Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
File: HgKySJ9HE5YtEFESslJ264HxrJA.mft (raw, json)
Hash identifier: TiKDUYF9Ouiir4qETLjar6WeIUtxISyBMvqI03ukUTs=
Subject key identifier: 63:9E:00:96:E4:78:20:72:98:0F:8D:51:3A:87:54:3E:0A:00:19:1E
Authority key identifier: 1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
Certificate issuer: /CN=1e02b2489f4713962d105112b25276eb81f1ac90
Certificate serial: 0194BD177CD45B7D8667DD87F80CD11DC7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: 9V85HLFbpWnoHuwfi3uBdYCY9ZM.roa (hash: sWuFEcVAMiwExmVPdpvYCkHmeYDgX5Tn0zMIqcTEx/4=)
2: HgKySJ9HE5YtEFESslJ264HxrJA.crl (hash: FxZknMKII7+x0FPQ5q2AXec37tLb/Q1Y7QsUjHo//kk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7c:d4:5b:7d:86:67:dd:87:f8:0c:d1:1d:c7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e02b2489f4713962d105112b25276eb81f1ac90
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=639e0096e4782072980f8d513a87543e0a00191e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:83:89:e2:8d:5f:77:9f:f7:8c:8e:90:61:9c:
1e:75:85:08:8a:e3:bb:b1:17:61:78:a9:88:d5:00:
14:db:16:14:f3:d5:7c:e9:8c:19:f8:1d:a2:1b:23:
25:85:8a:c4:0a:7e:be:17:6e:9c:73:c3:db:26:65:
6a:dc:7b:5c:43:f7:63:20:be:49:a7:07:17:c6:6d:
88:0d:d3:fb:64:32:39:09:c2:eb:69:97:eb:e5:4c:
94:9a:c6:9f:d5:48:61:65:ed:57:3c:c0:fc:6d:3a:
ec:68:14:05:1e:b5:19:ce:ac:45:67:24:a6:62:ac:
19:ee:05:06:bb:68:1e:ac:ce:ab:e4:0d:67:30:b9:
78:80:92:11:2e:75:6d:1c:38:2f:f2:49:74:65:59:
0c:80:d0:a1:d5:39:c9:a6:38:b5:92:07:6d:9f:5a:
8e:76:e2:df:32:ae:0e:af:f2:ba:ce:50:11:18:1f:
6e:a3:93:a7:27:1a:60:6a:f4:c3:cc:23:aa:a5:d7:
44:47:f3:c7:d2:2d:31:c6:96:c4:3f:b8:92:4e:42:
ae:69:7b:51:83:be:66:ab:68:82:f6:6c:50:32:56:
22:35:02:7d:78:86:6e:e4:e5:b1:08:b7:45:b8:e7:
d7:e1:e6:1b:6b:53:4b:01:5b:87:4e:66:a4:72:db:
34:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9E:00:96:E4:78:20:72:98:0F:8D:51:3A:87:54:3E:0A:00:19:1E
X509v3 Authority Key Identifier:
keyid:1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b0:30:a5:b1:c8:44:d2:65:ef:f5:b2:d3:fa:99:7d:01:f4:
21:71:02:63:9c:c0:16:8a:33:cf:69:f8:34:52:88:17:79:2d:
d9:42:46:1e:7b:16:5b:39:51:c6:54:4b:b2:3c:16:99:2c:1b:
e7:cf:8c:f7:f5:73:52:d4:3c:ae:8d:cb:1c:78:40:c1:f7:78:
63:23:6c:8c:6b:2c:19:64:32:41:58:41:1a:0d:d2:76:cd:dc:
7c:3b:e2:f6:d2:a6:94:79:f2:7e:ec:58:e3:d1:8c:aa:79:07:
ed:45:11:6a:4a:5b:30:fa:a6:ca:07:0b:d4:95:59:97:96:ef:
59:4b:2f:f3:e0:0b:5e:ea:8f:f7:60:e6:b1:19:b0:00:dc:b5:
ba:a1:49:8c:65:13:2b:d2:0d:6b:6b:d8:1f:ea:92:10:93:71:
fc:64:b8:e6:b8:28:1a:ec:6d:b5:2f:3a:aa:34:74:03:45:47:
04:93:9e:ec:36:2e:7a:ea:28:d3:43:19:86:ad:22:30:bf:45:
1d:15:5b:6c:9d:60:27:6b:af:4c:7a:c6:1c:34:b2:00:5f:c0:
6f:60:d3:b5:86:44:1e:46:ad:a4:30:5a:73:e9:19:27:29:31:
48:d3:19:38:45:9e:a2:38:19:23:30:f0:57:07:d1:06:c5:af:
44:71:7c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:06 2025 by rpki-client