Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
File: HEwmJz2igh_OJgdaoKbiMB7ISSc.mft (raw, json)
Hash identifier: /L7Ks6aFe6Z+QmZ7Nz1i/BEca9Sm/TtNkaoInym76Ag=
Subject key identifier: F9:41:9E:AE:55:B4:16:BF:6C:B4:1F:EE:5E:E3:50:A2:01:93:EF:1E
Authority key identifier: 1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
Certificate issuer: /CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Certificate serial: 0194BD175DFB2B8EDD0992453D04603DC877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: 5MK1ewnt7LozxEmddZiWa3omfKc.roa (hash: 7+tCKj1f1iwSFAN/o1/yY8fVwb73KSasEYzwGjDKXO0=)
2: DeHazeP3A9wAumTO_Rmx5RqWaqs.roa (hash: 0hOPuiiQ+UKk5lNFYgiHmEshvjQhpp/6FLqfnT4DM3I=)
3: HEwmJz2igh_OJgdaoKbiMB7ISSc.crl (hash: 4m0OTTH1ToqKEaVHBkJr+fcsGWc2ctqPABcMOvJs2A4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5d:fb:2b:8e:dd:09:92:45:3d:04:60:3d:c8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=f9419eae55b416bf6cb41fee5ee350a20193ef1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1a:5f:09:08:e5:3a:65:7c:30:e3:14:71:2a:
83:04:d9:ee:14:98:3f:c3:d1:1d:84:d9:4a:a4:98:
d1:f7:70:b2:17:ea:42:c1:2e:15:a9:df:f5:5f:57:
5b:60:47:61:7f:60:b7:37:7a:02:16:d4:64:8b:32:
56:10:d8:bb:2e:ba:6f:0a:f8:9f:b1:82:da:18:31:
16:70:57:6a:34:58:7d:61:0b:f8:17:bb:9a:4d:b2:
e4:7a:7d:c9:92:b2:8d:f4:9e:94:04:2b:87:e4:68:
aa:0d:79:23:85:57:8e:b6:85:bb:ab:fa:f1:19:f0:
72:65:8b:85:f3:18:ee:b6:b0:5b:21:f7:09:52:aa:
e4:13:c9:39:fc:10:a7:b1:b7:60:32:f2:4d:9f:3b:
65:9a:54:ee:ea:eb:94:16:60:12:c0:a2:f6:01:14:
e1:96:13:e9:8d:41:af:19:a4:36:b1:9d:79:3e:ae:
72:a2:f2:cf:2a:af:30:ca:bf:5c:69:78:db:58:80:
88:88:2f:91:4b:f0:4e:45:9f:45:87:08:8f:91:d8:
fb:a5:22:c3:e9:ef:a4:82:31:3a:79:6a:5a:c0:52:
60:e0:cc:cc:38:ad:68:e5:3e:de:6e:84:47:e5:a6:
59:ae:9d:54:2b:b0:5d:dd:bc:54:41:9b:af:bf:56:
72:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:41:9E:AE:55:B4:16:BF:6C:B4:1F:EE:5E:E3:50:A2:01:93:EF:1E
X509v3 Authority Key Identifier:
keyid:1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ae:f1:7e:fe:0f:59:fb:47:e7:23:c2:85:fe:c0:da:26:1d:
01:ae:96:70:96:a7:0e:95:d5:a0:e7:0a:72:84:00:cd:6b:66:
b6:f5:54:e9:ff:77:24:5c:b5:25:b3:4c:97:f9:d4:fe:08:d3:
f2:a1:83:aa:b6:44:91:7d:44:7c:85:39:23:db:02:5e:36:a4:
8a:2d:7b:e6:42:7a:21:34:00:ac:ab:39:bb:f4:1f:91:5d:80:
28:e8:26:67:f3:02:5b:28:58:f9:ff:79:d4:df:e3:4e:02:96:
66:52:e6:13:41:3e:41:27:54:7e:50:1e:ce:4d:f7:f5:cb:8a:
cd:63:0c:b8:47:57:18:97:6a:19:31:14:67:05:37:16:b8:d2:
fa:1f:5a:b0:6a:1d:0f:03:1a:da:06:74:89:ab:64:56:56:42:
87:7b:80:f1:54:93:18:18:55:fb:c0:ef:77:97:67:77:63:b6:
96:c4:64:cd:8b:d6:85:fc:60:4e:28:d6:44:b8:f4:1b:61:02:
8f:57:31:59:bb:6e:c6:d6:2e:88:f6:5c:c3:15:c0:f2:65:ce:
1c:e7:9f:73:35:b4:72:30:e2:96:2f:f1:d8:98:87:35:a2:12:
83:09:da:3f:8d:49:c3:e7:95:b2:f0:c7:11:ad:34:5f:ba:c8:
44:66:64:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:14 2025 by rpki-client