Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
File: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft (raw, json)
Hash identifier: KspqkyT9bGsQ/aVrC5eTw/diMDXwocPKto2yjBDHMsY=
Subject key identifier: 5A:5F:75:CF:4E:ED:72:03:F0:4B:33:91:3D:BA:36:89:D5:00:FF:A3
Authority key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
Certificate issuer: /CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Certificate serial: 0194BCA9840F585125808E4930FEA7F6327B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
Manifest number: 0FBD
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: 414nKkHebTOgTqZ_q2PSfPTH6Dw.roa (hash: Iwsiv1vVrSzN0K3T7lWIZIu0VA5UnMuyCHwLiMjnve8=)
2: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl (hash: VSpEbXQwB6ftDG+migHl4HRS3FnIlg1itk3pnpxa2QY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:84:0f:58:51:25:80:8e:49:30:fe:a7:f6:32:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=5a5f75cf4eed7203f04b33913dba3689d500ffa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:dd:16:e5:03:0c:f3:43:4f:e8:52:fa:09:
53:c5:00:f3:dd:0b:ab:2f:b4:07:6e:31:28:b1:9f:
62:0b:cd:03:85:1e:56:27:c3:93:40:91:28:47:f4:
03:72:e6:ff:11:09:60:56:0c:b5:0a:f7:10:3a:4f:
66:b0:a1:a1:2a:62:31:37:07:df:01:1a:06:17:7a:
ba:7b:51:95:5c:19:e0:85:73:21:13:36:99:f0:f0:
06:ea:1b:0d:1e:b9:f0:87:b3:aa:78:11:a8:2b:7a:
3b:33:8d:24:c7:ca:e9:b7:3d:0e:26:43:48:e5:83:
73:44:49:bb:97:06:0b:fe:63:1f:0d:78:e5:a4:39:
f1:62:77:54:c0:4f:b1:d2:cb:bd:eb:a2:f9:76:7c:
01:8d:c7:52:cb:d2:e2:2a:13:5c:03:64:17:f5:dc:
25:54:2a:ab:19:51:0f:5b:bd:c5:ea:d8:07:94:6a:
9a:a9:2b:87:90:6b:2f:21:be:d0:37:b7:37:55:8b:
5f:83:e8:6d:40:32:c9:6b:d2:7c:85:f1:65:66:dc:
ed:80:aa:00:a4:d9:46:82:7e:ba:72:39:02:e1:15:
93:18:d1:aa:92:35:63:4e:8a:7c:ae:b4:1a:d2:bf:
b5:5a:a6:75:54:0d:9d:52:de:c8:49:ae:aa:36:17:
3b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5F:75:CF:4E:ED:72:03:F0:4B:33:91:3D:BA:36:89:D5:00:FF:A3
X509v3 Authority Key Identifier:
keyid:1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:cf:50:b1:8f:c9:fe:fc:3f:d8:71:5f:33:54:0b:9e:a7:ef:
12:96:7f:71:5a:a0:9e:55:6f:1d:ba:52:0d:12:57:55:38:cf:
70:6b:0b:be:ed:c0:cf:0f:81:1e:6b:c3:5b:ec:a9:d6:8e:47:
72:73:9a:87:d3:dd:39:1a:ff:2a:a4:7f:62:92:37:38:55:9d:
33:8c:7f:23:a2:92:48:19:de:b4:ac:be:66:1e:16:2b:c7:36:
a9:88:bb:9a:53:41:f8:de:ca:89:9c:bb:14:dd:5c:f7:39:38:
82:84:32:b7:cd:82:da:25:f2:6c:e2:13:5b:a1:79:51:9c:0f:
93:38:5d:44:8a:f8:ec:cb:08:7f:e6:eb:f4:96:db:e2:34:4c:
fc:3d:eb:01:ad:d3:a7:16:82:d5:9c:e3:6f:a4:5e:0e:ac:77:
80:71:af:94:cf:24:a6:c9:99:78:eb:f9:b6:3f:13:1a:52:b1:
85:aa:1d:f6:7e:03:4d:8d:2e:65:7e:69:15:fd:63:23:80:8e:
02:1b:11:9b:4d:3f:b1:5d:06:ea:bd:90:67:b0:3e:60:dc:4f:
91:a6:76:d4:4a:4c:70:fe:ba:f4:7d:a8:41:16:f5:3c:45:79:
8e:54:1b:3b:43:4a:ef:fc:16:b3:8e:cd:ca:26:14:e4:40:7a:
ea:71:e7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:35 2025 by rpki-client