Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
File: HQHtI2TsgiZcaIaf5yvnVzGaMes.mft (raw, json)
Hash identifier: 4V/RlaY+fDaHK8xxfE2AoNrTAwsAVFePMNdFAerYtjg=
Subject key identifier: 31:9C:82:04:DB:FF:0A:F2:BC:5B:35:9B:28:92:04:39:56:91:14:15
Authority key identifier: 1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB
Certificate issuer: /CN=1d01ed2364ec82265c68869fe72be757319a31eb
Certificate serial: 0194BD4E96B59A45E3E3824AE8269ACBCBD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
Manifest number: 124C
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: HQHtI2TsgiZcaIaf5yvnVzGaMes.crl (hash: H/MfKXFhFoP7a9PUWYLT0oYy+7QtfS9ktbywbbGdqpo=)
2: VrKnPWUHZqDvzs6ur0GOjZl2i2E.roa (hash: mb8FZcI3peRcYmZtZcg+Q1vM47sFhZh3vrE8fwC75+A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:96:b5:9a:45:e3:e3:82:4a:e8:26:9a:cb:cb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01ed2364ec82265c68869fe72be757319a31eb
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=319c8204dbff0af2bc5b359b2892043956911415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:02:95:97:4f:ad:02:6c:b8:fa:cc:6a:6e:4b:
9d:05:e8:33:3d:47:0c:0e:70:38:62:48:cf:7c:ae:
b8:82:90:44:fe:c4:33:ed:56:7e:d6:e3:86:2f:d6:
0c:38:77:3c:45:e5:e2:bf:c9:d8:2c:cb:a5:ee:15:
f0:01:b1:02:25:81:4b:b8:70:88:6f:62:06:d4:06:
f0:1a:97:86:dd:94:21:03:dc:18:33:c2:17:77:09:
5c:27:82:f4:75:25:ab:2a:76:a4:ac:3f:24:cc:93:
d0:18:db:17:aa:d1:58:57:57:fa:f0:bc:d7:ee:74:
ab:85:c5:03:43:bb:af:84:0c:06:89:35:bc:d4:ff:
67:eb:ad:d5:2e:a2:06:cb:79:75:8d:6c:85:4a:db:
32:79:a5:67:0f:d6:db:33:ae:1d:d5:c6:cf:eb:6f:
36:fe:5d:91:bd:63:f2:c8:64:ff:95:38:4a:14:b2:
af:d3:ba:7f:f9:d9:30:69:09:f4:1f:e4:20:eb:0b:
8d:23:09:09:e9:83:11:00:ab:41:6b:83:5f:69:bc:
d2:e9:f4:ef:b5:3d:06:68:49:ca:5e:a7:5c:d6:92:
a8:7b:67:6f:fc:79:c9:b9:20:61:01:61:d2:3e:91:
7e:d8:05:2b:cb:a0:40:5a:53:a0:db:90:ea:ef:1e:
ba:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9C:82:04:DB:FF:0A:F2:BC:5B:35:9B:28:92:04:39:56:91:14:15
X509v3 Authority Key Identifier:
keyid:1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e7:7c:d6:d2:64:97:f8:a9:2b:ac:e4:31:59:13:6d:33:33:
a0:47:e7:20:1f:3f:af:b1:aa:d5:e1:9d:93:65:bc:98:d8:b9:
d6:ac:41:06:61:75:bf:ed:91:78:69:19:f4:13:d3:a4:8e:b4:
6f:10:22:d0:7c:de:c3:9c:55:00:04:97:26:97:ce:ec:30:4b:
d3:da:cc:54:51:ef:56:6d:42:91:a4:db:93:93:4d:67:56:e2:
3f:3a:1c:ae:f5:42:8b:e8:24:d8:f2:8e:ea:d8:f0:57:5d:3b:
7b:10:9d:30:0a:43:27:d0:06:48:6f:e1:df:7b:8a:87:cd:52:
d5:d8:a7:bf:f5:41:82:8b:5c:67:c3:4a:48:eb:40:cc:fd:16:
19:a0:12:52:42:d6:81:47:d1:cd:61:32:50:29:85:c0:17:a9:
c0:c4:8f:43:6f:07:21:f5:22:11:8f:7a:2d:be:81:82:35:68:
ac:7c:8d:5e:ef:06:5f:6b:bf:7c:b9:7d:56:38:82:92:d5:c2:
e2:3d:12:2d:13:9f:f0:45:50:ae:13:ea:e9:0f:4f:5c:3e:1c:
89:ef:3f:23:92:55:35:47:b6:bf:19:52:a7:f1:83:15:91:2c:
5e:8c:3f:24:41:3f:3f:05:cc:1c:f5:7d:54:65:6c:68:21:78:
8f:dc:0f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:21 2025 by rpki-client