Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
File: HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft (raw, json)
Hash identifier: ULtC2cW5ja3nHNjGWepDjVa2b0s+YbgVoY/utZLJey8=
Subject key identifier: 01:E5:20:8E:03:B0:47:E4:56:D8:20:71:E5:32:46:33:23:A7:7C:7D
Authority key identifier: 1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26
Certificate issuer: /CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326
Certificate serial: 0194BBCEBF62ECC08B85BC35759954F996DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
Manifest number: 0984
Signing time: Fri 31 Jan 2025 10:01:16 +0000
Manifest this update: Fri 31 Jan 2025 10:01:16 +0000
Manifest next update: Sat 01 Feb 2025 10:01:16 +0000
Files and hashes: 1: Bh5IC48JAR5FB63v2dnakNOTX34.roa (hash: FMLGNxpZDrf8rppZSMEnpJR9pt6oa5eJBxowJrkMq7o=)
2: HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl (hash: XF3gQAGX3lrCw27yzzQejp2Fk8ymQA1PAbuMeNwYi3A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bf:62:ec:c0:8b:85:bc:35:75:99:54:f9:96:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326
Validity
Not Before: Jan 31 10:01:16 2025 GMT
Not After : Feb 1 10:01:16 2025 GMT
Subject: CN=01e5208e03b047e456d82071e532463323a77c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6a:29:b3:72:69:08:61:27:53:5c:33:4d:30:
b4:c8:74:3c:de:60:8b:50:29:64:99:5e:31:a7:fb:
24:ff:52:49:77:60:1b:9f:39:77:cd:8a:74:13:cc:
1c:93:d2:39:4f:e2:82:9f:82:27:4c:38:dd:23:ed:
23:c6:5d:30:0a:67:f6:f6:fc:94:67:8b:8d:3a:36:
e1:82:e5:e5:c8:8a:c6:37:1a:0c:39:13:0c:89:87:
3d:90:54:88:36:3c:b7:b0:70:27:bc:4f:90:89:34:
bd:41:33:8a:27:7f:b5:f9:f2:57:e0:21:55:af:30:
40:4a:90:33:e5:f5:53:71:c9:02:ab:3f:21:b0:6d:
de:2f:ae:76:5d:20:95:16:77:8c:45:0a:b2:22:4e:
c8:77:e0:ea:d9:49:12:e3:52:b5:a0:06:76:fa:c8:
44:71:37:e3:06:e2:e5:7e:d8:9c:fd:1e:6b:19:fd:
8e:2e:84:0d:5d:b6:f1:19:6e:5f:1f:bf:0c:5a:6a:
e3:e9:21:ed:c0:cc:f0:38:1f:ec:51:5b:cd:e8:5e:
ce:cb:2b:39:85:0b:93:e3:d1:01:7c:f5:c4:40:26:
0f:58:03:47:a5:77:75:61:44:6a:d3:7b:c5:b6:17:
82:d7:a7:db:49:4b:4d:fa:05:73:ec:a4:66:a7:2b:
c7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E5:20:8E:03:B0:47:E4:56:D8:20:71:E5:32:46:33:23:A7:7C:7D
X509v3 Authority Key Identifier:
keyid:1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:90:ba:03:51:50:95:0f:71:f3:59:de:4e:90:70:41:d1:ae:
a1:b1:29:51:b1:f0:e5:79:6c:7a:a4:ae:bd:7a:a9:2f:ff:32:
97:42:f1:00:3a:d0:56:c5:28:08:ce:8a:39:81:da:7d:5d:e1:
97:b5:b9:22:b7:4e:36:b5:84:67:0d:1c:42:f2:74:83:7c:08:
66:e6:ca:38:c1:e0:ef:80:d6:84:c9:cb:93:09:6b:3c:76:15:
aa:91:9f:a7:4e:65:96:ce:d8:1c:d6:1f:04:48:ac:b9:ea:8f:
a4:be:ce:66:7a:8a:59:33:ff:1f:79:21:f8:ec:d3:0b:28:cb:
e4:27:0a:42:56:13:03:60:92:a4:67:83:cf:50:49:7b:0d:43:
43:18:2d:c4:10:0b:25:26:71:72:c1:0d:bb:2f:d7:56:f7:73:
fc:ae:fc:e4:c2:0f:64:e2:26:1d:43:03:08:8e:7e:10:4c:45:
2a:76:40:ed:fb:ac:0f:bb:1a:5d:fe:8c:34:af:3c:1f:44:99:
70:61:be:d9:e5:3f:ed:65:04:b1:e5:0a:07:cf:74:3d:1b:0c:
dd:9c:fc:ac:15:8c:ec:ca:4d:92:0e:5a:87:4a:e6:9b:c7:67:
78:9f:90:c6:29:88:1e:cd:e2:5a:02:40:c4:ad:59:1f:94:99:
10:ea:c1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:55 2025 by rpki-client