Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
File: HW2cywJxWEmzoey800toh_ZJlA8.mft (raw, json)
Hash identifier: a2Iwpn5xCjmd3sFcxQh+AfjbPw/1PhD9u87Mw+c0hRw=
Subject key identifier: C3:16:42:96:84:91:D1:B2:81:AC:16:C4:93:16:07:8A:AA:77:84:7A
Authority key identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
Certificate issuer: /CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Certificate serial: 0194BCAA214F345B84E98A6F4DD0932C13FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
Manifest number: 10BF
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: HW2cywJxWEmzoey800toh_ZJlA8.crl (hash: cxpV+3AGtQE4DCa4gNAEA1TUmXo5XudsuVigFIypgM4=)
2: z8_8mqLcOJtNw1DMnUMLdxcYTMM.roa (hash: 9R0oeP72aK5DRkFYUsVyQ3Stx8OTGpY7qc7OKrRI9JY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:21:4f:34:5b:84:e9:8a:6f:4d:d0:93:2c:13:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=c31642968491d1b281ac16c49316078aaa77847a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:67:8a:a2:68:d3:3a:82:93:b8:1e:21:8d:a0:
55:7d:c3:f2:38:2d:47:12:8d:93:f0:96:88:0c:85:
e4:63:80:04:ae:6d:1d:ba:16:80:8b:4f:ee:c1:56:
6e:f2:d0:c6:f7:22:48:f8:5e:2f:0f:2d:6a:98:69:
06:d6:35:45:2a:a2:7b:f8:d5:e9:77:a3:c1:19:f7:
ab:50:2d:b7:f6:88:45:29:59:ef:f7:10:bc:12:a3:
01:70:05:16:10:33:16:60:6e:01:2e:23:9e:8a:be:
b3:65:a0:67:e0:c2:12:8e:70:31:5a:80:5e:7d:02:
13:60:05:e0:f3:03:9b:d3:f9:25:c6:16:44:70:25:
0f:3e:c6:83:bb:9a:cb:df:19:5a:68:61:a0:93:3d:
23:c6:bb:c8:23:87:04:e5:dd:c9:27:ee:f1:e9:ec:
53:97:06:63:f4:cd:85:c3:2a:1b:09:a3:12:c9:a9:
a3:13:c9:c6:34:a5:cf:72:02:e6:da:ec:f0:89:8a:
16:b8:36:3e:9a:10:22:63:c5:9a:db:3f:7d:22:4a:
cc:02:ae:d7:7c:49:a8:1a:b2:45:df:83:c9:91:3a:
f1:ce:fc:fc:2e:57:e3:2d:90:be:6a:35:eb:72:f4:
5e:95:0c:ac:40:be:83:71:63:b1:a8:55:05:6a:17:
54:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:16:42:96:84:91:D1:B2:81:AC:16:C4:93:16:07:8A:AA:77:84:7A
X509v3 Authority Key Identifier:
keyid:1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:37:7a:22:80:8d:5f:82:c9:29:9c:2b:96:5f:ec:15:fc:61:
27:78:7b:0a:d6:da:c5:07:a4:26:c9:3c:c7:b9:f7:c1:39:db:
9a:7a:87:8d:7e:81:f1:65:6a:83:d2:59:69:91:0a:3e:43:72:
38:e6:ec:ca:b3:78:62:0a:93:0c:0d:be:55:3d:b4:13:d0:ae:
76:53:c9:4c:5f:2c:e9:ee:41:1d:b2:0a:46:0b:44:e6:2b:90:
54:64:12:41:c6:a0:50:b7:c5:88:6d:97:3e:88:45:d1:97:f8:
77:95:8e:19:e2:95:41:f3:19:a8:8a:86:84:31:64:5c:a9:58:
23:1a:f9:39:9b:8b:79:00:7f:9c:cc:80:46:72:ae:f6:e1:d6:
63:62:2f:2f:a9:d7:55:79:1e:a0:24:e3:db:04:29:e6:27:d0:
12:ac:4b:5f:75:e2:1a:f4:f6:95:34:e2:bc:28:51:8a:66:fb:
7b:0a:da:f3:7a:c4:4c:cc:1b:f2:35:ba:65:f9:b5:6d:23:da:
c9:ce:1a:e1:e2:dc:3f:12:1e:dd:1c:67:d0:bf:0b:63:04:63:
b0:d3:66:98:96:f3:59:60:6c:99:6e:22:03:a4:27:d2:45:99:
c6:f6:35:e5:7d:c9:f6:02:73:4c:4c:b9:b3:d6:ec:2c:7a:f6:
bb:9f:8d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:14 2025 by rpki-client