Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
File: HPMelYpvqF39UX6lohZ6NZzgJpE.mft (raw, json)
Hash identifier: 5aFwYVmv9X3cfGZ/GmXRZh41ZeTQBvZQq8Xh3ih4S3s=
Subject key identifier: CA:66:B2:AE:28:CA:A6:36:00:74:3B:43:5D:D5:D9:5A:1F:2D:D8:94
Authority key identifier: 1C:F3:1E:95:8A:6F:A8:5D:FD:51:7E:A5:A2:16:7A:35:9C:E0:26:91
Certificate issuer: /CN=1cf31e958a6fa85dfd517ea5a2167a359ce02691
Certificate serial: 0194BC3BF8A32783B207E250368DAEDA1E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: 1Az4dE0ZX7KAKDKykX60lhzHZkE.roa (hash: 8wvcW71BfAfRwFPQ94lUDGje+TfkTvnyVdfl40+6qJo=)
2: HPMelYpvqF39UX6lohZ6NZzgJpE.crl (hash: mBGp9gdul4fSVhFuhDo0DV7n8t53FLzbDCEL1FnL9Vo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f8:a3:27:83:b2:07:e2:50:36:8d:ae:da:1e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf31e958a6fa85dfd517ea5a2167a359ce02691
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=ca66b2ae28caa63600743b435dd5d95a1f2dd894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:70:39:9c:ee:a1:22:7a:95:e4:b7:46:71:91:
bc:e9:12:2d:c9:8f:d3:2e:83:66:27:2e:c9:c9:7a:
27:3c:c2:81:81:ac:d6:ca:b6:77:18:64:41:24:f4:
09:d8:cd:f5:8e:8d:c7:ca:1a:5a:d9:54:48:cb:33:
5f:dd:32:f8:18:ff:11:b3:d0:21:d2:f5:9e:fd:09:
3a:ed:ca:e1:16:f9:e7:ff:22:65:51:7f:cc:81:35:
19:8b:c0:0d:d9:80:f0:14:92:83:3f:7e:28:b6:b4:
59:0a:cb:c4:8f:a4:13:9a:84:51:0f:17:5b:3c:c3:
b2:1a:2b:75:a9:bd:c1:1b:ec:1e:6d:33:ad:dd:84:
f2:df:18:b5:1a:cd:01:e4:28:6e:9a:02:61:8c:db:
fc:c3:0a:a3:42:5e:02:47:7e:47:66:e1:80:0a:ef:
85:ee:71:ef:91:e7:79:cc:f8:07:06:2b:61:cb:bf:
69:f2:38:be:9d:1b:9f:d7:41:79:b2:4d:32:d1:e9:
46:87:f4:86:02:d8:f4:d0:b7:1b:ae:20:92:24:df:
25:8b:c3:70:5b:fd:da:34:d7:d6:11:06:48:dc:49:
f2:2a:18:c3:cb:a3:2e:6f:2e:55:12:ef:af:49:66:
93:7a:a6:ca:e3:96:c0:6f:73:9c:f0:3d:0a:bd:d3:
96:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:66:B2:AE:28:CA:A6:36:00:74:3B:43:5D:D5:D9:5A:1F:2D:D8:94
X509v3 Authority Key Identifier:
keyid:1C:F3:1E:95:8A:6F:A8:5D:FD:51:7E:A5:A2:16:7A:35:9C:E0:26:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:75:38:a2:38:6c:23:75:2f:28:83:5f:df:b2:9c:dd:8e:7a:
30:04:0f:9b:22:21:88:82:63:da:82:29:bd:ce:8e:a0:dd:a8:
d6:18:39:16:52:51:fb:7e:47:e4:14:a9:b6:42:5a:47:c9:fd:
b7:c8:a2:cf:d3:32:ef:6a:be:74:04:e0:3e:d2:c4:71:c8:18:
cb:db:6d:57:54:ae:eb:f3:5e:8b:86:ea:4f:2d:a6:2e:4f:ab:
17:46:50:f8:62:9e:3a:b2:c9:f3:3d:a9:4c:f0:2f:ee:75:5d:
d9:5d:c4:26:6b:37:1e:f7:41:2b:23:91:1c:69:f4:41:b7:88:
65:fc:64:5c:f1:4e:db:9a:af:b0:f8:34:4f:50:c0:e2:46:9b:
d1:35:a9:f4:d7:7e:96:50:ec:c2:b3:33:b2:55:73:31:5f:09:
05:ec:51:1a:4e:0e:7a:24:83:47:67:97:94:b6:50:90:45:91:
b8:27:9c:0b:69:1c:b3:67:5a:50:5e:e2:33:3d:61:3e:19:46:
34:07:ea:fa:dd:96:1d:b4:74:0d:35:fa:d3:e8:ce:d4:0b:0e:
55:7d:2b:b7:2d:f4:80:3b:26:6f:7c:e5:95:ad:c3:1f:ee:28:
50:40:e9:c4:60:10:8a:f0:1a:f2:1d:89:6c:33:24:ee:51:51:
0f:24:e0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:39 2025 by rpki-client