Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
File: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft (raw, json)
Hash identifier: NZFHuj7Dp5EYgdYATc6x1ZbIfl19JNUru+X64znvOo0=
Subject key identifier: F8:9A:13:F2:EC:1A:75:87:10:18:67:4A:49:61:60:B6:1C:3A:EA:82
Authority key identifier: 1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
Certificate issuer: /CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Certificate serial: 0194BD8527C62E8338483361841A8666747E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
Manifest number: 138F
Signing time: Fri 31 Jan 2025 18:00:07 +0000
Manifest this update: Fri 31 Jan 2025 18:00:07 +0000
Manifest next update: Sat 01 Feb 2025 18:00:07 +0000
Files and hashes: 1: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl (hash: tuaLg3K8zsBGS/N6ZacyK+FOb5ziq/yngzX/j3k3648=)
2: qcI0xgzGH7hMBr0NX1qxJT5Yq20.roa (hash: NMb9DDG1I4uoDnTSNrOwSazV1iEG7Jn5atQjCvyrEBk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:27:c6:2e:83:38:48:33:61:84:1a:86:66:74:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Validity
Not Before: Jan 31 18:00:07 2025 GMT
Not After : Feb 1 18:00:07 2025 GMT
Subject: CN=f89a13f2ec1a75871018674a496160b61c3aea82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:de:ec:24:72:cc:6c:0d:96:9e:12:89:4b:
c9:f2:09:be:71:75:f3:cc:02:e1:5b:bb:5a:3e:b2:
1e:c1:03:a5:f0:ac:11:ed:7e:53:2b:80:e7:0f:c4:
62:59:20:0e:ae:0c:89:38:c7:d3:97:10:6e:bf:d3:
0a:7d:20:5a:4c:b7:53:74:8e:9d:fa:90:3d:a6:37:
c5:1f:70:74:c6:c7:36:3a:ba:ac:f9:b7:f4:26:44:
e8:7d:5a:23:85:ac:e1:87:c8:e3:3f:5d:bc:00:0e:
14:78:88:26:e0:a7:e3:cb:62:9f:b6:5b:c8:6b:6d:
8f:22:4b:97:9c:1a:dd:a9:3c:dd:0a:8a:92:26:f3:
ee:85:44:60:35:10:79:0c:0e:5e:48:4b:5f:f9:dc:
bb:92:8e:c9:a5:d0:33:25:34:1e:84:62:78:2d:53:
37:7b:d0:e1:2b:1f:ce:51:66:9f:bb:3d:7f:08:26:
a1:3c:b4:82:e7:71:e7:ed:81:55:5a:a7:1d:46:2e:
ec:24:ea:46:1b:73:53:d2:24:9f:d1:73:c5:6c:48:
11:98:07:12:c0:42:3f:8f:bf:dd:d5:81:66:34:de:
ab:c3:9d:7c:9c:84:8f:d1:1c:61:68:6e:cb:8f:c7:
99:9c:33:42:1f:69:7e:aa:1f:4a:95:a4:c1:9e:c2:
52:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9A:13:F2:EC:1A:75:87:10:18:67:4A:49:61:60:B6:1C:3A:EA:82
X509v3 Authority Key Identifier:
keyid:1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:88:31:22:d7:02:41:4b:41:9f:e4:c6:77:8e:19:11:2e:e2:
40:ce:64:40:54:d1:2e:bf:01:b4:64:ea:79:fb:bd:a8:4e:42:
ea:39:44:2f:e0:1c:86:6f:8e:57:bc:20:e5:14:db:d4:2a:79:
61:b6:15:9b:e1:71:c8:e5:4b:ed:0e:a8:2e:dd:e2:fb:71:d0:
f8:9b:22:c4:85:47:94:7d:e4:3d:75:aa:57:89:60:48:1a:06:
10:d3:c8:10:76:d4:17:85:18:bb:23:0b:15:ed:b7:ab:82:3a:
57:9a:04:fe:ef:e0:9e:c0:35:cc:a5:a5:7a:69:0d:70:85:0e:
e5:d6:15:5f:74:dc:6c:bc:b0:96:3e:31:7a:1b:d9:c6:ef:82:
30:3f:28:48:c3:ec:35:a4:74:3d:0f:a1:cf:38:9a:9b:d1:3c:
61:8a:da:fc:d8:39:36:3b:3c:f4:53:c9:92:6c:11:ef:11:9a:
e6:0b:b8:98:02:04:8f:9a:e2:11:3e:4b:5b:2c:88:1c:ef:19:
e5:fa:9a:58:dc:e9:90:b7:13:d6:47:5a:bf:85:34:50:40:56:
40:bc:09:9d:9e:79:29:17:64:d0:4f:a3:2f:ed:ab:05:2d:a4:
a9:d1:ff:0a:39:63:43:1d:c9:4a:eb:d8:63:0d:79:8c:4a:1d:
00:1f:32:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:07 2025 by rpki-client