Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
File: HjmCheIngn2PLFHx6plzV1VL5hI.mft (raw, json)
Hash identifier: btkn3T0LkKV2j0F0P4we259lUuPXLwuULp1QYEv9qls=
Subject key identifier: B8:6A:17:3C:D5:27:A2:43:29:DA:25:F6:5E:5E:38:E3:09:1E:C5:B8
Authority key identifier: 1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
Certificate issuer: /CN=1e398285e227827d8f2c51f1ea997357554be612
Certificate serial: 0194BD17E2BA8E48A752463B2778E871E00E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: HjmCheIngn2PLFHx6plzV1VL5hI.crl (hash: F3uZxgmpM6AmkAUSj4co8ldp2B+RQ9JQgTgolloYGeI=)
2: pVvB4DPoqxSwKA7eSS7jFs-QMtw.roa (hash: DbYaOM55FhKgmSDQxNENLAyQLbX8jvEl6m8BL1vC3Fo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e2:ba:8e:48:a7:52:46:3b:27:78:e8:71:e0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e398285e227827d8f2c51f1ea997357554be612
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=b86a173cd527a24329da25f65e5e38e3091ec5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:d0:95:37:89:ef:c0:46:95:58:36:bf:b3:
f9:eb:40:89:62:d5:86:78:b8:70:b1:da:f5:52:45:
3b:73:08:59:10:7f:b0:32:c9:73:54:82:b0:38:33:
52:bb:a6:72:d8:fb:86:57:be:04:e3:e7:d0:21:57:
95:dd:a2:05:88:82:fa:83:ee:2c:e2:5c:21:78:c2:
d5:b7:67:05:a6:4a:1c:6e:95:a6:6a:db:22:17:a2:
ef:f1:11:dd:a9:09:c3:73:03:d8:d2:90:34:98:fc:
68:75:5f:d6:91:26:ee:4e:8e:e4:9c:71:3f:ab:1a:
65:45:8a:40:1c:ff:9f:db:23:1e:23:bb:34:e3:0e:
57:a8:8b:49:95:44:9a:07:3b:6b:4b:a2:97:c1:6b:
21:1f:b6:49:70:d9:41:b2:f6:6e:0a:1e:0c:37:49:
bb:8f:43:d4:e8:69:ad:0a:b2:c6:cd:a3:ba:7c:7b:
32:d7:c6:4f:7d:38:79:04:3a:2b:a8:d2:45:71:78:
31:f1:a4:be:ea:4a:0f:95:72:3d:5b:2d:21:59:4b:
40:2b:8b:c1:79:6f:29:de:b3:0a:ff:ea:0b:8b:58:
99:7e:70:32:57:f5:49:9f:02:22:bd:fc:f4:84:03:
2a:84:5d:d6:d9:e7:2e:d5:3c:7f:11:90:f8:9c:dd:
a4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6A:17:3C:D5:27:A2:43:29:DA:25:F6:5E:5E:38:E3:09:1E:C5:B8
X509v3 Authority Key Identifier:
keyid:1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:08:fe:2d:bf:93:cd:20:dc:01:5c:d5:23:af:90:db:24:4b:
7b:f1:76:89:e8:c6:14:9b:34:39:c4:31:16:28:9f:66:46:5c:
bd:83:95:6e:8c:ba:a4:78:29:9a:97:25:82:a1:a5:08:8b:8b:
d0:6d:15:0f:a4:da:23:26:cd:4f:d7:f7:82:ba:ce:f8:a5:e6:
c4:dd:f3:c9:b5:33:bc:c3:d0:c3:db:c3:d0:f2:af:e1:9d:e3:
27:1f:8d:50:2c:ff:55:44:30:bb:84:c1:6f:3e:46:4e:23:5b:
c8:29:13:7d:f2:7d:d3:86:cc:94:b7:a6:0d:b3:53:00:44:12:
8c:af:22:ae:31:5d:2a:98:91:07:bf:1c:24:c2:a9:13:ec:24:
48:9a:f1:c0:3d:9f:49:1d:e9:a6:49:7f:74:ef:39:d1:cf:8b:
e0:f7:75:cc:45:61:c3:d2:d5:2f:67:1b:7c:ad:c3:85:94:34:
ee:7c:ba:d8:c5:7c:d7:d5:04:86:37:26:d5:38:5c:52:1a:59:
36:31:ac:c8:3a:b8:29:19:e0:fb:d8:3e:cd:b9:67:c3:bb:66:
25:8c:62:bf:6b:59:0d:a7:75:b6:36:1d:c9:7f:61:19:e1:fe:
8c:ad:c9:c4:2c:d8:8b:e7:cf:14:6a:20:ad:03:7a:4d:8c:54:
2c:1e:80:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:12 2025 by rpki-client