Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
File: _HlIirThrA9L1GfStNNiHGsY7qA.mft (raw, json)
Hash identifier: wI7+TrSn3RDMGuwZEuZsj10/e9kCnQnXzJEKBrZQAwk=
Subject key identifier: 2E:1A:23:03:D9:46:88:05:A3:4E:19:C4:CF:FC:B7:F5:C7:46:55:35
Authority key identifier: FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
Certificate issuer: /CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
Certificate serial: 0194BC050E262E6398FE8CFD80345E4E1860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: Fxxp-LRkqvfLrMmhXHpze09Zypk.roa (hash: VeSras0PkAsQ1iWlGxVtQbCw1RAH/pLCo7L2bleBamo=)
2: _HlIirThrA9L1GfStNNiHGsY7qA.crl (hash: N62LETEkbs91KyvdcK3MWb+1XjoQ9XEsTm/TV5K3TLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0e:26:2e:63:98:fe:8c:fd:80:34:5e:4e:18:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=2e1a2303d9468805a34e19c4cffcb7f5c7465535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:30:8d:e8:0e:01:ee:33:00:08:68:55:de:
a2:c0:13:cf:d3:25:f9:d2:e2:80:89:ad:16:05:6b:
be:c5:4f:94:b2:3a:1b:73:a8:eb:6d:d3:f0:9c:84:
78:02:22:3e:4f:8b:10:86:2e:5f:04:1d:7d:21:59:
be:2e:3a:4b:15:aa:a9:d1:76:20:bf:76:bd:9c:1d:
c0:1d:72:c2:bb:8c:34:bb:ba:a3:5d:f6:1d:ee:09:
61:bb:4f:05:7e:07:a3:bc:37:15:10:c0:fb:04:d3:
07:65:bc:45:6e:90:c0:ff:14:3a:2c:b1:57:4c:5c:
9d:9b:fa:5e:b5:e5:bb:64:9f:00:76:77:2a:b2:f0:
3b:b9:a5:78:9e:0a:6c:0d:75:c6:89:8f:91:2f:bd:
ff:7d:1d:b2:10:98:8c:c2:e3:30:99:9a:cf:5c:fe:
b7:c7:81:56:29:47:ff:02:96:18:4f:7c:1c:7d:ca:
2e:c4:38:2d:b5:c1:eb:c4:d1:b2:1d:35:8e:2c:1e:
bc:ea:dd:2b:96:29:a5:c4:4a:97:7d:23:75:43:f0:
6d:fe:7a:e0:df:af:3a:ea:5c:2d:41:a8:73:0f:4b:
2e:2e:f4:4b:a5:8f:c3:7f:dc:83:66:c9:a1:6a:ea:
45:a2:cf:08:cc:17:62:fc:be:31:63:da:0a:2a:fc:
51:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1A:23:03:D9:46:88:05:A3:4E:19:C4:CF:FC:B7:F5:C7:46:55:35
X509v3 Authority Key Identifier:
keyid:FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e3:20:8c:98:43:a1:80:f9:45:4d:16:36:89:69:77:69:1f:
cd:7a:6d:c0:97:25:3f:27:57:49:6a:9d:63:c9:2b:84:6e:ca:
df:72:ad:98:fc:ae:bc:4a:aa:47:87:e0:b6:c9:15:d4:f8:3e:
2c:ac:70:15:f6:41:c3:dc:27:12:8c:b9:1d:ed:48:d3:e0:fc:
99:2a:0b:c9:cb:c7:f9:52:8f:ca:30:6b:b4:28:b3:cf:02:cc:
0a:3f:b6:34:50:e2:2f:ee:df:30:49:59:b7:8e:8b:c9:6b:0a:
a9:1e:c7:b8:4e:f4:06:eb:2b:15:c3:c4:58:9a:90:64:da:7f:
a1:6a:a8:7c:0e:d7:1d:b5:90:4f:89:8a:59:44:2e:16:93:e4:
10:a5:29:10:ac:7b:81:69:b7:bb:b9:21:9c:39:91:40:82:ba:
e9:96:3e:4c:d0:ab:59:c1:8e:73:ea:0a:21:d5:33:22:d9:d0:
04:8b:7c:8c:89:60:13:d2:83:3c:02:59:e5:2f:d0:06:53:fc:
81:60:18:1c:59:85:00:fd:cb:6e:5a:e8:3c:ae:d2:a2:f5:5c:
60:82:73:d5:c2:54:da:35:1d:06:42:fd:78:8c:cc:f8:d6:6c:
b8:e1:52:ec:22:ba:59:09:ee:a6:46:30:39:26:38:7d:11:47:
9d:8a:8f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:42:57 2025 by rpki-client