Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
File: HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft (raw, json)
Hash identifier: QXmIK2TuZOoD3hm3KMj1ANYLlwKP8VXlJ/E46D3YuTw=
Subject key identifier: C2:D6:B3:D9:7F:C0:EF:24:03:FA:C1:DC:AC:9A:4D:99:96:8F:2F:94
Authority key identifier: 1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
Certificate issuer: /CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Certificate serial: 0194BCA97D9464B680FA3D9A06BF562D7311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl (hash: 6R5Ttd4dsa5h76qD3Q5bXpGu//vF7kCJK0DPKmhaVO0=)
2: UhsTPDlkEVTfjN0gtgklGlfn_mQ.roa (hash: gvwxeqU03k4MQD3WdF59OWVu6wgm7kgHM+ORIWuetR0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7d:94:64:b6:80:fa:3d:9a:06:bf:56:2d:73:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=c2d6b3d97fc0ef2403fac1dcac9a4d99968f2f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:89:d1:e2:19:bb:cc:b9:db:03:d0:4c:e3:
9d:51:95:cd:c5:15:b1:10:c0:f7:ee:c6:5c:d2:f7:
88:f6:83:45:f1:8e:e8:ba:a6:b0:12:58:23:0a:ad:
68:86:23:fb:b6:d3:a4:57:51:74:77:cd:4b:4e:c9:
12:38:b7:93:61:36:30:5d:e5:86:e9:47:e7:67:6b:
85:d3:b2:05:64:db:5a:a2:ff:aa:07:ea:5d:dc:bc:
a9:46:8a:5e:de:70:ec:87:54:60:12:73:da:b0:45:
c8:8e:65:2a:69:ad:8b:0b:76:f0:93:2a:ee:52:27:
95:ac:f0:ce:50:31:5e:6e:67:a6:48:8b:53:00:7a:
6e:f2:d1:61:e9:bd:15:a1:6e:8c:e3:64:56:7a:2b:
ce:dc:11:23:cb:45:ff:63:1f:82:c4:50:16:0d:b1:
8e:42:4f:81:77:8a:4b:e6:9b:5a:72:e4:67:69:dc:
d6:93:07:ba:a5:da:19:a7:6c:e4:c7:0e:75:53:20:
f3:ed:4b:13:d6:14:63:0d:f5:cc:d7:56:5a:a6:d5:
85:af:5d:e1:f9:79:bd:18:d4:59:df:47:33:c1:00:
63:12:bf:61:8f:97:3f:63:ee:67:e6:27:b1:89:1e:
45:2a:4e:12:48:12:cc:79:49:65:b0:35:3d:d3:3b:
84:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D6:B3:D9:7F:C0:EF:24:03:FA:C1:DC:AC:9A:4D:99:96:8F:2F:94
X509v3 Authority Key Identifier:
keyid:1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c5:a1:ea:ad:aa:91:5a:a9:48:92:59:f4:59:5f:0b:81:a6:
d5:57:ff:3a:05:ea:78:04:0a:41:37:12:40:56:c9:8b:dd:a3:
c5:45:7e:03:51:25:09:26:26:58:b6:44:33:da:40:a1:7f:a2:
00:60:81:e5:52:5e:13:0c:21:97:08:a8:60:df:92:fd:66:14:
2f:28:53:26:7a:b0:6b:8c:75:7c:a3:3f:ed:ef:fa:ae:c8:8c:
c5:ef:29:74:2c:85:4e:04:6b:58:ff:11:fd:94:c7:3f:46:dc:
b4:f4:12:0b:48:60:52:05:03:5f:81:b2:0d:02:34:d0:fc:86:
b7:40:c7:5f:47:f8:c0:26:40:b2:66:88:c1:84:fc:4d:ea:01:
f0:73:ee:e7:2e:a1:33:9c:6d:71:cc:0b:47:76:4e:a2:df:db:
e4:d0:2a:f2:33:e6:10:a7:f5:9e:1e:aa:f2:98:7f:9a:8b:4c:
c9:78:09:71:14:37:f7:ac:cf:01:9d:3c:d2:9e:18:4a:78:4a:
ad:f4:08:d0:40:ab:5d:fc:17:04:ee:67:ad:b0:e0:45:39:47:
f9:7e:f4:e3:bb:e6:8a:d4:4a:0b:12:22:b0:87:e6:6f:83:9a:
31:53:b8:6a:5f:08:dc:4b:0c:30:ea:df:d4:3a:c0:01:3c:5b:
56:60:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:28 2025 by rpki-client