Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier: 3GvoymEM3fZq/wcyCnON+6uNWRVHWIUABZ9w05Rv8gQ=
Subject key identifier: E6:94:CF:90:0A:2F:73:BB:02:63:F1:F2:2C:09:27:4D:02:93:A1:2D
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 0194BD856EF0532679616A6B136B772F6F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: f0+JrRN8NkHngAcL2VjIlBTf3mdmrdC38w2KDmIrXoo=)
2: PH1KPTvJYv47OjAjiI-5OkL1pNU.roa (hash: 2IzqWVU8JQGawrqtS4bnXQhHUBo8/qehpa6NqKn8fqM=)
3: xXZrc11XJMpe3FIEgXquZ7cQMc4.roa (hash: 0ZmFSW3jR6m6Ytqwpd1AemcuQmGYOC/9lY5R72sJjL0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6e:f0:53:26:79:61:6a:6b:13:6b:77:2f:6f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=e694cf900a2f73bb0263f1f22c09274d0293a12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:56:b7:6f:13:50:bb:a2:d7:9d:52:21:c0:
bf:3e:34:10:5a:a3:a9:01:16:f9:cf:ba:b9:b8:a4:
a7:d5:93:13:66:8a:40:c6:6c:99:2c:31:67:c6:bd:
bc:72:1d:7c:54:a9:9b:14:df:d3:5f:dd:13:df:aa:
99:8c:27:9e:e0:92:cf:6d:2e:4c:c8:c6:c0:44:52:
18:aa:ce:9c:41:0d:fd:90:65:ff:d1:9f:f0:8b:7e:
77:fe:c2:66:19:28:c9:b1:ae:b6:ca:da:51:8f:94:
cc:9f:81:67:21:bb:2a:0f:52:28:bc:cc:54:da:44:
24:4e:8f:af:66:76:23:80:ba:d1:97:e0:35:da:16:
36:94:dc:21:0a:0b:af:fe:45:f6:d0:90:90:4e:a8:
03:49:e0:3f:a2:9d:7a:f7:ff:64:f6:8d:2f:c9:24:
41:7d:88:1c:ee:29:c1:0d:80:be:a1:4f:e5:c8:56:
e4:d5:47:42:47:38:d2:db:07:e7:5b:24:e8:8e:9b:
db:dc:91:88:60:dd:43:6a:b7:76:0f:24:8b:66:39:
17:4a:b9:7b:36:70:bc:4a:c5:2b:3a:67:af:b1:67:
47:87:72:45:b8:5f:29:58:c7:be:7d:1f:ff:fa:d2:
58:3e:cd:0e:b2:51:37:f8:03:87:33:af:24:ff:02:
40:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:94:CF:90:0A:2F:73:BB:02:63:F1:F2:2C:09:27:4D:02:93:A1:2D
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:35:d9:f7:7c:df:af:64:70:9b:61:57:ba:b6:44:34:3e:95:
1f:ea:ae:5b:21:e1:28:4e:c7:15:2c:00:3e:2a:00:4f:e8:70:
77:08:f7:d0:79:24:c2:73:85:03:27:65:49:d8:ea:a9:8e:db:
e0:6a:c2:ce:40:41:31:d5:11:42:17:b7:c2:58:4f:88:4d:c9:
1d:f8:66:57:5c:3a:0b:00:04:d4:fb:e2:23:df:8c:32:bf:58:
61:c6:a9:e7:a7:0d:ac:28:79:3c:43:33:fd:d9:e7:c0:f7:ab:
87:78:17:33:af:a0:1c:d1:5a:b3:a9:f8:28:b5:ff:76:8b:9a:
3f:02:f3:32:74:28:6e:09:30:6c:37:3f:1d:57:0a:3f:90:da:
8b:8c:c7:dd:b9:b4:01:cf:ab:d0:23:81:e9:e9:cb:7a:57:d1:
4e:98:81:1f:62:1f:8c:14:d3:78:54:03:cd:68:24:60:cb:6c:
0d:a7:6c:f7:1e:d7:de:0e:99:96:95:a8:62:36:ed:3f:b2:17:
a3:8f:7b:48:79:3a:63:f1:54:6f:32:54:ba:58:37:32:8c:24:
41:68:6b:8b:84:56:d5:17:97:ec:80:bf:ec:8c:0d:ea:f3:5b:
e2:25:52:4e:84:c2:78:15:02:5f:49:1e:57:b5:94:e4:50:61:
65:b2:3c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:10 2025 by rpki-client