3c:ba:fb:a5:fc:57:f2:c8:15:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BC:0F:23:C7:25:B7:29:17:7B:18:29:82:34:5C:67:DB:E5:78:3F
X509v3 Authority Key Identifier:
keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:90:32:62:2e:f6:36:e8:25:5f:d7:31:ae:31:78:48:1f:33:
48:0e:a8:4f:da:c0:a9:ed:40:ff:0c:32:6a:e4:9b:53:64:31:
15:53:e6:64:cd:d6:4a:dd:41:57:b6:c6:2d:aa:ab:05:27:22:
45:e2:53:4d:af:2b:61:97:18:70:7a:65:23:83:f2:53:60:76:
ff:89:55:7a:0c:f9:55:51:8e:29:de:da:96:35:cd:07:14:24:
bf:06:6b:42:ad:cb:c4:f5:53:b4:6d:28:14:26:12:8c:54:3f:
88:c8:6d:20:1c:fc:49:9c:2a:22:08:b1:09:32:98:8f:5f:b3:
a7:d8:74:f1:51:68:bc:62:17:1d:d9:0d:ab:97:e5:47:c3:19:
5f:d3:60:47:dd:f7:23:f7:2f:15:2d:bd:0b:b7:3d:98:2c:4a:
ab:98:0a:a8:e6:12:a8:8e:18:c0:24:fb:48:af:88:21:d4:d8:
81:64:95:0f:ff:bf:91:7c:d9:45:3e:4c:9b:85:33:41:9e:1c:
f2:19:a4:0c:c4:86:1d:35:d0:53:e9:7c:bf:3e:b9:b1:0f:8b:
52:05:3d:5b:b6:e4:10:42:c1:99:ac:3f:28:a9:91:cb:7d:90:
53:f7:09:28:6a:6d:ca:d4:dd:d0:7e:fa:a5:2d:fb:f4:18:8e:
63:21:73:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:44 2025 by rpki-client