Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
File: HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json)
Hash identifier: Y38Ub+1fbHQaDz+3FF+Jv2aDPcvAswSOqYkM2RbgtCA=
Subject key identifier: 6A:D2:E6:B0:03:5D:25:52:ED:DE:A5:FF:6E:52:75:DF:BD:EC:27:D8
Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
Certificate issuer: /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Certificate serial: 0194BC3C98E56A8054C15DD1BDFD2E02795D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
Manifest number: 0289
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: WFR1qfeo9HhnDAVuGn129N5xbYlSJFhqae7rlUSFQGI=)
2: s0bJG6Qp94T0ozPjLlAbRCJfTFs.roa (hash: qwFiBqb0rHrSmTwD9b+7ecXoNWtZfg8qRArEug26wV4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:98:e5:6a:80:54:c1:5d:d1:bd:fd:2e:02:79:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=6ad2e6b0035d2552eddea5ff6e5275dfbdec27d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:2f:bf:af:e8:11:4c:f0:20:a7:8b:27:a1:
da:00:6b:9d:91:29:55:b2:37:9b:a4:6c:e5:12:22:
f1:d7:04:98:cb:3d:a0:43:8b:5d:3b:0e:48:a8:07:
ca:ae:01:30:a1:5a:e5:3d:03:b6:86:d2:6a:90:31:
22:12:05:09:d2:5a:be:cd:be:82:9a:ab:98:25:06:
ea:76:77:62:4b:85:9f:76:a3:e8:53:e5:9b:18:91:
a5:c5:f7:ed:cf:10:7e:bb:22:26:b1:46:2d:e9:3d:
77:5a:5c:8f:15:5c:dd:e8:f5:c8:0a:bf:4f:18:bf:
94:b6:fe:71:3b:3b:0e:c2:7c:39:5a:2f:0d:45:f0:
bb:2b:96:15:3a:05:44:5e:07:74:97:bf:8d:67:90:
7a:7b:25:9b:f7:c2:eb:37:77:2c:cd:2d:8d:26:1b:
83:4a:9f:9d:ae:89:07:cb:cc:55:f4:ad:6e:39:0f:
17:44:41:91:4e:e4:cd:4f:1a:7e:73:1f:aa:71:d8:
1b:e3:91:b5:52:c2:0e:06:4a:6a:11:76:f2:d5:69:
6b:a2:04:46:2c:31:8c:38:be:b0:ae:38:c5:ae:24:
3e:d1:85:c6:f1:03:5f:aa:e2:4a:5d:81:5a:ad:57:
bc:d9:1d:b3:b7:51:92:ec:c0:f8:93:88:d9:a1:37:
5d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D2:E6:B0:03:5D:25:52:ED:DE:A5:FF:6E:52:75:DF:BD:EC:27:D8
X509v3 Authority Key Identifier:
keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:cc:dd:1e:79:2b:be:57:22:1e:a3:f4:44:0c:a2:84:92:72:
fd:e6:1c:1a:91:9e:fb:17:2b:e6:a9:71:94:0e:18:f8:06:24:
84:2f:77:13:10:eb:96:78:1a:a1:91:00:a4:96:d7:36:5a:f7:
07:79:71:f5:b6:b1:3e:e8:d7:37:a3:bf:39:f3:75:67:8d:64:
26:2b:79:6c:3d:e6:86:56:c2:2d:5d:eb:68:bf:3a:e6:92:6b:
b7:56:80:9f:7a:80:29:be:e1:9a:16:8e:bf:bf:e1:a3:5a:17:
62:f1:11:33:ee:97:15:8c:25:46:72:3e:ff:27:f6:a7:36:3c:
d6:89:a5:ac:b3:f6:39:ed:bd:43:44:90:84:8c:f5:bd:1b:c0:
6e:be:b2:04:b7:39:dd:ec:77:1a:c9:2c:08:83:d9:0b:71:c5:
32:59:4a:3e:13:31:45:f2:34:4c:34:f4:3c:29:aa:97:1d:b8:
1f:7b:c5:dc:1c:65:6e:04:ee:70:c4:8d:6d:c9:eb:33:a5:e9:
39:6b:fd:27:ca:22:59:30:03:bd:78:2e:78:5f:cd:6b:6b:d0:
7e:1e:84:ed:1f:f4:01:82:35:fc:56:b9:23:13:fd:c1:6b:a9:
39:77:3b:8b:a8:48:79:74:9b:5a:92:0b:79:76:86:f4:4c:ea:
3f:ea:c5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:19 2025 by rpki-client