Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
File: HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json)
Hash identifier: bfk5ag3xlQyxWWleGohvanU2DtVfI4ylQ39BVNPQ6hU=
Subject key identifier: 94:67:51:EB:92:57:2C:3C:40:5F:E5:E6:78:81:CA:B2:E9:96:47:B3
Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Certificate serial: 0194BD4E94733E55C1DEECB681EA0171F4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
Manifest number: 10B0
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: 7/gI6hPLFoH55zXGxw6C49xt4nP0G1PwQokNG1rZsgc=)
2: UYoraKeZIaoa2wVuoomivtXbxRQ.roa (hash: 64MFcCCoNK8y5TAb4sImtBVWhOrUKow/FlcIn/ABu34=)
3: bce9mz0b3BUGOMHAJWY8rMCRxek.roa (hash: IEeWzdb92Rel/sak0WfNMG3iDCwAJHBVrKmaRSr9eNE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:94:73:3e:55:c1:de:ec:b6:81:ea:01:71:f4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=946751eb92572c3c405fe5e67881cab2e99647b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:4d:6b:41:a1:86:3e:83:b6:ec:cb:1e:17:
50:ae:58:f1:68:58:cb:e0:7b:b6:55:86:64:99:ad:
f6:ae:06:9e:98:72:7d:14:b6:70:37:8e:12:d5:a7:
83:6f:b7:73:8a:74:93:2d:2d:5d:90:49:df:7e:a0:
05:3b:42:0c:d2:67:2b:73:b1:2f:23:3a:d2:08:4a:
f7:04:76:3c:f4:3d:11:fb:6f:7c:c1:3e:65:4c:1a:
91:19:4b:f7:06:26:3f:c9:e0:cb:97:17:c7:b5:1b:
05:c1:a9:8a:5f:8b:3a:9d:59:08:52:09:07:02:9c:
8a:f7:83:7e:0f:fd:69:5c:82:a5:fa:0d:d9:84:d0:
cf:46:16:16:a7:01:58:c6:23:59:31:23:64:37:26:
ac:98:74:45:76:58:cf:03:37:75:e9:fe:d6:a9:03:
b9:e7:11:ae:03:e5:2f:dc:90:5a:d5:57:3a:c7:1b:
50:d3:53:44:77:31:08:9b:23:4c:05:f2:1f:60:10:
46:ce:32:b8:33:f7:36:b2:86:98:44:7a:88:b6:bb:
46:e6:6f:17:ff:51:72:88:c7:89:94:f6:6f:e2:c8:
af:82:d3:da:8a:65:dc:a1:34:0f:db:c8:0a:03:2e:
f8:a4:8d:05:5d:f0:d5:26:80:95:2c:24:ab:08:69:
be:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:67:51:EB:92:57:2C:3C:40:5F:E5:E6:78:81:CA:B2:E9:96:47:B3
X509v3 Authority Key Identifier:
keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ba:5b:c4:2c:83:72:da:a8:73:c9:3c:46:fe:e3:20:46:5d:
8c:e5:e4:56:32:ab:95:af:4c:6a:40:af:ee:10:d9:39:e7:65:
40:ec:ad:a2:88:81:02:70:e0:3c:5a:19:80:f3:fa:0a:87:3e:
2c:d0:67:5c:ea:bf:f0:ed:66:9c:3b:16:37:bd:0f:e0:8d:40:
de:38:5b:b7:a1:2b:3e:bb:36:b6:7b:8b:46:cc:a0:73:59:63:
6e:b0:d9:9d:83:f2:d6:9b:5f:2f:bd:e6:2b:12:39:ae:54:8c:
53:3a:bf:00:65:85:e5:17:0b:ed:34:47:b9:ad:53:41:8e:3e:
2c:45:5e:b9:67:7c:cb:85:57:ef:65:ba:34:ba:fd:79:a9:45:
f3:dd:07:41:7b:75:83:85:e8:50:1d:1d:a8:06:06:66:0e:10:
5f:00:04:6c:d3:fb:70:1a:c0:e5:a6:ac:b9:25:25:0e:95:3f:
89:ac:90:36:ea:6c:8b:81:40:e3:9e:73:de:e1:c9:e6:e1:06:
20:aa:68:8f:ed:db:28:6e:9f:bc:17:46:34:40:0e:05:f0:6b:
80:86:c1:79:28:be:bd:55:55:57:52:ea:d8:c8:40:bb:b2:3a:
db:a4:39:48:86:aa:76:45:02:12:5e:c5:da:88:58:43:30:0a:
5a:39:23:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:34 2025 by rpki-client