Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
File: hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft (raw, json)
Hash identifier: bP9T7XwqJpdagG/iOKsdY0t0mOD3lrK4TpxhXwNxIFo=
Subject key identifier: E9:29:11:1E:4E:7C:05:C4:FA:F0:2F:D5:A4:40:6B:73:3C:E6:4D:46
Authority key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
Certificate issuer: /CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Certificate serial: 0194BC3BDA5760661C03319A408CBD57D9A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
Manifest number: 01D8
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl (hash: XErf3c9fcn7SadPzxWJCS0NKlj9u6qXyABiVsXTZGQo=)
2: nN_zth4zPKd_5u8eXbKgVxxNgpU.roa (hash: fYd0D/qMuM9A5jDRly2LfP2prxzSj9ZxQKTRQ0yiS8Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:da:57:60:66:1c:03:31:9a:40:8c:bd:57:d9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=e929111e4e7c05c4faf02fd5a4406b733ce64d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3a:bc:8b:65:23:08:22:1d:3a:7a:dd:9d:6c:
5d:ab:3b:de:d2:25:7d:b8:a7:1c:75:e5:3c:a2:c6:
32:d2:f6:9f:a9:37:e0:2d:d6:7f:01:db:13:26:d2:
32:09:5e:98:8e:26:73:3d:da:5f:f8:9f:0c:ff:06:
c4:dc:c8:5a:e5:5c:7e:15:a7:49:e7:bb:f7:06:e2:
eb:79:90:e3:34:7e:c6:e4:bf:9e:36:2f:3d:1f:ce:
7e:ac:8a:16:3b:47:fd:b6:63:31:84:76:e1:33:16:
71:aa:51:95:ca:0d:c9:36:88:28:f2:b9:f9:34:2b:
cb:21:e1:fe:38:5c:3c:b4:ec:fd:b5:f2:52:54:50:
9e:ec:d4:58:32:d4:8b:f7:5a:e8:32:25:02:81:90:
cb:6f:85:8c:e5:44:00:5c:98:87:45:6d:03:95:c4:
35:24:4d:de:b1:0c:a4:e8:80:f0:78:ed:c2:35:7d:
1b:42:87:ea:63:8b:1e:89:c7:83:16:4a:5a:eb:be:
48:a1:b1:05:63:de:78:f3:38:e7:06:d4:f2:e0:04:
b8:09:85:2e:fa:53:04:36:37:9a:c7:41:25:92:3c:
f8:01:10:1e:cb:34:c0:0f:7a:f5:4d:b8:fc:7e:7e:
80:eb:83:78:ac:15:e8:fc:50:21:95:14:a7:9a:84:
9e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:29:11:1E:4E:7C:05:C4:FA:F0:2F:D5:A4:40:6B:73:3C:E6:4D:46
X509v3 Authority Key Identifier:
keyid:87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b0:49:7c:8d:4f:38:a8:b2:eb:a7:9a:59:65:cf:66:65:09:
6d:9c:bd:a4:44:85:26:a7:75:18:ee:91:51:5d:bd:dd:2a:67:
52:d5:4c:a4:23:c3:3b:6f:09:8c:ee:eb:97:30:09:fd:1f:d8:
d9:06:e1:59:d5:b0:ee:0a:d5:27:2c:44:f0:f9:99:ad:cf:f2:
93:77:0c:2c:3d:a1:2e:e3:1c:cd:e7:2b:69:f4:77:e3:2c:be:
b3:03:91:92:13:32:03:fd:f6:94:66:02:a8:69:8b:10:7d:70:
18:d0:13:21:30:18:03:1c:ac:ab:5c:1b:8c:4e:d8:11:e4:b1:
a1:3c:52:1a:63:80:53:b8:c2:f3:de:d1:d2:7a:95:de:fa:ad:
24:0f:70:ee:ea:a5:7f:df:83:17:60:32:5d:2e:c1:f0:3a:d6:
ad:56:a3:41:e0:d1:d7:e3:cf:85:4a:f5:fa:24:23:96:fd:2a:
2e:2d:c6:ab:27:2a:61:b1:b2:96:65:0b:13:90:39:8d:88:ad:
c7:17:37:f9:c9:5e:87:a5:60:2f:ed:d5:5f:96:a5:22:4c:75:
8e:4a:fe:81:71:95:35:c4:d7:b8:68:04:42:45:31:aa:73:05:
f0:44:ca:d7:a4:93:3d:f3:a7:76:40:0a:4a:04:e9:61:1e:cc:
5d:63:6b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:06 2025 by rpki-client