Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File: Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier: uxPI6ryRh8ZTXv0yTIXByBnjBYRt4yMPTvg+BReFqvY=
Subject key identifier: B8:4B:A6:56:2C:8A:FC:67:0F:5A:CA:65:D9:2D:98:99:54:EF:E5:D2
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 0194BD8598DFBF5E109C1236600FB5A8486C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number: 0C
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: vf1Cxe+WEfQhUfmphmWbeBBtcCpiavEI/avsMkxF8+I=)
2: vWFNnZ7ku_bDv3cZWcUoTNY51xM.roa (hash: zJdlE/i8/0ZO4I9H36rFnyS7sQvElC4bnZ8MDv94T8g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:98:df:bf:5e:10:9c:12:36:60:0f:b5:a8:48:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=b84ba6562c8afc670f5aca65d92d989954efe5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:d9:5b:db:74:36:ab:e7:36:f3:05:46:41:
95:db:08:f6:14:b8:ed:9e:ef:51:36:2d:7c:6d:8f:
6c:ce:cd:ae:20:4e:0b:6e:8d:6f:fb:82:92:90:81:
16:63:6e:62:f1:6f:47:bd:71:ed:37:90:40:b7:93:
4f:e9:24:15:29:50:25:3c:d2:ad:28:2a:78:29:f6:
49:8b:01:ec:73:c7:84:f6:8b:6b:f3:67:83:1b:b1:
a2:d9:95:f1:6b:d9:65:19:48:9e:73:3d:96:63:10:
65:10:73:c4:8b:e4:46:d5:43:dd:1d:3d:dc:48:25:
cb:7b:06:b8:92:63:ff:ef:22:29:0f:36:0c:74:e1:
a7:ba:0d:22:d3:e4:35:cd:4b:c0:2f:b6:bf:db:c4:
5c:46:6a:51:2e:84:8e:4a:f2:5d:20:db:ae:13:be:
d0:56:d9:c1:e1:b7:e5:f2:38:d6:a9:5e:22:b5:97:
c2:67:52:93:db:b1:7f:c2:43:bb:13:f1:95:71:af:
f9:84:72:de:96:4f:95:bf:5f:b6:6c:36:eb:8e:5e:
b5:1e:6c:08:77:7d:e4:5d:ba:83:63:8e:c2:8c:fb:
f7:1a:8d:1b:38:05:c7:5c:d2:58:1a:4c:63:c3:16:
d2:b0:34:e2:f3:93:e7:14:02:f8:2d:c3:33:4e:f0:
05:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4B:A6:56:2C:8A:FC:67:0F:5A:CA:65:D9:2D:98:99:54:EF:E5:D2
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:95:cf:75:53:cb:56:d6:1a:f4:16:45:75:e1:30:12:df:c0:
6b:78:95:05:45:65:ef:df:79:ba:93:0a:b1:38:e7:d4:48:58:
e1:17:c5:d9:a5:79:f2:1a:d0:37:7b:8a:78:fd:3f:cf:5d:5a:
00:a3:12:17:2c:46:35:43:eb:a6:10:ab:37:89:af:de:26:5e:
4d:00:bb:29:62:4f:87:74:08:94:39:95:bc:9a:be:62:8c:36:
63:24:33:1e:db:b7:40:6f:a8:91:58:49:ee:87:e0:12:85:0a:
29:4f:1d:ef:b8:c8:3a:e8:aa:83:d3:8e:a3:23:e3:a9:c2:64:
80:1d:49:96:73:24:61:16:da:f7:7c:14:91:84:00:c4:60:a5:
0c:e8:1b:27:59:a6:db:6c:05:e8:84:bc:9b:0c:cc:d1:ee:01:
02:5a:a2:f9:9c:24:65:2a:9a:ff:6d:40:6f:96:c3:79:64:00:
6f:79:21:53:f0:33:43:f6:dc:83:ef:c9:f3:08:1e:cb:4c:be:
46:c3:c0:55:b3:84:6e:5f:7c:5f:ca:37:40:ff:95:24:44:95:
ea:41:de:f2:00:3a:8c:6f:0d:05:7c:27:9b:78:9f:1a:c9:c2:
e1:84:90:cc:62:97:60:90:d9:69:da:87:b9:89:e4:1d:92:a2:
fb:62:c0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:31 2025 by rpki-client