Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
File: 1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft (raw, json)
Hash identifier: lOfo31a5PxA9+lShkcbZrbOIFHcNW53S5ht9jyhDPgs=
Subject key identifier: 6B:8F:32:FF:DE:30:63:9D:E6:B7:75:F4:64:03:45:E7:76:69:1A:E4
Authority key identifier: F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A
Certificate issuer: /CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a
Certificate serial: 0194BD1795F29E462B92C1B43136B58CE455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
Manifest number: 11E0
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: 1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl (hash: 87ZIPOCYss9jA09RSN2r+t9pJd3w5e43NCCrzk64ADk=)
2: IPJ2H-DbyJS39-MqiGd6rorhNdk.roa (hash: s/YiZX5EGRobWwsqigpJwSULaBic38Nv8k8vwPxeO3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:95:f2:9e:46:2b:92:c1:b4:31:36:b5:8c:e4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=6b8f32ffde30639de6b775f4640345e776691ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:79:21:8b:f9:42:c9:c2:1c:3b:15:18:68:
6f:1f:92:15:a8:ec:4c:0f:40:18:7d:2c:0f:1e:c3:
29:81:11:ed:55:4c:b8:97:1e:48:c6:eb:c1:47:f0:
12:46:bd:da:94:17:19:83:d2:d2:d7:ea:2e:77:f7:
b2:96:34:40:2d:9e:b1:9b:4f:0e:da:55:85:f2:c8:
c9:e8:17:e1:78:a4:ab:0a:a2:37:ad:f7:10:30:f7:
cc:cc:13:b8:b6:b9:c8:e8:65:2c:7e:03:3e:ea:67:
f9:3c:c2:dc:f2:02:0c:c7:35:7b:01:1e:a3:dc:d7:
e2:26:94:86:9a:f6:e7:bc:eb:fc:bf:97:ae:6d:ec:
51:42:b8:c0:18:2b:8c:09:e1:1f:4d:f6:af:09:e6:
a4:14:ec:a6:ac:ab:47:8e:a1:82:73:af:47:d0:63:
16:4b:f3:14:50:b4:9e:52:29:48:ff:64:d1:88:9c:
39:eb:c1:be:8f:43:44:53:41:f7:94:62:41:11:ec:
23:53:b6:d8:da:9e:ab:23:c6:40:fb:12:68:93:06:
85:ec:19:65:60:49:c3:43:08:83:ed:6f:42:ef:f5:
9b:58:c9:7d:e7:d4:e5:bd:0a:4c:a6:08:ed:ed:6e:
d9:68:ef:70:a1:4b:eb:6d:71:54:c7:3c:f5:e3:df:
b4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8F:32:FF:DE:30:63:9D:E6:B7:75:F4:64:03:45:E7:76:69:1A:E4
X509v3 Authority Key Identifier:
keyid:F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:67:c8:2a:4f:8f:3f:fe:9d:df:b0:7e:4f:1f:08:30:8c:3b:
60:81:2b:75:78:bb:1d:3c:57:32:dc:c7:f5:ac:fe:4e:f3:5b:
e5:f9:7b:04:5c:2c:c6:f4:6b:54:55:50:d3:2c:df:39:1a:2c:
ee:3b:ae:59:e1:61:69:aa:5e:ff:8c:75:10:01:b5:6e:0b:a6:
e6:26:8a:f4:e4:18:76:f4:e2:4b:25:f5:49:77:eb:3b:0e:a1:
2c:fd:c3:0b:f4:55:ee:ae:15:bb:08:00:f5:49:e8:04:17:64:
e9:25:d6:65:03:37:40:ea:27:61:7a:6b:1b:c8:f0:82:c1:02:
41:71:5f:4d:40:df:cd:8a:af:57:f3:5e:e3:41:53:47:f3:b8:
2c:e2:7b:8e:d9:3a:2b:b5:c5:d6:02:fc:26:04:d1:fb:81:ac:
27:3f:b8:61:e0:d0:fe:f5:79:d9:e4:85:51:90:d5:02:d3:63:
25:da:03:31:87:27:c7:87:9c:f1:c7:96:f0:8c:b0:b7:6d:80:
b4:1f:5d:34:4d:f1:8c:d0:80:cb:f6:2c:7e:42:06:94:74:f9:
0a:48:3a:27:7e:b4:ae:3e:2c:67:7a:6d:aa:4d:d4:77:47:73:
d9:38:56:8b:10:37:fb:ea:77:37:86:d5:0b:33:3d:bd:f0:0b:
8e:54:a9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:18 2025 by rpki-client