Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
File: HjCmImLcyyGgEEs07bgrlRXKzfs.mft (raw, json)
Hash identifier: NJMvDxx/XccsQTIyZv5dfHXp2M7T84GMmKabWqdh6pc=
Subject key identifier: AD:48:3B:1B:01:70:0A:B1:09:81:35:CB:01:6B:D1:F5:F9:18:9F:9C
Authority key identifier: 1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
Certificate issuer: /CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Certificate serial: 0194BD4E5FFC286BC4A1580F027AE0B8A6AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: 99ovKIs7DqoXCFgMc3tY-Dn815s.roa (hash: LCqxC97TPyTHpUsMAjf+F4zipAHzhEXoBKAv7DqvaTU=)
2: HjCmImLcyyGgEEs07bgrlRXKzfs.crl (hash: 4f1yn63tW8AxTP8CpltVVMwtkGIqcq1bVWjVhn5GHck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5f:fc:28:6b:c4:a1:58:0f:02:7a:e0:b8:a6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=ad483b1b01700ab1098135cb016bd1f5f9189f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:2d:3f:23:89:ed:bd:51:63:6f:f8:a9:5f:
2c:1f:65:b6:66:58:b7:1a:11:b4:28:f6:1c:d6:67:
6d:82:3b:f6:b0:e6:86:03:f2:1c:55:35:de:06:68:
22:51:5a:b6:f8:06:18:f0:0a:3b:cc:18:88:85:ee:
f2:50:a9:f9:9d:c9:79:6e:cd:9e:b2:7a:37:2a:0a:
a9:07:42:d7:4c:f7:6d:2a:91:92:70:18:49:c8:6b:
1c:a6:7a:3c:a6:3f:94:03:13:4c:b3:86:a2:0c:9f:
92:57:54:08:df:23:1e:e3:c1:53:ed:c6:b7:1b:d3:
ec:ee:d1:42:6d:ad:8b:85:df:b1:55:e2:e3:3d:39:
83:ea:20:8e:e7:55:d0:b8:9e:51:84:38:74:ec:46:
90:64:c9:58:1b:a0:25:5c:60:26:6b:74:9c:57:c0:
83:2d:6a:7e:dd:ab:ff:d7:51:57:57:4f:ae:6a:4a:
68:34:c4:a4:ed:e0:02:7f:5f:0a:53:7b:02:66:fe:
d9:51:0a:44:6b:c8:c5:35:30:f7:c7:a3:a5:e1:8a:
0e:5f:7c:f1:79:c3:8a:27:fe:85:fe:0a:ec:ef:12:
c2:70:23:57:23:3e:d6:c0:3b:a7:62:ec:e1:47:30:
06:3f:d8:c7:a5:4f:89:4c:5b:95:dd:26:14:21:4a:
e5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:48:3B:1B:01:70:0A:B1:09:81:35:CB:01:6B:D1:F5:F9:18:9F:9C
X509v3 Authority Key Identifier:
keyid:1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a5:3c:82:6f:69:51:ec:f7:0e:5b:a5:d8:60:4f:fc:8c:04:
1d:83:f9:4e:f4:5f:ac:e6:a4:a8:b3:13:03:12:10:69:aa:ac:
d4:67:84:db:df:6d:57:64:15:6b:a3:57:82:a0:7a:d0:df:74:
cd:1a:12:16:47:2c:c7:2e:fb:5c:71:27:42:67:91:2e:2d:d1:
2e:fd:ee:84:51:32:12:e4:05:e3:4a:d3:78:2a:5f:d7:12:f2:
42:8e:88:25:4d:8d:d4:2a:4f:aa:c7:0b:b4:b5:df:db:30:65:
be:18:14:87:87:e8:8f:b7:43:94:73:f8:e6:d9:5c:2e:13:8b:
27:d0:06:d5:d5:3e:76:48:67:64:00:cd:0f:b7:88:6b:6e:e5:
57:71:ec:35:1f:5c:1d:a7:f0:06:7a:03:66:d2:62:07:23:39:
6f:4b:9e:70:9e:bf:d4:a5:a9:4b:00:f3:8e:5c:3f:6d:5b:15:
b4:40:ea:f4:f9:2e:8c:bb:52:90:31:f7:59:97:f6:f6:8b:92:
71:a6:de:28:04:56:28:a3:4b:0d:d0:ad:db:b5:bc:f7:fd:33:
30:5e:64:d8:4e:e6:37:05:7b:40:89:f1:ca:2a:f9:25:10:ab:
ac:7b:4a:79:19:fa:5b:d9:ed:dc:67:d3:3a:ca:18:6b:ae:b4:
56:51:f0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:15 2025 by rpki-client