Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
File: HcKeV0nukcWjOujjC33J__OV_-Y.mft (raw, json)
Hash identifier: Bt2D8NlN3oVvlZmEMhKoR991VndDhCFIgHOfAdqkYBw=
Subject key identifier: 48:AE:6B:AF:85:AC:D0:FD:B6:F5:BA:C1:DD:F5:24:70:69:D1:E1:A7
Authority key identifier: 1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
Certificate issuer: /CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Certificate serial: 0194BC05225CB59806E14F2775B1285789D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: HcKeV0nukcWjOujjC33J__OV_-Y.crl (hash: /z6MDhHboPO2ginqpa+sRmsJ2MLN7XT42w88fIepfEs=)
2: z6MmCrjG_M-ly3NSz9op9zn2Kp8.roa (hash: RhWaGG++pr/cOsZo3DpIE+m6eX6qqpoZxRcmwUA1c6s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:22:5c:b5:98:06:e1:4f:27:75:b1:28:57:89:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=48ae6baf85acd0fdb6f5bac1ddf5247069d1e1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:90:fe:31:b3:7e:11:70:d5:58:94:f7:84:3b:
04:6e:dd:2f:05:82:e9:4b:08:85:8c:cd:b4:66:04:
c9:03:1d:ba:e3:e7:f5:60:4a:c0:06:f5:4b:f3:cc:
47:c3:5e:a6:d6:1f:54:60:66:1f:11:ab:09:64:01:
95:5c:b2:7e:48:26:47:85:40:90:97:16:0b:0f:2b:
5f:6f:59:cb:b7:ba:c5:d5:b8:4a:9c:5b:51:8c:bf:
62:2a:25:a2:aa:0d:78:8a:0c:28:a5:c3:4d:1d:04:
c3:85:7c:39:3b:6b:2c:8c:b1:cb:bb:d2:c1:0c:e8:
ea:47:ea:f1:4d:f0:e0:39:23:b1:3c:e7:3f:12:50:
1f:95:11:ca:ee:c4:bc:49:f8:c9:64:63:7b:73:32:
a5:a5:ee:d2:35:ea:c5:27:be:f8:e3:8f:0b:be:52:
5d:05:23:12:e1:7f:52:25:24:76:b0:1a:b2:01:67:
64:29:68:0c:5b:83:e3:8a:cd:6c:f2:f9:f1:42:4c:
c6:a2:89:8a:a0:58:d4:63:e7:24:e4:83:b4:16:03:
10:b2:b4:8f:83:42:41:52:d9:2d:e4:08:23:8e:0d:
71:75:76:79:ba:94:8d:77:79:10:80:6f:5b:3d:ba:
c9:ed:fe:02:a4:f9:60:a0:f7:3f:58:6c:3d:09:68:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AE:6B:AF:85:AC:D0:FD:B6:F5:BA:C1:DD:F5:24:70:69:D1:E1:A7
X509v3 Authority Key Identifier:
keyid:1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:80:a7:6c:aa:8c:2b:0b:71:98:b4:19:28:92:07:f5:5b:b6:
f7:f4:88:72:33:45:fa:16:62:5f:29:ad:ff:6d:bd:f6:90:79:
59:88:6c:77:a9:2e:38:cd:3d:ee:5b:59:77:cf:4d:a4:0f:35:
d9:02:02:6e:56:da:5d:ef:56:20:52:7d:ee:94:96:32:7c:23:
0f:74:65:c6:06:3f:b1:63:5f:28:02:6b:62:7a:76:5c:43:e0:
dd:f8:61:26:6a:92:ec:32:cc:97:e7:8e:a9:c1:35:ad:df:3d:
e3:0f:43:56:3c:7b:7a:ce:df:93:12:3d:5e:a8:56:74:1d:a4:
78:f0:0c:1a:63:8e:50:1c:31:80:c5:ab:01:5d:6b:60:26:48:
8b:72:a4:27:ab:a3:5d:34:28:8b:1d:59:b3:6f:4e:98:78:81:
fc:92:e1:03:f9:25:22:1f:17:fd:d2:8b:53:85:c2:aa:80:ed:
54:e0:4d:ea:cd:af:af:42:86:cb:3e:d2:84:fe:92:3c:c0:e1:
7c:63:1e:e3:c6:25:c4:05:21:3f:de:34:c9:7d:c2:1a:bd:ee:
fd:5f:54:fb:a9:b5:42:8d:6c:c8:82:a2:33:ff:71:05:73:b9:
0b:32:0a:d9:66:12:d6:3e:ad:57:95:db:9a:5f:34:f2:57:b4:
7f:29:9b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:46:55 2025 by rpki-client