Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft
File: HoGZCoqMzX6KT0i7do810mmbeLI.mft (raw, json)
Hash identifier: B+JjIROWP9QXIqI0oemgFxPYOj8yFrxhQ/ylvgDnl6Y=
Subject key identifier: E3:56:14:C3:D4:7D:3F:F6:EB:F3:C3:29:5B:31:03:8A:76:9F:B2:DB
Authority key identifier: 1E:81:99:0A:8A:8C:CD:7E:8A:4F:48:BB:76:8F:35:D2:69:9B:78:B2
Certificate issuer: /CN=1e81990a8a8ccd7e8a4f48bb768f35d2699b78b2
Certificate serial: 0194BC72D3945DB3A12BF011812F6E67D60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft
Manifest number: 0ABC
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: 3_7ZjcR7qXcUgzrUv_gjLsdFhdA.roa (hash: NJmABczjuAOTLl0h6DBnrPjIGOR8/qxj1OB7hIhj4j0=)
2: HoGZCoqMzX6KT0i7do810mmbeLI.crl (hash: JfMSQ+amfYgyJAh82g/dhljyUeHxui5AWWusR1DCjOU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d3:94:5d:b3:a1:2b:f0:11:81:2f:6e:67:d6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e81990a8a8ccd7e8a4f48bb768f35d2699b78b2
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=e35614c3d47d3ff6ebf3c3295b31038a769fb2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:54:43:a4:7a:fc:10:a0:4a:b2:2d:a0:58:
82:be:90:7d:df:a6:f1:17:84:5b:f9:dd:14:4e:74:
c3:a0:b6:a7:b5:33:ea:5a:0e:94:c8:8e:1b:ec:85:
be:ec:12:a5:50:15:3b:f9:54:c2:ad:fc:01:02:c7:
7d:eb:d9:f8:83:ab:47:df:f2:c2:ef:c4:af:b0:6c:
85:d1:8e:72:d4:66:17:ea:23:64:41:b7:2c:e0:19:
4a:84:3c:2f:ee:95:45:9b:5b:67:fb:f3:6e:42:83:
ee:1a:1a:07:db:5f:1e:a5:f3:a1:7c:e9:8d:52:59:
63:16:31:37:7a:d5:f8:8d:46:ff:86:ae:7d:4b:ef:
66:b4:05:4b:fa:3a:98:25:47:18:52:6b:8d:88:a4:
b4:a5:38:28:4c:16:7d:17:e5:38:2f:f8:69:6e:12:
85:04:d0:33:7e:fb:a5:5f:94:93:f8:69:22:b0:8b:
36:8c:c7:70:32:1e:ff:fe:5f:ba:ba:5f:8d:8a:bc:
ab:27:8d:03:ca:95:6b:5e:db:77:b1:75:79:97:c8:
f7:b7:a7:16:c2:fc:23:e5:0d:66:ca:48:1a:bd:f3:
00:40:33:d7:15:be:5a:7c:bb:0c:61:a0:da:a7:43:
8a:59:b3:7c:04:03:9d:f2:a9:1b:26:b4:af:c4:8b:
4e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:56:14:C3:D4:7D:3F:F6:EB:F3:C3:29:5B:31:03:8A:76:9F:B2:DB
X509v3 Authority Key Identifier:
keyid:1E:81:99:0A:8A:8C:CD:7E:8A:4F:48:BB:76:8F:35:D2:69:9B:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3a:e7:ed:91:4f:9c:1e:5a:fb:79:d7:27:93:b2:6a:9f:49:
b9:ee:51:36:ce:8c:2e:47:59:4a:ba:0c:33:f6:78:05:64:d1:
77:a8:dd:06:26:34:53:7d:40:61:05:f3:bb:2a:aa:b1:70:9d:
07:7f:4b:2e:65:bb:e6:b4:01:18:4a:4e:bc:c7:72:7b:6f:16:
ac:a3:41:2c:57:1c:95:4c:d7:5d:6c:a2:04:b1:f5:bd:9c:f5:
91:ec:ae:af:80:52:47:29:03:19:c4:21:24:0d:37:e0:8a:9a:
dd:35:0e:31:0a:fa:8d:62:1b:37:10:5f:57:37:30:83:1f:b8:
98:e9:36:94:d2:02:64:ed:22:99:ac:af:a9:67:bd:c2:3f:33:
78:ae:be:d2:2e:89:bb:eb:e5:aa:ea:24:66:3d:66:ab:8b:bb:
c6:9f:ec:06:12:50:96:db:4b:e9:6d:1c:98:35:02:93:83:b2:
1b:81:23:d8:ba:a5:51:a5:2f:7e:1f:11:37:c5:b3:62:23:b3:
e1:79:20:99:e2:46:57:c7:8e:0c:2e:55:e0:f4:5e:d4:e6:3f:
55:11:38:81:1e:50:fa:ce:25:e9:3a:74:41:26:c2:46:1f:0b:
68:9e:59:35:2a:86:22:0d:5c:cb:fa:8d:7b:47:45:b0:80:e0:
bc:10:d8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:36:01 2025 by rpki-client