Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
File: HRxS8VUvbqDwZNejt521wc8Wa9A.mft (raw, json)
Hash identifier: KdALy5OZtKHqYXtffkODrtrBVhjJwtz4XyGf5VwbRt0=
Subject key identifier: 2A:6D:B4:6F:E9:15:0A:EE:36:33:C6:42:84:03:BA:2D:59:B9:6E:98
Authority key identifier: 1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
Certificate issuer: /CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Certificate serial: 0194BD179A23DA146893C41DF1607A0D69BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: HRxS8VUvbqDwZNejt521wc8Wa9A.crl (hash: SDhRb2RUVoQWz26fuFX56v1tU2BVqwJLHJh1VBk7fjs=)
2: OqLUCxtgxChqlU1u5DSrV7o7hUE.roa (hash: 137N4QJ5LT3R5FaNUW+c79pvczICoEGACd1IGeCfKGY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9a:23:da:14:68:93:c4:1d:f1:60:7a:0d:69:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=2a6db46fe9150aee3633c6428403ba2d59b96e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:48:94:d0:b0:3b:fb:db:42:b1:ac:3f:f3:0d:
f7:15:55:41:8b:3c:44:70:a5:c1:92:2f:66:28:b4:
83:cd:63:8d:a4:b5:e8:ae:3f:6b:3d:31:7c:12:68:
1a:ea:cd:e4:e3:ec:ba:5b:51:37:61:0b:20:07:ac:
ca:6e:b1:fb:f1:51:11:4b:d6:99:b9:d7:e9:31:c5:
10:d6:1d:58:4b:6a:09:c3:8b:a1:2c:52:95:22:e1:
af:fc:f8:60:a2:9d:d0:1e:50:af:b3:7c:c2:99:91:
14:e7:56:61:a8:b4:0a:9f:f4:4a:68:9b:37:51:e3:
c0:61:43:c1:12:8e:30:e4:70:00:69:7d:70:27:b7:
bb:66:c1:57:ed:77:e4:35:45:33:a1:49:f6:b0:00:
70:53:66:e0:87:2d:87:25:1d:a1:c9:df:dc:66:a8:
23:41:ae:3c:21:c5:3c:a8:6a:20:8b:ba:5f:49:28:
12:56:04:3e:6e:00:08:64:b4:1c:e1:cf:92:5a:cd:
a1:ae:51:5e:52:90:64:a6:2f:0f:ff:c3:c4:73:d3:
95:7c:80:cb:6b:11:da:0b:9d:41:51:e5:e6:bc:ac:
54:d8:d4:39:23:3f:5c:a2:1b:39:bc:08:3c:b8:b0:
ee:dc:f1:a2:47:fc:cf:1a:92:73:96:b9:f8:b1:a7:
13:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6D:B4:6F:E9:15:0A:EE:36:33:C6:42:84:03:BA:2D:59:B9:6E:98
X509v3 Authority Key Identifier:
keyid:1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:08:43:b0:81:d4:82:82:56:f0:11:bc:01:56:2f:48:bd:f0:
db:52:f7:33:12:12:0a:3f:cb:93:fa:e1:04:03:23:37:21:3e:
18:a3:b4:4c:f5:54:ff:05:4f:5f:91:9a:2f:88:bf:5d:73:b0:
7e:b4:d1:00:49:31:0c:64:cf:c4:08:cb:6e:f6:ef:b4:7d:21:
6b:c9:ca:2a:1e:50:29:e8:01:44:56:5c:43:63:25:b7:89:f4:
75:fb:2d:be:f6:fc:55:ad:02:bc:ef:aa:b5:11:bf:f0:a8:63:
8f:86:35:87:cf:9a:aa:8f:0d:6e:2f:e6:c0:64:6f:92:f1:43:
41:d9:7e:01:23:bb:4d:80:aa:c7:64:aa:74:d9:56:21:2e:40:
5b:88:48:d3:e9:46:31:27:34:13:fa:a9:b5:fe:2c:95:ab:03:
5c:9f:d7:e3:a4:02:8d:13:75:a2:16:9b:aa:1a:6b:0f:9f:ce:
f9:ff:f9:5d:cf:e4:fa:d0:40:46:97:82:7e:30:dc:3e:b4:31:
d8:2e:39:6a:f7:fe:a8:ed:6e:a2:10:e5:d9:32:2d:92:f8:64:
c6:b2:b8:2b:5d:64:79:bb:5e:e5:8b:aa:f6:d1:e6:47:6e:13:
fa:78:83:00:a3:d7:6d:64:92:d3:e7:8c:54:70:ad:df:34:68:
a3:71:d8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:38 2025 by rpki-client