Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/HIivL0NlSz9FLVx07QdHElcNH94.mft
File: HIivL0NlSz9FLVx07QdHElcNH94.mft (raw, json)
Hash identifier: GcAEoxrcr2+cVSJoHcX17cHkZjVN15bgDSvdmUCgM1k=
Subject key identifier: 28:E5:E5:65:69:39:E4:38:80:5D:5B:72:3C:7D:22:66:58:D2:E6:99
Authority key identifier: 1C:88:AF:2F:43:65:4B:3F:45:2D:5C:74:ED:07:47:12:57:0D:1F:DE
Certificate issuer: /CN=1c88af2f43654b3f452d5c74ed074712570d1fde
Certificate serial: 0194BCE0D4483CA50BD7EF432FFC28ED0E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIivL0NlSz9FLVx07QdHElcNH94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/HIivL0NlSz9FLVx07QdHElcNH94.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: CCupZ2Z50lEeozRfCFyqGlk11BE.roa (hash: u0mXYzOevuF7/VUH3KREJcVDAaOJuSJnSH+Q3fKIqwg=)
2: HIivL0NlSz9FLVx07QdHElcNH94.crl (hash: fX6T/W2Arr4Y5XO4tuKbndX8rIBv1ECLFUXWurdrHgQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d4:48:3c:a5:0b:d7:ef:43:2f:fc:28:ed:0e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c88af2f43654b3f452d5c74ed074712570d1fde
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=28e5e5656939e438805d5b723c7d226658d2e699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:43:70:89:41:aa:8e:32:e0:ec:91:14:e3:da:
42:a0:c4:f6:62:3f:06:ca:a3:76:a1:95:b6:bf:a7:
0a:5c:54:9c:53:3d:b0:9f:f8:1e:f5:f3:2e:26:50:
5a:d8:7e:8c:de:6c:74:2e:78:a3:25:f8:7f:6d:1a:
f0:46:e6:7f:ce:4e:7d:2f:53:72:12:8b:7d:f8:ca:
68:c8:28:33:ec:1a:ed:f6:78:90:d2:58:aa:23:a2:
c0:54:96:83:d5:6d:15:3f:65:73:b1:ea:f6:be:e1:
fc:90:eb:2c:74:89:f3:88:4b:62:ea:3b:f3:14:0e:
db:57:41:7a:32:08:ad:5d:f3:b5:1c:01:9a:c1:73:
63:cc:a8:f9:1a:fd:af:1d:ea:20:1e:02:cd:16:ab:
62:29:14:e2:d3:f1:45:6f:bb:82:a4:38:5d:17:95:
f5:38:52:ec:96:0c:44:a0:e2:4d:8e:18:36:7f:06:
5f:15:d9:0e:44:64:3a:28:95:3a:2c:8c:32:4e:e0:
fe:fe:47:2d:7a:08:e3:d7:10:ff:7f:bb:90:8e:ac:
21:25:4f:f4:3f:d9:13:3c:9b:07:c9:46:8d:53:5c:
7c:cd:48:32:fa:a3:ac:95:e7:2c:9e:f6:43:3a:7d:
5f:9e:a3:6a:d1:6f:22:d6:ba:fd:58:2b:63:93:45:
87:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E5:E5:65:69:39:E4:38:80:5D:5B:72:3C:7D:22:66:58:D2:E6:99
X509v3 Authority Key Identifier:
keyid:1C:88:AF:2F:43:65:4B:3F:45:2D:5C:74:ED:07:47:12:57:0D:1F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIivL0NlSz9FLVx07QdHElcNH94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/HIivL0NlSz9FLVx07QdHElcNH94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/HIivL0NlSz9FLVx07QdHElcNH94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2a:62:02:67:c7:b7:c0:0e:0e:bf:a4:63:4e:8a:23:d3:b0:
57:ac:13:e2:92:af:80:61:e4:f8:9c:45:13:29:41:ad:bb:7e:
77:87:c3:60:44:3b:91:fc:4b:a8:dd:ec:04:9f:c8:a5:4e:27:
0f:85:1e:98:3c:a0:4f:c7:db:a2:cb:70:bc:c4:a2:87:95:f7:
02:a3:c1:0c:9a:55:6e:76:d5:ab:8a:07:19:8a:5d:34:0f:13:
6d:94:3b:04:40:8f:f5:92:67:6f:82:24:75:56:6c:04:0b:e0:
a3:7d:23:e3:be:89:09:c1:3b:2d:84:1b:3c:cf:23:7a:0d:60:
42:39:5b:24:78:f4:b7:d5:98:43:41:c7:0a:10:06:48:8f:4d:
a8:95:32:3a:5e:e6:14:1b:54:7f:09:8f:9f:89:5c:9d:fa:a7:
2e:66:f1:28:96:9e:89:59:8b:53:bb:b6:ef:87:c8:58:90:b2:
09:6c:19:67:be:5f:32:e1:e5:d3:80:d8:1a:4d:b4:1b:88:5a:
f6:54:ab:a3:e0:54:f7:76:31:a2:d6:20:dd:f3:25:56:20:25:
83:d5:55:75:6a:07:34:5b:2f:30:49:3d:4b:6c:1d:11:bc:ff:
42:08:25:9c:4c:11:22:ce:da:1d:9d:8f:60:e8:8f:1b:49:d8:
08:01:62:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:12 2025 by rpki-client