Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
File: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft (raw, json)
Hash identifier: q04on+JPnLhSL+pGwuj9zOtqdv6bFONEG7B65x+fCFg=
Subject key identifier: 5B:1E:70:0E:BC:CB:6E:A4:7A:51:09:09:1E:F4:33:62:87:22:BE:9F
Authority key identifier: 1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
Certificate issuer: /CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Certificate serial: 0194BBCEDB90EC60604D860DC9B963870FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl (hash: yn9+DuTu1U/4Pgn1CyClf18dDXcQAUzWm9gSrz4aiYk=)
2: zWwWyLKfCmRpNmwFBTvojnygc1I.roa (hash: rn4lqHeH4XjZAogo04iFGrMuS15xr6iivrKPmjp5V94=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:db:90:ec:60:60:4d:86:0d:c9:b9:63:87:0f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=5b1e700ebccb6ea47a5109091ef433628722be9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2f:f1:2f:91:d0:e0:5a:0c:13:44:31:cc:78:
95:bc:23:84:fe:e0:32:7a:fe:53:2f:14:d5:51:ad:
a5:0f:2b:92:50:3d:43:46:a0:cb:b4:e3:dd:39:3d:
30:5f:7a:aa:c7:4e:da:d0:23:85:50:79:93:dc:ab:
b6:58:00:6c:a5:b3:35:0a:31:53:8b:4a:1b:a1:ab:
99:9f:21:cc:d7:99:c5:f4:01:c3:d4:85:7a:72:9b:
f5:6f:c5:19:60:87:aa:fe:7b:68:2d:b5:c9:fe:fe:
9d:3f:79:a8:4e:a4:90:f2:a5:68:88:25:1d:63:b3:
3c:19:9a:57:69:29:59:3c:a0:a0:38:71:d2:53:14:
ce:c0:a3:44:aa:a1:b3:21:a2:9d:1e:fc:45:1a:e8:
b8:ec:df:b1:c2:23:e3:12:1e:86:3e:b4:ec:8b:c7:
4a:fb:69:10:53:57:3b:e7:b1:7b:d4:f4:3f:ac:4f:
b0:7f:95:b9:71:5c:d6:97:60:8f:10:d8:8b:2d:38:
c1:49:ae:e5:4b:5f:1c:e8:36:39:65:1b:de:70:9b:
84:86:a0:da:60:b6:c4:c0:0c:f4:52:0f:00:14:52:
56:f4:30:b1:8c:83:88:c2:00:8a:14:45:df:c3:27:
bd:6d:8b:3c:e9:93:42:26:24:50:52:54:68:9d:be:
7c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1E:70:0E:BC:CB:6E:A4:7A:51:09:09:1E:F4:33:62:87:22:BE:9F
X509v3 Authority Key Identifier:
keyid:1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4b:96:ca:da:7a:96:c3:d9:59:3f:13:09:99:6c:ce:dc:80:
78:45:1a:89:fb:91:0d:e8:8b:09:c4:a0:5f:76:b7:ef:76:7f:
06:04:5c:d9:9b:88:37:39:3c:fb:21:c0:7e:3c:65:04:9c:1b:
62:55:66:f8:52:16:d9:5a:e5:ad:d8:22:37:cf:b5:26:7c:eb:
1d:cc:82:3f:6e:96:d8:14:ff:4d:50:fb:ec:0a:08:db:06:90:
02:f1:17:7d:62:70:37:be:5a:68:1a:1c:22:6f:b4:c7:f8:38:
2f:af:04:85:2d:25:4c:9d:ec:62:73:e1:23:66:09:af:43:67:
29:22:2a:9e:2f:89:8c:89:7d:8a:ac:e9:e1:f5:9f:94:f4:02:
9c:a4:81:53:55:70:4c:78:60:0d:05:0b:2c:b5:71:ba:e3:c2:
c3:a7:b9:de:cc:ee:16:4d:8c:5b:ee:6b:5c:11:52:45:13:54:
dc:d5:fb:94:1d:89:ac:e5:45:62:d9:e0:5d:45:7e:38:c4:b3:
c0:ee:e6:50:7d:62:35:99:39:8d:9f:d2:ca:ff:e2:9a:3c:74:
37:07:ae:4f:e2:52:48:a5:c4:43:81:10:33:7f:ec:af:81:b2:
de:90:3d:26:84:9e:55:72:07:f8:d3:49:39:07:40:b0:96:da:
93:58:01:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:03 2025 by rpki-client