Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
File: HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json)
Hash identifier: SIyPBM3kY3VmIAgQ1+wbmKm5ORijR9HD2nTKyoV57Ps=
Subject key identifier: 13:0E:B5:BD:7B:FE:A1:83:51:13:A1:DD:1E:1D:48:9F:1F:71:37:90
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial: 0194BD85732EEB419EB318C17A3966F5EC6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
Manifest number: FD
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: wagzZtAu5ZRfOBBhuOHMfxEX3AmbjDO66bKHxXS4H8I=)
2: liqpeGCwYwmu9HIJXhtRdiCnJ1w.roa (hash: PH03F8UhRKFA3g0ZorCZDIyppRrDIopkxrEtCKPjXS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:73:2e:eb:41:9e:b3:18:c1:7a:39:66:f5:ec:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=130eb5bd7bfea1835113a1dd1e1d489f1f713790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:95:72:f3:d0:a9:9c:b8:43:86:e3:2d:22:
de:30:70:06:37:8a:3d:52:df:a4:3d:a3:b5:1f:74:
d1:da:05:d7:33:54:fe:b9:f6:2f:a3:d0:ee:9c:82:
3d:92:2f:46:4d:e5:91:b5:81:18:26:e3:78:9e:25:
2d:e9:cb:e1:34:ba:85:61:03:5d:53:00:d6:cb:55:
00:a1:aa:af:8a:80:2b:67:ab:39:be:c4:90:2f:7d:
a5:f2:cf:89:ce:39:d1:d9:30:47:3d:a1:9d:1e:5c:
21:7e:72:af:11:cb:fe:44:21:43:29:35:e0:e1:7f:
28:b7:f6:7c:91:69:09:34:73:2b:a9:9e:6e:0f:69:
67:77:4c:48:0c:fc:09:c0:ab:2e:28:ae:dc:1b:89:
e3:19:6f:4a:e1:77:20:9d:5c:13:75:7a:f5:89:f8:
73:12:2b:cf:87:24:9b:92:ee:1f:fa:8e:e0:1a:dd:
bd:e4:fd:bb:52:d0:23:f2:8d:bf:ce:7d:3f:9a:19:
4c:24:39:73:66:b5:72:fb:71:11:74:10:14:dc:aa:
9c:31:77:b4:ee:33:73:40:5d:ee:40:ef:ef:2a:b0:
a0:26:39:fd:cb:01:cd:86:ea:6b:75:54:26:c0:8b:
98:be:75:e2:5b:94:25:df:0b:c7:85:ce:10:d5:7e:
db:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0E:B5:BD:7B:FE:A1:83:51:13:A1:DD:1E:1D:48:9F:1F:71:37:90
X509v3 Authority Key Identifier:
keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:55:b0:dd:2f:54:59:73:49:dc:9b:80:0d:17:ee:c9:cb:c7:
f3:98:c0:0a:aa:69:ee:15:5d:6d:73:b3:7d:52:5c:ac:7f:b4:
38:4b:8b:25:52:60:bd:c7:e4:13:c3:c7:8e:a1:67:cf:13:17:
86:65:f9:0e:9a:17:14:86:6b:5e:00:0b:23:3c:40:4d:28:4d:
99:90:0b:e8:db:af:ae:5d:8a:d4:1b:98:eb:5e:d5:9e:dd:5b:
5a:6d:b2:c8:6b:d6:25:94:b9:04:94:29:6a:b0:b7:55:67:ef:
a7:b4:73:fb:26:1f:38:21:da:5e:c4:b4:74:7c:1b:48:77:c2:
37:c3:93:b3:bf:25:3b:94:9a:ac:18:12:c5:99:ed:f8:d5:68:
cc:da:46:7d:69:67:89:55:1d:7d:f4:37:36:99:a7:d1:65:e4:
a9:d4:99:f1:ab:26:0a:cb:c5:65:11:a7:e9:76:91:60:ef:a6:
87:dd:76:1c:0d:79:1b:ef:3a:e6:d5:10:fd:7b:ae:29:1b:3b:
7c:48:db:46:e0:8c:5d:52:12:6b:c8:1d:ff:21:5c:ff:40:92:
71:62:bb:69:e6:9f:89:6f:13:58:7d:ca:c8:3a:96:9d:03:c7:
5a:92:c7:e0:08:38:01:41:10:24:69:54:c9:0a:b7:a2:4e:12:
d6:23:02:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:23 2025 by rpki-client