Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
File: HRUAB3Kzw_orvXcn09OJORoUYz4.mft (raw, json)
Hash identifier: /wWr6N9pt9jSON/AsYIogIaptPDh313J0MghbdSCAG8=
Subject key identifier: 84:0D:99:FE:18:CB:B7:88:A6:1E:EE:55:24:74:FA:7A:CC:0D:E1:FC
Authority key identifier: 1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
Certificate issuer: /CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Certificate serial: 0194BCAA0321C4154B251AD07DB2906E74BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
Manifest number: 024A
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: 94kIYfqeFgknlBrr_TOvpCgSdqU.roa (hash: 81jYnPOJR+qUf9stNF6tQ8TBm+nuWM6vD4G5gF21A04=)
2: HRUAB3Kzw_orvXcn09OJORoUYz4.crl (hash: 66Igmrdm/CXx3sWlxJBFrIrw35IMcVnfDAVL8jlWflY=)
3: l4DfAejnNf8QL8LGIhGHT7CKlPg.roa (hash: UVDw7ayj2zIkMp75EMvrYNj0kdy6A1Nen9DvYGACBW4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:03:21:c4:15:4b:25:1a:d0:7d:b2:90:6e:74:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=840d99fe18cbb788a61eee552474fa7acc0de1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:ae:d3:5f:e2:a0:ba:b0:51:2a:5b:6c:11:
2c:04:5e:0f:02:cc:92:19:63:4c:f9:5a:7e:12:b5:
7c:87:03:c7:b0:54:4c:7e:e9:b8:07:96:3c:53:0e:
8d:0f:bc:4f:14:90:6d:79:6f:5e:f6:5c:5e:67:9b:
1a:93:82:b0:fc:c6:93:af:2b:3f:1f:84:cb:05:fc:
a5:48:aa:c6:c4:21:0f:c2:05:ab:d5:b3:4c:cf:fa:
05:c8:c9:12:b8:0a:1e:05:86:1e:2a:50:96:9b:63:
74:92:a8:00:2a:fb:b9:a1:9b:f8:68:df:d6:ae:f8:
b7:08:34:38:8b:f4:07:5f:46:61:e5:2b:93:65:da:
22:5c:ad:0a:cf:bf:12:5d:d2:e5:d4:d6:d3:de:0e:
1b:44:83:ba:26:26:a0:3c:75:a4:b4:af:05:a4:ac:
45:82:90:5e:d3:8f:7f:a3:de:66:8d:15:3b:f9:d3:
fa:f6:d1:58:9c:dd:a4:7c:77:9b:c4:f6:b0:d7:97:
f7:f0:ed:f5:1a:57:98:37:60:13:e0:11:20:05:48:
ac:b5:10:b5:69:b1:3b:b4:fb:fe:93:ef:8e:1d:d0:
81:c4:69:c7:e8:4a:e7:81:af:c2:48:25:74:05:e2:
c9:bc:03:dd:75:fa:16:3a:6f:03:72:a6:e9:aa:20:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0D:99:FE:18:CB:B7:88:A6:1E:EE:55:24:74:FA:7A:CC:0D:E1:FC
X509v3 Authority Key Identifier:
keyid:1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:60:84:5d:69:ed:19:d2:f4:48:a4:68:32:03:4d:9c:1b:5c:
7d:ef:46:6d:48:07:fd:4f:bf:6e:4f:88:2e:d8:2f:fb:d2:b6:
a6:95:12:34:42:df:60:fe:da:c3:94:b3:2e:b8:8f:aa:0a:44:
f4:60:34:81:d3:41:91:e8:cc:8e:35:8c:25:f3:1d:59:29:11:
9c:31:97:a5:ad:b2:99:0f:a2:84:17:61:7a:c8:38:23:60:d8:
bd:d1:0c:11:64:16:ca:61:c4:9d:30:39:d8:c3:7a:c1:2d:7b:
2d:30:25:09:58:e9:93:59:7a:61:ef:31:45:17:c5:12:6b:db:
d5:a5:92:a4:68:a5:c4:00:8a:b4:7d:fc:b9:9e:09:30:bb:ce:
7f:aa:9a:48:5e:13:71:bc:70:f3:e1:68:28:08:0d:61:99:50:
16:3c:8a:b9:39:6e:87:f7:eb:bd:78:f7:48:dc:5e:bb:5d:e0:
2a:86:26:15:55:40:9b:38:bf:90:62:f8:08:08:d8:bc:74:7a:
76:d8:5a:11:19:49:cf:fe:5c:82:74:d5:c8:0d:ed:70:3d:06:
d8:f1:96:22:b5:5d:d3:01:87:c4:fa:bf:3f:c4:64:a9:94:c8:
26:1f:3b:5b:14:0f:ce:51:ad:c1:0d:36:1a:b9:9d:13:12:7a:
65:42:ff:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:35 2025 by rpki-client