Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
File: HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft (raw, json)
Hash identifier: 69AbWE5gstT3pyvqKeqHogkpBwYUI0P4gkWQ+gNKlBI=
Subject key identifier: 9A:38:FA:81:3D:54:10:58:9A:C0:F5:93:D8:30:02:BE:4F:14:21:EB
Authority key identifier: 1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C
Certificate issuer: /CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c
Certificate serial: 0194BC3C6820E708B69A01B1B47A6ADE6289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
Manifest number: 114E
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl (hash: fabs9NkVTJU71H435E0KCoWqvod0d+zgqFdL4qLADzw=)
2: Vu2y-aZXZUUf1w0WU_d1LDGMCjI.roa (hash: FtyHvpwzr+fctqlndkuiTxqEdI3uy3i+5i35b5nlvso=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:68:20:e7:08:b6:9a:01:b1:b4:7a:6a:de:62:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=9a38fa813d5410589ac0f593d83002be4f1421eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:46:c9:a8:8c:06:1b:55:2c:f6:0a:a9:a4:
1b:64:74:50:11:7c:8e:14:17:c1:77:d5:c9:5c:11:
cf:a5:2a:d0:98:7c:f5:89:c7:a0:ac:70:f7:41:14:
31:97:cb:ef:82:34:02:2f:aa:1e:1a:ab:f3:95:87:
60:d8:a8:dd:c0:43:23:9d:42:1b:22:f5:65:72:b8:
09:69:09:51:e0:d6:88:36:62:77:f9:5c:a6:a3:b3:
3d:f8:3e:a1:8b:91:9e:8a:dd:b9:91:d6:d1:1b:db:
1c:97:47:73:8d:3d:98:b6:71:da:ec:74:0d:3a:ba:
f0:ef:0c:04:f7:a0:1d:f1:ec:db:98:53:6f:e6:90:
d1:b1:93:7c:69:d1:3d:ba:6c:86:ba:74:7e:69:af:
bc:ab:b1:34:06:f4:77:8e:d6:e7:d7:51:0b:e1:0c:
3e:13:e3:fb:1b:81:93:70:a3:e8:bf:3b:23:54:e3:
58:6e:21:ce:13:32:2c:6b:7b:f5:d4:77:42:d7:ce:
c6:6b:ec:9b:e8:ed:51:fb:4a:8c:06:70:cc:c5:44:
d5:64:75:48:9d:ce:1f:30:d9:09:e2:86:23:71:87:
a8:73:4f:4d:a0:27:14:e6:67:55:8e:54:23:92:02:
fd:53:40:a3:04:fb:e6:56:8c:97:1c:92:6e:46:fa:
86:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:38:FA:81:3D:54:10:58:9A:C0:F5:93:D8:30:02:BE:4F:14:21:EB
X509v3 Authority Key Identifier:
keyid:1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:31:0c:e4:f7:7f:e6:4a:aa:11:8c:3e:ce:c3:24:4a:8d:78:
00:e5:a4:f1:d8:c5:cb:34:dd:43:eb:c5:7e:4b:fe:82:a1:09:
76:61:df:9b:98:34:27:79:48:87:78:7f:fe:39:18:62:e9:d0:
fb:1d:1c:5d:56:fe:6b:6f:55:78:f6:be:08:2b:ea:f2:4c:46:
a9:ac:f7:cf:89:1d:25:bc:28:f5:2d:25:e6:17:e8:21:93:ee:
e0:46:ec:16:0c:bf:ef:88:3c:78:41:a5:d8:cf:75:38:4b:91:
01:7e:39:b1:4a:98:d3:5f:86:67:07:8c:66:a5:3d:a0:2a:de:
24:9a:92:99:12:8d:46:45:81:73:74:5b:1d:d6:40:bc:20:b4:
6d:9f:7c:f0:00:13:9f:f8:06:38:6a:80:0a:6e:89:e7:a7:0e:
0f:15:bf:f6:0c:29:65:34:f9:b6:c0:a3:e0:c6:5c:af:df:ab:
fd:cd:96:56:79:2c:80:94:86:84:55:c2:df:0e:ea:cb:2b:17:
8c:72:8c:75:3a:73:cc:5f:b7:15:20:91:67:fd:d5:66:7a:54:
56:85:c7:3d:57:30:83:bb:61:89:df:49:d3:93:87:46:40:52:
d3:fc:27:d5:bf:85:14:14:67:46:4d:a8:5a:51:ce:29:10:2a:
a4:1e:c2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:34 2025 by rpki-client