Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
File: HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft (raw, json)
Hash identifier: w8s7swhbcUpY1MSVr+oOFlApGat5Km2Wnhau9n5G+U0=
Subject key identifier: 05:FE:77:1C:AB:E1:3A:24:B9:96:4D:EF:65:9D:2C:39:58:0D:4E:9C
Authority key identifier: 1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
Certificate issuer: /CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Certificate serial: 0194BD859ECB0FC90737EBB22EB66914AADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
Manifest number: 137C
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: 7Uvp6r5GtLtDblaOxc-Xb4Tnilc.roa (hash: pSYNsxlb943anM3s10VieWyFa7UKpRe9Vz625JGzG6g=)
2: HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl (hash: WaudBfYwjzm7Kjbr8TSx1hRqzZuUJPmENCRUPi5AK4c=)
3: eg7fhNdpROAUHy6qw77Qs2byi9Y.roa (hash: +DdhEKVICFbvbrCM7pp6/vAQohYV0VdhfUhy9Z1h54o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9e:cb:0f:c9:07:37:eb:b2:2e:b6:69:14:aa:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=05fe771cabe13a24b9964def659d2c39580d4e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bb:72:be:b7:13:a5:cd:47:af:47:9c:6f:dd:
88:d1:b4:08:6e:12:a1:fa:a6:2d:d4:9b:40:a5:03:
44:f1:f1:1a:a0:4d:8d:51:ab:a5:65:0c:0d:54:8f:
c8:d7:0a:54:e7:6d:13:8e:dd:78:c4:67:68:87:58:
be:6e:a2:df:a3:90:c6:74:7a:70:da:18:c7:ae:d5:
3a:20:80:e0:1c:b7:a1:df:0d:8c:a6:ea:ab:94:e3:
6b:11:de:bc:59:5e:05:36:91:77:b4:92:c4:8c:d2:
77:86:b4:0f:93:c9:97:21:56:23:8f:78:6e:a9:ee:
81:db:12:01:26:a5:00:f3:1c:df:74:1c:a6:3a:9e:
6c:03:41:59:11:da:07:28:d9:63:b5:1d:f7:0f:be:
23:a4:63:c6:f9:3b:98:19:14:7c:f2:d1:98:88:eb:
56:c6:01:48:ab:2b:97:b6:71:43:67:ef:ea:9d:b7:
90:88:be:d8:44:b5:6e:1c:6d:c4:bb:8d:ac:5e:3b:
05:22:82:c6:49:09:b2:c9:d5:5a:db:86:5a:b6:8a:
fc:39:73:6d:63:be:4b:a0:ce:ea:c5:21:d3:14:a8:
f2:f0:ef:48:21:01:63:d3:34:4f:f3:c1:e1:6f:f6:
75:af:0d:4b:b5:39:db:fa:7d:4f:12:4f:da:ee:f8:
87:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FE:77:1C:AB:E1:3A:24:B9:96:4D:EF:65:9D:2C:39:58:0D:4E:9C
X509v3 Authority Key Identifier:
keyid:1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:40:35:21:81:43:ac:08:57:a3:e5:0c:45:62:b3:e9:7c:8e:
7a:e6:cc:a4:12:67:c4:03:51:ee:d7:fe:b9:fe:b5:cb:6f:46:
f4:a2:ea:33:4e:c0:ac:83:ec:12:fd:c2:aa:22:48:8c:21:6b:
e9:88:bf:e7:a3:f3:40:24:7c:fa:8f:5f:c6:81:d9:a1:8a:aa:
6f:bb:fa:fc:03:e8:00:4d:4a:d6:19:1d:da:33:97:17:ff:d7:
d9:74:a5:ec:21:e4:9e:1c:62:2d:84:c3:a2:c4:d2:ab:33:1b:
f2:59:8a:2c:a8:47:53:82:df:f9:8e:53:c1:a6:d4:29:a0:cd:
0f:06:30:c1:d4:1e:d3:69:24:30:08:b0:86:cc:11:e1:36:fc:
dc:72:e6:ce:c6:ec:d9:c2:af:68:5f:85:9e:53:88:00:a8:29:
93:59:39:7b:a9:93:cf:9a:62:ff:c1:d6:92:8b:e9:2c:d4:a5:
68:b8:55:b2:8a:04:a3:d2:05:be:32:58:e3:75:4c:39:fb:38:
6c:46:53:c3:d8:9c:8a:96:de:8d:25:2b:80:56:d6:a6:39:23:
20:fd:d2:96:bd:c9:95:a3:ef:cd:15:a9:3f:ad:e1:94:ea:4b:
88:36:b2:48:59:00:c7:29:91:9f:97:9b:0a:dd:40:75:e7:f1:
b9:f7:f5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:29 2025 by rpki-client