Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
File: HcdSIyHCPRae0zL_SYeczCRRcts.mft (raw, json)
Hash identifier: e+dKAlr1DVuBK46umQ1lxcBC1WFcuTaZ/V6ZHCQcEi0=
Subject key identifier: 66:DF:8D:33:22:BE:B0:E6:D5:38:A0:73:3E:59:BA:F4:71:91:D6:2C
Authority key identifier: 1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
Certificate issuer: /CN=1dc7522321c23d169ed332ff49879ccc245172db
Certificate serial: 0194BD4E7B6E66495A51B6A90939BD55410F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: HcdSIyHCPRae0zL_SYeczCRRcts.crl (hash: K3m7VSL85LpoZ/cVai14q3d1cUM80DaG6dejJ7+DjUI=)
2: eNFG-PCCE4y-AFcmWiHx3RyG7nQ.roa (hash: UjvYsBltNXDFlhfaOzku1vtdcH3iWC+A6hFXawcbjCc=)
3: hRJ0dFuJTo0f67z5A3zupA3p9Eg.roa (hash: DEPtmvNaAFnv4bw8oxA9ykREwTuLcaBuOAc2e9nbKqQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7b:6e:66:49:5a:51:b6:a9:09:39:bd:55:41:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc7522321c23d169ed332ff49879ccc245172db
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=66df8d3322beb0e6d538a0733e59baf47191d62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:5c:ca:89:ae:56:9a:ae:de:4f:2a:dd:28:
2f:32:bb:94:7c:2c:9d:55:56:ca:5c:bd:48:18:f4:
4c:9d:ef:42:13:ea:da:3a:1a:6c:44:86:a9:24:97:
db:5b:04:5b:08:09:ee:df:c4:63:08:c6:fe:d9:22:
0b:e9:7a:23:ea:6c:6f:6e:08:ae:2f:27:8e:c1:52:
9f:57:b1:4b:00:88:31:69:fe:dc:9d:6f:9e:e9:f2:
68:91:5d:67:b9:19:0e:1a:41:f0:05:c4:c7:ca:29:
b7:7f:01:43:b1:36:04:94:d0:90:42:94:8f:3a:2b:
82:a1:fd:61:4c:ef:fb:bb:c4:74:d8:72:5c:1e:02:
ea:7b:ac:76:e5:6d:26:c4:6a:7e:5a:a3:12:05:36:
d9:5d:bd:9e:7b:43:52:dc:fe:e6:0b:15:f3:25:d5:
92:74:93:e9:c0:09:39:50:84:33:e1:34:c1:bc:25:
63:dd:52:72:5d:68:82:ee:b8:71:2b:3b:53:cc:9a:
d5:09:56:a3:fe:f2:31:f5:05:aa:4d:8f:78:43:c9:
6f:4c:5f:9f:25:05:86:cc:e9:1c:df:b5:95:94:03:
9b:60:b8:a1:6c:8b:43:c4:63:f8:70:3e:03:2f:9e:
f7:e9:ee:78:d2:44:61:d5:dc:15:3e:65:59:8f:a9:
66:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DF:8D:33:22:BE:B0:E6:D5:38:A0:73:3E:59:BA:F4:71:91:D6:2C
X509v3 Authority Key Identifier:
keyid:1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:22:5b:cd:5f:45:9a:1d:8b:8f:c4:e9:f2:ee:03:b2:ae:fd:
54:75:8b:ee:dd:43:42:84:88:79:b3:30:d6:5c:b8:2d:93:d4:
0a:27:2b:5f:c3:60:82:37:97:74:bf:66:5a:38:c5:f4:41:8d:
c1:4a:2b:e7:3c:5c:95:86:be:a8:b5:85:dd:8f:53:89:21:55:
7f:fe:57:86:34:ab:a5:0e:a3:78:1c:c3:f2:9b:a1:f3:20:be:
6f:a4:4b:b9:4f:33:c0:6c:94:62:6e:2d:96:a0:7f:e9:e3:5a:
42:31:25:bc:4f:81:7b:5f:a0:0c:9f:56:13:3a:e8:07:92:2c:
e1:8e:fb:2c:6a:30:7a:54:5b:18:57:67:90:69:d7:77:c1:6b:
3b:40:7f:c9:6f:86:25:2f:e3:73:ba:c0:54:c9:f9:ee:b2:72:
51:a7:bd:96:93:83:12:7f:2f:12:7f:41:d2:d6:7b:69:a1:7d:
f6:a4:94:a0:e3:09:41:a3:cf:d8:d0:fd:4c:ad:66:c4:78:fb:
43:f3:cc:b2:d8:c3:fb:89:5d:49:06:81:3d:85:ec:95:c2:4f:
51:72:9b:dd:3f:66:36:9b:a2:64:4c:45:66:4a:e3:ed:b2:df:
c2:73:ae:62:45:ce:87:f2:6c:58:f7:75:53:62:92:99:78:44:
1f:2d:7e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:58 2025 by rpki-client