Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
File: HhH4prKDtSYE2TKiWJO4ZAQSHos.mft (raw, json)
Hash identifier: /gPi7L+SU/7Evm+Nu0Py8KFW/niRNKCLqkUC/Tr3jaQ=
Subject key identifier: 33:91:01:0E:2F:1E:B8:AB:40:B8:2A:F1:65:2A:B6:F6:9B:BF:80:CB
Authority key identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
Certificate issuer: /CN=1e11f8a6b283b52604d932a25893b86404121e8b
Certificate serial: 0194BBCDC450276C40A5FB2494FA8E67AB2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
Manifest number: 0A32
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: HhH4prKDtSYE2TKiWJO4ZAQSHos.crl (hash: hQogm9ZPLQgmfsde0U1EveiShKUHZEl/xyIOVlgCzKY=)
2: JnfPzURw0o3uQEVpLXDzJLYPYKM.roa (hash: vCq1v3b4A28A6WJQ+8UTZcjdnixh0uM58yrXzgu7llI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c4:50:27:6c:40:a5:fb:24:94:fa:8e:67:ab:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e11f8a6b283b52604d932a25893b86404121e8b
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=3391010e2f1eb8ab40b82af1652ab6f69bbf80cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:85:4b:fa:ad:b9:a1:7f:ca:83:98:cf:83:f9:
1f:c2:c2:c7:5b:d3:53:4e:4d:b0:af:44:9c:31:d3:
05:a4:10:b4:56:be:5b:f0:38:b4:9e:e7:bc:46:82:
82:8e:83:f1:e0:20:0a:e8:5d:4f:7f:72:99:90:40:
cd:bc:05:ca:a4:f4:35:c5:cf:5d:14:7f:bf:99:62:
19:ae:c8:b3:16:36:8c:34:75:29:b4:1e:a0:8c:80:
8b:0b:89:45:ab:d6:fa:cd:50:85:8a:b8:6f:28:8f:
db:cb:01:81:72:0f:d6:96:7b:cb:7a:b0:95:0a:89:
03:a2:3a:f1:c4:00:9f:66:3d:96:45:8a:3a:78:a7:
6d:35:f7:4e:be:55:88:7b:8c:fa:ae:d3:57:12:8a:
1c:9d:04:82:39:d2:75:cc:3a:2c:f7:5f:58:4d:53:
63:2f:58:45:db:86:8e:39:f5:d6:81:60:3b:8a:27:
9a:60:87:06:7c:5d:00:58:aa:73:80:4c:a7:96:6b:
8b:e7:1f:d3:ca:da:29:73:80:13:bf:93:74:15:01:
57:d3:e1:5d:d4:d4:16:8f:d8:63:df:49:d5:d0:c8:
6d:9d:34:41:50:84:43:7e:c2:f3:02:92:38:3e:5a:
88:48:96:17:72:24:42:21:31:6e:70:10:5c:b9:d3:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:91:01:0E:2F:1E:B8:AB:40:B8:2A:F1:65:2A:B6:F6:9B:BF:80:CB
X509v3 Authority Key Identifier:
keyid:1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:17:e6:20:6f:1a:ca:b9:43:ca:ec:c6:2b:54:70:ce:20:2a:
53:0d:26:bf:14:70:a0:69:f4:53:50:0a:07:fb:db:d4:27:e8:
ff:01:6c:f7:c3:77:f7:1a:46:8f:7d:ca:43:71:21:02:58:e3:
5c:72:cc:c3:4b:85:3c:f0:71:a9:08:93:77:f6:77:02:f7:35:
d3:f8:70:d3:29:e9:a1:f6:9b:ea:7e:71:e1:0e:4f:c3:fa:8d:
c3:cb:9b:dd:d5:1a:c6:09:1d:29:5d:87:ea:dd:82:dd:74:ed:
ee:0f:fc:df:e4:8b:42:d2:24:6f:c4:bf:1a:6d:7d:74:74:e9:
59:23:b9:1f:b2:37:32:fc:27:9f:aa:c5:58:7b:ce:f7:85:cf:
7d:81:82:68:dd:40:56:3b:c9:50:dd:f9:ce:41:a5:83:ed:35:
1b:72:40:e3:33:f9:43:2f:1b:24:7a:49:b0:29:ac:b7:b7:88:
26:f9:8e:aa:47:36:65:6b:d6:7b:b6:f7:93:81:a8:c6:76:93:
11:95:45:ce:59:e5:33:3c:1b:6a:eb:49:e9:f3:90:35:31:de:
16:54:45:10:0e:2c:11:1c:ca:01:65:2f:e4:45:f8:29:54:d2:
c4:97:a8:b9:5d:80:2f:58:c0:79:58:6b:47:91:13:29:52:68:
cc:e4:dc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:17 2025 by rpki-client