Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
File: HFSfxdaCmHhMakxbyZrn0wFqGKM.mft (raw, json)
Hash identifier: fHJ1qR3js2LAP8/NFjjzpVbH/aq7f94kFx2tgboel4c=
Subject key identifier: 2F:DE:A3:8F:AB:05:3B:A1:D6:02:05:F0:19:F0:9C:55:3E:64:E7:C0
Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
Certificate issuer: /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Certificate serial: 0194BBCE4ECEBB3EE34DBF66788B06E3A35B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
Manifest number: 0DB8
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: HFSfxdaCmHhMakxbyZrn0wFqGKM.crl (hash: 36+5l4YI1FJwwKX93lLpEz7m0Yh050Cu84pv8Uno4CQ=)
2: kk1RvulsDSTUcsB-uonoLPTmX_c.roa (hash: 8TFkWIExCyZU8KrfnY1OXWc5V95rzbge2YPptcmVOsY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4e:ce:bb:3e:e3:4d:bf:66:78:8b:06:e3:a3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=2fdea38fab053ba1d60205f019f09c553e64e7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:90:56:8f:3e:43:9c:db:90:1d:a9:ba:cf:03:
cb:3f:1f:4f:fc:94:24:97:79:5b:63:4f:b6:6f:e2:
80:9a:5d:0f:5a:9b:a8:7d:dc:56:5a:2f:77:64:2a:
70:e8:ec:60:e3:2c:64:59:b3:a9:5e:73:3f:b5:1b:
54:a6:aa:12:75:d6:8a:95:87:08:32:2b:5b:f9:00:
0e:61:f6:44:4e:31:3d:88:77:00:5f:12:d9:92:bf:
d4:78:ba:0e:16:c2:58:51:0d:8f:c2:aa:d4:59:b0:
ad:da:5a:6b:2a:fb:39:91:b6:5e:60:df:d9:74:77:
dc:c7:57:94:29:12:77:53:f8:61:6c:59:8d:6c:ad:
85:90:ec:16:f8:f3:3d:75:a0:32:e9:e9:71:9f:ae:
39:76:81:a4:b9:12:dc:b0:4f:97:26:05:8a:3e:09:
18:4d:da:d5:9e:c7:bd:51:55:0e:c8:df:d9:32:22:
d7:17:bc:fc:72:47:36:b0:9c:3b:f2:66:b1:f6:35:
c6:79:6a:1a:82:42:28:3e:e8:b0:ff:a4:96:72:25:
70:ae:c0:49:30:a1:ab:fa:58:c6:94:cb:46:e3:98:
ec:62:de:7e:96:da:30:5f:d3:3e:cb:9e:85:3e:98:
a6:a4:42:25:f4:47:76:29:99:bb:c4:31:4c:a2:b1:
b8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DE:A3:8F:AB:05:3B:A1:D6:02:05:F0:19:F0:9C:55:3E:64:E7:C0
X509v3 Authority Key Identifier:
keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9b:f4:c7:90:7c:04:d8:14:9e:fc:96:aa:e7:b4:17:0d:5b:
2c:6f:33:98:70:0d:67:53:76:d0:9c:51:af:55:80:a0:b1:fc:
d8:40:26:7d:8e:c0:90:61:3e:6d:82:c5:fa:93:a2:ce:1f:50:
2c:06:e3:a7:c1:97:d6:76:c6:53:85:9e:cb:33:22:d5:69:47:
97:37:02:94:0c:03:ec:1d:c3:fd:73:ea:c0:58:a1:3a:8c:bf:
96:96:0c:04:40:fa:98:59:02:ba:0c:09:25:55:36:6e:d4:0d:
3f:60:66:5e:44:1b:c4:25:6a:d2:1c:73:e8:8d:3b:2c:0d:a5:
6b:80:76:e4:04:47:b5:db:b5:a5:ce:9e:44:82:13:a5:06:ec:
1e:67:7a:ba:dd:4e:85:76:95:56:0a:28:3a:74:0e:5c:10:00:
df:55:56:98:7e:2c:7b:ac:83:06:af:6d:dc:5c:c5:a6:dd:8a:
f3:d3:11:43:5a:38:6d:ba:44:7c:cb:c9:7e:67:b2:06:ff:69:
65:10:17:e6:76:e2:f5:4b:d6:b7:53:60:b5:ef:09:fb:79:e1:
5b:f4:85:08:82:71:53:ea:68:b3:b2:ef:10:de:54:dd:1d:aa:
07:78:c4:2f:c7:df:cc:e8:72:79:d7:99:49:ea:28:37:9e:b1:
8e:46:b9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:48 2025 by rpki-client