Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
File: HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft (raw, json)
Hash identifier: +24nuokxQfzoEwkPlKljSCw6FO5UgekqBaAgChKKp8A=
Subject key identifier: EE:7D:92:0D:6A:B7:19:44:02:D4:92:53:EF:9B:C9:07:CD:61:39:7F
Authority key identifier: 1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
Certificate issuer: /CN=1e40ab40e53860871250e9bac4e163339710595d
Certificate serial: 0194BC3CA99DCAD31ED996F8736F9E7AE9AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
Manifest number: 0B0E
Signing time: Fri 31 Jan 2025 12:01:19 +0000
Manifest this update: Fri 31 Jan 2025 12:01:19 +0000
Manifest next update: Sat 01 Feb 2025 12:01:19 +0000
Files and hashes: 1: HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl (hash: OQBQBF/qPq8qRJOWyv0zveqpUuCAte275F7VBSwDkGc=)
2: obxxCWwwodKEQItq-LvA1UofY7E.roa (hash: EDnG/ruD1T9KRKhZcI5dsIBjNgSOpQ6QRSsT8ooYu6w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a9:9d:ca:d3:1e:d9:96:f8:73:6f:9e:7a:e9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e40ab40e53860871250e9bac4e163339710595d
Validity
Not Before: Jan 31 12:01:19 2025 GMT
Not After : Feb 1 12:01:19 2025 GMT
Subject: CN=ee7d920d6ab7194402d49253ef9bc907cd61397f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fd:e3:0b:fe:9d:39:79:da:9c:6c:34:da:27:
92:52:e8:22:d0:5a:96:bd:e1:19:42:11:e2:97:fc:
74:13:05:01:33:e4:b8:1f:53:4d:46:96:c1:b7:fa:
d5:de:50:55:c5:f0:13:37:8f:4a:85:e1:a2:c1:e1:
ab:78:f3:bc:37:26:17:83:06:f7:bf:25:e4:df:e1:
66:6a:70:10:d2:0b:b6:7d:2d:1a:8d:f6:52:37:4c:
7c:50:e0:6b:a5:87:73:aa:9e:f6:8f:8e:83:5f:95:
64:cd:b3:05:e3:79:66:7e:0c:b9:0c:bf:e6:7a:75:
40:3c:9a:60:fb:78:b6:de:07:b7:2b:75:58:30:d2:
1a:43:10:30:56:b1:e6:29:70:f7:14:71:0e:b1:a5:
56:a3:b1:9d:38:5f:b8:f5:0e:09:88:cd:ee:56:ee:
22:50:b9:b7:c9:65:80:05:ea:c2:04:3d:9c:f0:4c:
18:0d:da:f4:9d:fc:ef:ec:c8:d0:e8:f1:a6:cb:84:
f3:1c:4d:f0:bc:c0:cb:ce:3a:78:45:b8:62:80:7f:
49:c2:19:a5:7f:d4:25:cd:66:a4:12:0a:50:d7:ed:
29:6d:59:92:c8:2b:87:f7:3b:b8:27:2e:2d:92:a6:
92:fb:91:da:bf:fa:6a:e3:74:a9:cf:a5:d8:6d:07:
b6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7D:92:0D:6A:B7:19:44:02:D4:92:53:EF:9B:C9:07:CD:61:39:7F
X509v3 Authority Key Identifier:
keyid:1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:3c:a4:63:b7:6d:e6:39:85:36:4f:26:f4:e2:79:70:19:8b:
0c:23:ed:43:7b:f7:4b:14:c2:11:91:0c:71:a5:ba:74:76:95:
dd:5d:4d:cb:f0:35:bf:4a:85:57:ca:97:b5:89:c9:bb:76:55:
ca:b3:c8:2c:90:7f:64:28:9c:e6:eb:5c:98:b1:92:8a:4a:bf:
bc:97:4c:ac:23:c1:20:db:41:0d:18:37:44:77:c9:98:11:c2:
fe:a8:f1:d3:99:d8:2d:db:bf:3c:ff:21:71:e1:57:3a:f7:c8:
44:17:97:b2:41:ff:86:72:7c:fd:22:29:10:30:63:8b:4c:89:
da:f8:21:26:2a:29:26:32:ae:ec:32:d3:42:5d:06:d9:e8:d3:
72:fe:48:3f:ff:90:3a:2e:ce:a3:bf:40:46:2f:67:fc:0e:44:
5b:bf:71:04:1f:f3:10:f6:87:71:50:15:2c:b2:47:99:ed:2d:
a4:3f:a4:f7:9c:eb:b0:b4:11:67:de:71:40:c2:6f:b2:dc:47:
c1:ff:d7:9a:1e:f6:c4:24:42:32:6a:db:a2:23:78:88:54:50:
57:89:4f:1f:98:68:7b:ed:ea:e9:51:ee:30:00:64:e5:53:b5:
54:2b:92:34:1a:f4:7b:dc:fa:da:f1:57:61:b1:c8:89:d3:da:
1a:6c:e5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:41 2025 by rpki-client