Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
File: HDepAm5Fto_kc1pGm3VjYTCtElw.mft (raw, json)
Hash identifier: NW1shmLPgcVFxd3Frzb0HqH9crPDHPzvawSdABTiSVE=
Subject key identifier: F7:0F:12:B8:F5:6A:7A:7E:9E:F8:27:CB:3A:22:B6:0D:D0:F3:61:D1
Authority key identifier: 1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
Certificate issuer: /CN=1c37a9026e45b68fe4735a469b75636130ad125c
Certificate serial: 0194BC3BF50B2A8AABF90FD732B0F263E33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
Manifest number: 0763
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: HDepAm5Fto_kc1pGm3VjYTCtElw.crl (hash: eirffArpAtW7aUFJ8zFmUpiN1GOqA91oXAZ9AxoK1os=)
2: uaDvodSl9Qqt6SU3QvEP4PKpm0c.roa (hash: KfFNiihZ95ffen8bkT+elj9FXLgX4E04ZxK55q4T9Kw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f5:0b:2a:8a:ab:f9:0f:d7:32:b0:f2:63:e3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c37a9026e45b68fe4735a469b75636130ad125c
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=f70f12b8f56a7a7e9ef827cb3a22b60dd0f361d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:72:1a:f7:af:64:02:91:84:8a:aa:e3:4f:79:
74:57:3b:d5:a5:d8:f9:2c:18:b3:30:73:80:eb:e2:
d5:15:a5:ed:b8:7c:06:c2:f4:37:2c:d5:7d:4d:e8:
f3:af:33:25:84:76:21:80:cf:64:f0:d8:1d:f4:a2:
bc:65:ca:18:52:d9:48:2a:ec:77:20:30:52:ea:36:
79:14:dc:a3:97:04:e9:3d:60:ec:4f:9a:1f:46:6f:
f8:df:cb:e6:d5:c7:68:c7:84:6e:b3:e5:65:d2:66:
6b:ba:bb:c3:a7:c2:32:c1:09:de:12:d4:fd:02:a7:
16:d9:10:22:81:62:9e:12:cf:bb:e6:ba:b4:59:dc:
c0:fe:0a:7d:12:70:09:64:91:5a:89:60:22:bb:7c:
c2:3c:71:e2:dc:76:45:b7:90:a6:83:34:25:5e:73:
43:23:2c:ab:b9:5d:7d:e0:7f:ad:0e:13:43:21:8f:
61:81:a2:e9:07:cf:e5:c7:58:a6:aa:1f:ad:d9:1d:
ac:4e:42:75:cf:a6:9f:42:f6:f5:8c:2f:5a:ea:dc:
a9:74:69:30:b8:7f:2b:66:28:5a:98:33:9b:c5:45:
78:95:26:07:5a:41:9a:b2:4c:aa:19:77:80:c8:1e:
28:f3:ef:d7:60:3c:ee:ae:fa:49:1a:ad:a7:e9:98:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0F:12:B8:F5:6A:7A:7E:9E:F8:27:CB:3A:22:B6:0D:D0:F3:61:D1
X509v3 Authority Key Identifier:
keyid:1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:eb:95:71:6a:71:d9:6b:07:d1:86:58:5d:d7:06:85:0c:7e:
af:5d:e5:7d:83:3f:0f:bc:42:cc:08:34:98:d0:65:77:ad:0e:
4d:b0:8c:f1:ca:10:8c:07:a5:3c:01:d9:fe:69:5e:d1:fe:8d:
91:9f:e0:12:9a:c1:40:f7:c3:7c:42:cf:92:06:cc:cc:fb:8e:
e3:a5:16:1d:53:fc:06:52:ba:12:e2:aa:ad:7d:d6:35:d7:00:
81:10:d3:45:ac:50:f7:9f:6b:7a:cb:d0:19:f6:b2:16:b8:49:
02:9e:35:de:3f:a4:13:ad:f4:2b:37:e8:4b:c2:6e:5e:fc:d7:
36:76:01:41:d7:79:6f:a0:96:54:35:ee:6b:77:c1:3e:3d:87:
cf:40:59:91:6a:d2:38:f0:4c:be:f9:b4:7c:45:6d:6e:18:4b:
62:dc:f4:69:57:6a:4b:bf:e9:de:0c:c1:4a:68:cd:63:e7:8c:
9f:76:e1:94:49:4e:73:6e:a5:78:b0:9c:d7:8b:97:d0:eb:96:
31:2e:54:14:0c:54:b8:21:f9:ee:7d:5b:d6:99:a1:cb:2c:dc:
79:21:db:bc:a9:47:38:97:81:13:65:1c:99:b3:bb:f4:01:3a:
7b:7e:23:80:cc:1a:39:46:69:5e:9f:e5:93:cc:ff:87:84:da:
45:76:c9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:12:51 2025 by rpki-client