Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
File: 1HawBjUaL5zyqROG3lDOJ_FVBZU.mft (raw, json)
Hash identifier: nEKwaY1ZisacrtGdqVNSP42sZjbuOY/jzBwWswPGoWA=
Subject key identifier: DE:95:38:7C:B9:A6:69:91:5A:A1:7A:E7:78:E8:A3:A5:85:47:CD:34
Authority key identifier: D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
Certificate issuer: /CN=d476b006351a2f9cf2a91386de50ce27f1550595
Certificate serial: 0194BCE0684573E77324A18DC3800B737711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
Manifest number: 11CB
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: 0mGXGaCdx8b0IvVKiGo7317nAQw.roa (hash: JBoOppkoR2+2kdzZgQYn1vdyTCQusp5l9Um4sKeOKzw=)
2: 1HawBjUaL5zyqROG3lDOJ_FVBZU.crl (hash: houcdEx2KJph1E2LXeJcUu3jIxJ0Csx0vAbyhcIZtis=)
3: P3rY7Cmn84Ni11FziReIJTvis6Q.roa (hash: SHFkgztCNHhWPjHt5nCk5Bgx6ribEhAmnRifNZCrpkc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:68:45:73:e7:73:24:a1:8d:c3:80:0b:73:77:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d476b006351a2f9cf2a91386de50ce27f1550595
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=de95387cb9a669915aa17ae778e8a3a58547cd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:1d:bd:bf:0b:f8:a3:c6:2d:20:55:61:bb:
6b:b0:fa:8b:01:c2:57:17:c1:ef:43:c5:c5:cf:9a:
c9:bd:83:6b:1a:41:f0:e3:d6:37:cd:df:72:13:fd:
04:27:2e:ab:0d:b0:df:38:0e:9c:76:4b:cc:52:18:
76:64:08:14:cd:b0:eb:51:d7:2f:1f:03:59:e2:0b:
0d:a6:e9:23:5a:0e:34:db:e9:2a:18:0f:d4:97:86:
c3:85:ba:0d:bd:35:e8:2a:f3:d0:55:2d:3b:fe:1a:
97:12:61:3e:17:88:26:9a:2a:71:c8:dd:dc:10:bc:
3f:a9:a5:5d:c4:c7:b1:f3:8f:f7:58:9b:f9:d3:cb:
e2:f5:68:1d:28:70:ee:68:a8:fd:7b:b5:69:61:86:
cf:a0:d1:68:b1:d1:9a:6b:a9:d6:c7:c5:3f:50:de:
36:af:22:a5:91:d2:3d:d4:a4:b1:6a:7b:4b:3a:e9:
19:95:79:7e:fc:3b:52:27:61:ae:d4:ef:1e:2f:e0:
a0:4c:61:c0:c4:cf:57:a4:79:4f:9b:f9:f9:7f:b0:
f0:54:5b:00:07:58:99:08:5f:31:bf:05:8d:0f:88:
b4:69:1d:54:c2:9c:97:c5:3d:25:63:f7:66:9f:f1:
87:5d:9e:49:18:08:94:fa:5d:af:96:b0:09:d6:09:
95:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:95:38:7C:B9:A6:69:91:5A:A1:7A:E7:78:E8:A3:A5:85:47:CD:34
X509v3 Authority Key Identifier:
keyid:D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:99:ce:f2:fe:1f:2e:35:f0:fb:05:af:aa:d5:6a:06:f7:f7:
0f:68:50:0b:7a:9a:2d:ce:ea:25:5d:d5:58:0b:67:69:cd:6e:
db:96:ce:2d:98:98:04:17:02:35:91:6b:47:2a:02:5d:ff:8f:
73:aa:5b:58:01:fd:f9:b1:1d:11:60:94:9b:fc:68:0c:0f:2c:
06:8c:fc:85:50:f2:4f:95:82:da:4c:c8:a1:00:e8:99:26:ee:
fe:be:41:18:36:24:14:dd:bf:6f:af:0e:a1:16:d7:74:a5:6c:
b4:f3:e0:a4:a9:93:99:2b:dd:01:1a:61:c1:a6:32:ac:9a:18:
6a:42:08:cc:af:6c:17:a8:b1:7a:ca:7a:5d:c6:6a:74:51:b7:
cf:19:a8:7d:fa:97:0d:c3:57:52:ff:2c:e1:36:67:0c:37:2e:
1e:e4:ed:a6:07:eb:0d:71:a3:ec:c6:99:36:ba:da:61:4a:71:
98:98:7f:04:aa:e2:f2:67:bf:27:61:00:76:c8:da:ed:df:db:
10:2e:37:56:ff:2b:5c:a7:2c:91:7e:a8:3d:f8:e8:17:3f:32:
8c:44:3e:48:8f:d2:cb:36:76:ca:a6:16:4a:d0:d3:aa:55:29:
02:a6:b3:0d:c8:86:a1:3e:b8:af:0d:5b:f7:4a:33:d4:a0:96:
89:22:19:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:26 2025 by rpki-client