Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft
File: HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft (raw, json)
Hash identifier: Z8jPC2XFPV15E4unR/ayJhGJ7CWED4niy5m6Wwzh+Hs=
Subject key identifier: 85:A2:74:59:D7:34:13:C9:AB:FC:B0:DE:25:CF:8E:9F:74:22:D0:A4
Authority key identifier: 1D:53:C2:C8:BB:73:64:A5:53:24:2F:3F:17:73:36:22:27:B3:0E:94
Certificate issuer: /CN=1d53c2c8bb7364a553242f3f1773362227b30e94
Certificate serial: 0194BCA9E01E100D29B6E86745378ED4F5A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVPCyLtzZKVTJC8_F3M2IiezDpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft
Manifest number: 0AAF
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: 0FwdA4ymMzmi2xIxcm9ptvfrFQY.roa (hash: qKX9mbONM6/Xx6gF2emn3N/lO2VKopekGuKmwl2j208=)
2: HVPCyLtzZKVTJC8_F3M2IiezDpQ.crl (hash: 9VzUBhHBQEljmp86Tq4MHHbDbiML2uQ65EhuQWp8PVM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e0:1e:10:0d:29:b6:e8:67:45:37:8e:d4:f5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d53c2c8bb7364a553242f3f1773362227b30e94
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=85a27459d73413c9abfcb0de25cf8e9f7422d0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6f:c5:ac:40:b7:66:9f:10:1d:fc:6e:ff:6b:
cc:a7:ec:70:9d:e0:1d:ab:0b:63:2a:db:3f:fe:b2:
9e:e4:54:2b:98:c5:fb:53:9d:ce:68:62:82:82:b3:
c3:b9:ef:a2:ad:6d:d5:5d:a6:eb:e1:a1:2d:67:af:
8c:92:c8:d9:1a:e8:4f:d8:a8:7b:d5:e1:c4:7f:76:
f2:85:0a:78:43:c0:06:c4:a5:06:fb:f8:0c:2e:8e:
b3:2c:bb:e8:fa:9e:da:ca:22:2c:ee:4d:d1:fd:ee:
52:d5:9c:41:3e:7e:53:bf:45:0a:19:3e:e2:49:e9:
e4:2e:f4:a9:a1:f6:d1:1a:e8:61:5f:6b:29:f8:ce:
33:4c:48:5e:8f:ec:4e:ef:41:08:c0:d2:b9:df:ca:
96:c5:24:1d:70:6d:8c:ed:ad:53:30:d4:47:8a:86:
6f:7c:a8:5c:4a:90:13:98:2b:3d:74:93:00:d3:e9:
8b:94:f6:ef:51:18:7d:62:50:1d:80:fa:df:8d:e7:
82:74:fc:1c:ed:b5:e0:d5:04:de:b7:50:c0:bd:c1:
4e:27:3f:7b:3a:d0:97:d8:a0:23:40:e9:45:78:fe:
f1:95:86:a1:1d:15:ff:16:02:86:7c:c2:60:af:ba:
61:1f:f1:20:d5:1d:a5:09:db:f3:38:12:cc:49:82:
55:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A2:74:59:D7:34:13:C9:AB:FC:B0:DE:25:CF:8E:9F:74:22:D0:A4
X509v3 Authority Key Identifier:
keyid:1D:53:C2:C8:BB:73:64:A5:53:24:2F:3F:17:73:36:22:27:B3:0E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVPCyLtzZKVTJC8_F3M2IiezDpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6a:95:dc:d1:18:73:6f:9b:88:c0:16:6f:69:51:8a:31:1c:
cf:d8:58:ee:a7:9f:ad:b4:36:70:d8:37:20:fc:8b:3e:9b:ef:
56:3c:7c:1e:c1:ee:28:1a:4a:07:ea:a7:ec:d5:9e:ed:0a:e0:
9a:d5:1c:43:de:66:77:96:85:5e:26:a8:eb:f4:19:a9:83:c9:
fe:18:83:00:d9:4d:ea:2f:31:40:77:42:cd:ea:9c:ab:c9:d3:
bf:63:6d:6f:d7:54:fc:4a:6f:3f:0f:44:8f:4a:90:26:88:3d:
c7:39:13:8f:2c:0d:f3:c5:fa:2d:00:9e:94:c5:19:b3:29:ca:
7d:4e:5e:55:8c:40:a7:45:38:15:ed:90:df:aa:cf:2a:39:46:
f8:6f:91:f6:d3:b6:01:a8:53:c3:23:f1:2a:3e:92:4c:c3:aa:
45:d0:a5:b7:3d:4b:56:5c:14:28:c4:ec:05:0c:85:05:a8:78:
ca:23:d1:59:7b:c7:a7:d3:b8:87:fb:a6:2a:db:44:c7:ed:f4:
e1:9d:21:9c:f5:3b:88:a0:7e:81:f4:63:58:7d:c3:4f:87:1b:
ca:30:84:f5:bd:d8:73:4e:4b:9a:e3:6f:fd:fb:03:19:fe:7b:
44:23:18:02:9c:c4:62:d3:b6:23:c0:84:a0:d7:3c:95:0a:80:
0d:38:09:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:36 2025 by rpki-client