Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
File: HSixjfJE24nyuXpscmKXM7OIYC8.mft (raw, json)
Hash identifier: oyk8T/z4FNdRaeBAhiQ0L/E0GqGxgx/uOLOLSOfSres=
Subject key identifier: 09:7B:AA:9B:F8:0F:22:F9:3B:ED:63:16:76:A1:0B:BF:0F:EC:0C:E0
Authority key identifier: 1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
Certificate issuer: /CN=1d28b18df244db89f2b97a6c72629733b388602f
Certificate serial: 0194BC05137E1836C69B263556014B527362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: HSixjfJE24nyuXpscmKXM7OIYC8.crl (hash: M7Zl2rHrWmKY27YfktkeKowkHd212pTucpKUXr1Lc+k=)
2: sleOMLu6lCo0yQ_O9Go3ZMBJ4nQ.roa (hash: mFLE25zkAY/mi0s19XSunEJLEf8g+Qy7QzSZ17V9QYU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:13:7e:18:36:c6:9b:26:35:56:01:4b:52:73:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d28b18df244db89f2b97a6c72629733b388602f
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=097baa9bf80f22f93bed631676a10bbf0fec0ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:db:9d:f3:36:68:f0:1b:42:72:ea:ed:c9:
1b:21:27:e7:c9:d5:c6:c5:17:1f:a8:37:6b:e7:e3:
0c:c4:0d:bb:d3:fe:3e:4f:65:16:7f:41:d4:ad:c3:
ef:21:55:8a:54:f8:6c:71:75:ff:b2:3c:a6:de:bf:
04:aa:7b:88:99:2b:0e:84:6c:b3:b4:52:7e:bb:30:
3c:fa:41:df:63:ea:d8:83:55:df:e2:ed:58:23:72:
2d:de:6f:91:0f:b3:24:ac:bd:59:a0:86:1c:83:24:
a4:f0:76:89:32:e3:3d:f7:60:ea:3e:b4:56:7d:46:
92:fd:b7:5b:fc:57:f5:32:0c:6d:3d:f4:f3:5a:e0:
b1:f4:5b:70:0c:ee:ec:70:e5:a4:ba:54:a1:6b:2b:
63:5c:be:70:46:67:97:56:e3:a9:5c:a5:33:85:c4:
b8:f4:10:df:05:a7:f0:50:6b:7a:53:19:56:66:d4:
07:b7:5f:2e:b2:5e:23:82:a7:66:bd:1d:9b:47:7b:
88:5f:bc:6f:bc:ae:c1:60:8b:46:97:08:28:cc:9b:
5f:56:12:37:13:8d:c3:12:5d:d6:d5:a8:92:2e:78:
df:e7:88:05:1a:dd:4c:ab:8c:5d:c6:64:34:d0:7d:
7e:90:4b:9b:91:6d:0c:6c:f6:69:e4:cb:9a:81:e9:
c4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7B:AA:9B:F8:0F:22:F9:3B:ED:63:16:76:A1:0B:BF:0F:EC:0C:E0
X509v3 Authority Key Identifier:
keyid:1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:26:a9:c1:2e:06:57:55:21:16:d5:1c:ce:ef:ca:87:ae:78:
df:42:9a:e0:04:86:0c:d5:08:e1:03:df:7d:68:a7:2b:a5:09:
20:f2:ea:01:c1:86:8e:75:30:3e:0e:ed:ef:81:e4:a1:be:23:
63:22:01:1f:b1:8a:d6:a0:ed:45:16:16:0d:01:92:95:90:4b:
98:ef:8a:a4:81:d4:18:c3:87:81:da:37:35:5c:d6:d8:a9:ac:
db:93:f8:25:1c:21:b0:04:ac:de:07:7b:93:af:3f:9c:9a:b7:
47:13:ae:28:9a:b9:e4:a0:c7:4f:73:6b:fa:26:44:3e:4d:3b:
95:ab:f3:e2:ce:59:17:6f:6e:70:f7:1d:f1:92:01:3a:e1:f9:
d0:53:d8:37:d7:6e:03:3f:af:fa:12:3f:68:1f:31:36:54:c8:
05:9e:83:56:66:4e:62:02:07:5b:16:d9:bd:4d:14:18:bc:7b:
8c:d1:98:c4:82:bf:b1:7a:37:0b:d7:76:11:44:92:be:3b:e9:
74:76:56:e3:cb:a6:1a:b6:1e:dd:91:d2:05:bb:4c:fe:7f:80:
f7:7d:13:51:56:54:84:01:b4:a5:e6:f9:ee:e2:33:5f:37:50:
a7:55:2f:5d:5b:33:5b:c3:c5:24:d1:13:e4:bc:0a:ce:86:5d:
bc:4a:d9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:45 2025 by rpki-client