Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
File: HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft (raw, json)
Hash identifier: EkspbHZqoh0qzqMXfieYCeHp0WA7qLgYY6Hp8vv4Fk4=
Subject key identifier: 88:34:17:5B:88:7D:8D:2E:00:46:ED:8B:62:02:D0:AE:46:BE:A1:3A
Authority key identifier: 1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99
Certificate issuer: /CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99
Certificate serial: 0194BCE0E87359307F14394EC369088E0848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl (hash: nfTaG3uU++RqPXk+aTf/oPym5TF/ZsDeSYKU3866dEw=)
2: Rk8F0_O96bWnV23XOY1ym8DMObc.roa (hash: mN43AwUntAXDuv+4vVnXFfluzZ73Kps3qVN8w0gCSEI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e8:73:59:30:7f:14:39:4e:c3:69:08:8e:08:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=8834175b887d8d2e0046ed8b6202d0ae46bea13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d6:7b:a4:51:00:d8:de:ea:93:bb:84:8b:f5:
1d:59:32:51:72:df:ce:38:09:17:00:da:9d:e8:03:
6c:5b:b1:af:d7:30:75:f0:42:5c:11:73:4c:aa:43:
b0:07:a5:f4:49:65:9d:13:09:6b:b8:40:88:a5:cb:
47:e8:f4:1f:d1:6e:92:f3:b6:92:c7:2b:05:b9:a2:
f8:21:25:f5:1c:bb:a6:e5:70:c2:e7:9f:cf:03:a3:
97:bc:62:86:43:e2:8b:39:05:af:e2:b8:33:d6:d0:
6b:c6:08:8f:db:79:31:f5:a0:7b:bd:25:63:f2:cc:
02:8c:4c:6b:24:d4:d7:64:8e:38:93:f8:89:8d:a8:
fa:6d:3a:d8:d8:59:be:1f:b8:be:20:a9:bd:09:6f:
29:58:95:9c:da:4a:7b:15:ab:fc:5e:d9:09:99:6e:
86:1c:ec:68:d6:c0:49:6e:6f:8c:84:ba:a3:1b:f9:
49:29:dc:d6:e4:17:e5:25:43:b3:6a:20:5b:ea:a1:
fe:cc:5f:06:fe:1a:d0:30:6a:ab:14:37:b3:83:f9:
01:21:65:3d:90:93:c4:19:bb:4f:f7:a7:40:f5:38:
4e:0f:a9:dd:40:6f:49:f2:28:0f:5f:33:21:59:71:
a5:39:af:c1:5f:d2:55:56:b9:bc:4e:a4:73:63:85:
d2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:34:17:5B:88:7D:8D:2E:00:46:ED:8B:62:02:D0:AE:46:BE:A1:3A
X509v3 Authority Key Identifier:
keyid:1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6c:ee:23:bb:33:82:80:09:07:6d:4e:91:53:93:cd:97:a8:
fb:6e:2c:52:1c:4b:9d:09:ba:7e:ad:25:4d:3a:cc:5a:cf:a1:
9b:3d:77:c3:79:c4:d9:ad:7c:77:23:99:d6:dc:11:51:2e:f4:
09:3e:cb:a5:96:5a:1d:6b:22:46:6b:57:ad:3f:bf:e7:40:73:
f6:70:9c:1c:ff:5d:1d:ea:fa:bf:fc:44:92:8d:30:c6:00:b9:
44:a7:11:19:5b:fb:ed:10:2f:97:3f:7f:1b:dd:3b:f3:6f:fa:
53:0a:ee:7f:ea:f4:74:d4:d2:69:30:1c:d1:da:f1:dd:ef:3f:
3f:8d:94:c6:a0:20:d5:65:2d:b8:61:77:fb:9a:bf:aa:45:43:
8b:12:be:21:7a:6a:46:25:ea:4a:57:e1:93:91:93:bf:f0:63:
fd:6b:4a:34:c6:7b:76:4d:cd:05:ac:f9:85:c6:d2:58:cf:3c:
6c:f2:94:d5:dc:e4:33:64:cf:c8:87:f3:4a:f1:8b:73:f3:e7:
0e:8d:3d:35:e4:3d:8a:2f:a3:e9:1e:39:0c:13:b4:62:ad:e3:
d3:94:92:b4:16:b6:fb:1f:8f:78:f3:f2:19:d6:e9:39:b8:3c:
ad:9b:fc:94:92:c6:76:cd:f7:e6:0b:74:b2:37:97:27:b1:b1:
09:17:db:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:43 2025 by rpki-client