Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json)
Hash identifier: KTV11A+J1DBP/ETT7Nnz+E9ofiqIzJafpXt2c0n5Wcs=
Subject key identifier: 08:72:53:C7:E4:E3:9D:2D:A2:6F:6D:47:E0:28:5A:2C:6D:16:C5:A0
Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Certificate serial: 0194BC3C1CAA321C6788A4AF3AA42EC2B67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
Manifest number: 03EA
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: ukVAgFUH0Pd/jOBk7TinGwOfzoRrmUQTt4zo9ZObMOU=)
2: hQR0mmyfCcP0k0VyVReQd9TwA2Y.roa (hash: /yk+WBXgj9/PFpjinmPki6KFsYrLmbEwlVJawiNfh5M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1c:aa:32:1c:67:88:a4:af:3a:a4:2e:c2:b6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=087253c7e4e39d2da26f6d47e0285a2c6d16c5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:56:a5:2f:a7:cc:c7:d8:4e:ea:44:87:8f:
cf:9c:8a:ee:4e:c7:e6:32:e5:7f:23:aa:e6:7c:d8:
9d:71:69:28:be:71:2a:84:b0:1e:bb:e2:eb:60:83:
60:46:7b:1d:b7:bd:91:7e:53:5e:f4:33:76:fd:29:
c2:87:dc:ad:3e:bb:a7:5b:bb:14:ab:a1:20:09:82:
72:1a:b5:a2:36:be:0f:42:f0:50:bb:9a:e6:84:3e:
c4:41:af:8b:1f:79:49:bc:71:f0:e0:aa:12:25:a8:
13:bb:65:b4:6f:0e:14:b5:d1:dc:8f:84:d2:9f:1e:
4d:04:7c:0a:4c:2a:0a:8d:f2:72:5a:94:4a:7d:8e:
5a:91:e2:56:b0:fc:15:f8:e8:ca:b1:00:52:90:d9:
dc:36:6e:6e:11:3a:71:17:ff:2b:e4:f8:0d:70:bf:
ad:09:ad:f6:a6:58:8a:18:81:3d:0b:b9:44:33:0c:
11:0e:da:95:cf:05:40:c4:28:6a:4f:8e:7d:32:e2:
1c:8e:e4:38:41:8c:0d:b4:cf:ec:7b:5a:09:85:8d:
df:27:b4:6f:d8:37:95:70:60:59:a3:44:4a:5f:eb:
0e:f2:b0:19:b6:99:2e:42:83:37:59:e6:48:b0:fb:
86:1a:97:d9:ec:b0:5a:7e:9f:3f:53:53:e4:f7:f4:
e9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:72:53:C7:E4:E3:9D:2D:A2:6F:6D:47:E0:28:5A:2C:6D:16:C5:A0
X509v3 Authority Key Identifier:
keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:bd:5b:51:a8:07:e0:f0:2d:89:0d:3d:fb:51:cc:13:a5:6e:
0e:d2:3a:50:21:5a:ac:ca:0a:6d:f4:ca:e7:15:91:8b:2a:2c:
09:59:35:2f:5b:ec:c4:32:e0:50:d4:eb:76:cc:3d:87:63:98:
ab:ba:26:92:43:7a:56:19:72:2c:b0:8f:8b:b6:db:9b:10:6e:
21:c6:93:ad:d5:d6:39:fc:88:05:11:10:2f:92:c6:06:3e:d2:
9e:4f:63:2a:f6:93:37:53:9a:3d:aa:dc:e7:a0:03:42:0d:f5:
95:37:6e:8e:85:95:67:12:39:58:0d:f5:33:32:a5:10:2d:d1:
75:bb:81:06:61:07:72:fb:47:83:bf:c5:80:d3:fb:58:46:62:
fc:88:6e:9c:51:b5:e9:2c:88:1a:52:48:25:26:fe:29:30:95:
9d:66:7c:96:dd:d7:6f:2f:1b:56:13:d1:33:1e:a1:42:08:33:
5b:03:e5:83:8e:40:f9:ba:ab:ac:63:4b:23:35:da:4f:48:34:
a4:77:e2:9f:10:b2:49:e3:d0:9e:76:6f:30:fc:69:e0:f8:5a:
e8:07:be:99:35:fc:14:77:18:9a:08:aa:11:54:6d:eb:d0:5b:
72:b0:0f:3b:df:57:7b:f9:57:a4:fe:e9:e5:31:d2:49:c6:9d:
dd:3d:d7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:11 2025 by rpki-client