Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
File: HdxT0d56LvfrK5DICRVUQUAEJIg.mft (raw, json)
Hash identifier: guR7z4db/1Yq2ge+VrCVPz668Ec1wjjJd6hpCoXd8dc=
Subject key identifier: FD:F1:BD:89:A3:BD:1F:7E:F1:B0:F6:C5:71:12:8B:30:BF:FD:05:23
Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
Certificate issuer: /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Certificate serial: 0194BD4E5B9E6A5A86EB462893BE1BA7BC6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: 2Sogz2f-Y-Q89kALOaFwXGpENls.roa (hash: xWX/sBmx7Cmqhctcmi5B9YqU1V0kQKRLbrhmA5MXJ0s=)
2: AAZYcUjhuGAJA3sXjywaEslf598.roa (hash: RBp9easJVYqUVgaIiMMNSM2ioBAAirvckRHOuxL4X0g=)
3: HdxT0d56LvfrK5DICRVUQUAEJIg.crl (hash: S30INchdcES5ms9Yj4wA6cSSxLVqDbGfgL8xSIaPC9Y=)
4: KX2FVoJMwagFqXSqm7WmM6GiAdc.roa (hash: kL6N1Ap9alUNCwv0399F2Foe8bxiyXhyi55mwtllJAY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5b:9e:6a:5a:86:eb:46:28:93:be:1b:a7:bc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=fdf1bd89a3bd1f7ef1b0f6c571128b30bffd0523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a5:d5:74:87:ab:1b:87:df:95:26:2c:73:e2:
06:fd:2f:84:14:c9:1e:0c:de:5a:26:ae:54:2f:44:
35:47:c3:90:7f:3d:02:aa:08:b7:d0:17:3f:59:e2:
66:69:af:aa:29:d3:71:59:62:ef:66:d1:96:33:cd:
d4:75:7e:fd:14:3c:17:b0:95:f2:fa:7f:cd:f4:b4:
0d:6d:db:8d:1c:ef:58:04:98:e7:84:26:08:f6:e7:
38:3e:c6:55:c4:f5:17:56:b7:1a:94:67:22:9a:73:
ac:fb:be:4e:34:39:99:8d:5c:8a:86:b3:77:f2:43:
67:12:51:4b:d1:f0:42:67:25:c6:4b:16:2e:da:17:
d4:3a:e0:59:ac:b4:75:26:cb:68:92:e1:01:bf:54:
81:59:f1:91:36:5d:ef:1d:64:c5:81:df:5e:41:ea:
d7:c8:43:b5:73:36:d9:d9:18:74:28:19:e7:24:46:
e8:e0:0a:d7:c6:cb:f5:c2:99:7a:c4:43:3d:df:8e:
b0:2d:17:83:92:e7:68:c0:17:3c:1b:c1:54:9a:eb:
4d:02:96:3f:e7:07:7d:41:75:9b:8a:1a:40:46:60:
26:c2:ce:01:2f:c0:29:a5:fe:48:8f:2b:0d:64:81:
ca:1d:74:95:21:b1:08:2d:ca:2a:06:b6:98:b8:40:
b9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F1:BD:89:A3:BD:1F:7E:F1:B0:F6:C5:71:12:8B:30:BF:FD:05:23
X509v3 Authority Key Identifier:
keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:77:66:5c:c6:53:8c:bb:c2:43:4c:ba:dd:4b:45:44:93:c2:
b7:8e:9a:a7:2e:5c:b5:78:cb:d8:3d:c9:07:75:15:9c:4b:5f:
4a:e4:56:6d:7f:99:7e:fd:f2:19:68:31:d5:7a:84:75:40:c3:
45:51:95:6a:1e:5c:5f:be:ef:03:d4:35:5b:47:1e:02:0f:fb:
40:dc:16:d9:64:44:35:75:43:4d:d8:49:f4:fb:5f:1a:72:0f:
24:ee:e7:5a:2f:72:ff:18:1f:6b:ca:84:65:00:f8:94:30:60:
ff:9f:54:46:05:2a:8e:f0:50:6b:7c:64:db:57:f7:19:e4:26:
16:8e:52:e7:33:3b:e8:20:ba:f1:5a:bd:58:71:37:36:e1:10:
c0:df:7f:0f:85:ae:4f:54:ce:59:fc:d9:3e:32:a5:05:60:be:
36:3d:13:66:1e:40:a9:c2:e7:4a:58:4f:01:dc:59:d6:d2:ca:
d7:d1:50:90:28:15:0e:f3:97:c9:b6:6a:ee:9b:d2:b0:38:0f:
00:52:ee:55:01:cb:17:e8:52:29:fe:9f:8c:3f:a4:4a:91:53:
92:b4:0e:91:dc:10:09:4b:b0:4c:62:69:fa:65:33:4c:86:8a:
42:cc:de:ac:72:1d:51:41:bd:55:49:2c:e9:c9:da:79:9d:1d:
ed:61:81:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:51 2025 by rpki-client